Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
File: 3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json)
Hash identifier: 31JH6JG7w/4aU3UiyoI3V1VfL9fn2vCR3tizQPQ2RbU=
Subject key identifier: 70:35:64:4C:AF:8A:7D:D8:45:2D:6E:4B:C6:C0:82:F8:7E:A7:BB:AD
Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
Certificate issuer: /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Certificate serial: 019E1D592F242A1EB8268032CF67E81657EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
Manifest number: 1340
Signing time: Tue 12 May 2026 18:00:44 +0000
Manifest this update: Tue 12 May 2026 18:00:44 +0000
Manifest next update: Wed 13 May 2026 18:00:44 +0000
Files and hashes: 1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: jxCnYzqwnSEW+37eoe8oX63kzOqIe922rF2xJI+s6iM=)
2: aRFa0aicATO9EZ84Sd0rRZqpUDM.roa (hash: 3/X7mlyrk9jnsPYw8nohsn6KsOPiCxOy8zcW+IBYz8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:2f:24:2a:1e:b8:26:80:32:cf:67:e8:16:57:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Validity
Not Before: May 12 18:00:44 2026 GMT
Not After : May 13 18:00:44 2026 GMT
Subject: CN=7035644caf8a7dd8452d6e4bc6c082f87ea7bbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:da:28:47:c5:a2:97:96:3c:40:10:88:70:37:
a7:fa:f1:cf:b6:cc:c6:0f:e0:95:e5:36:b8:9c:05:
7e:67:5f:ca:69:6d:2b:df:b6:4a:56:b9:82:db:b1:
5a:c0:db:55:86:64:f1:f8:ad:5c:a4:15:4e:ff:18:
a7:fc:28:10:d7:39:4f:34:30:17:f2:4a:4d:5c:8b:
a5:c2:6b:c1:32:78:40:02:ad:13:f0:78:87:fe:cd:
26:c0:ce:89:d0:5b:42:28:14:65:4c:7b:f7:f1:4c:
fa:b1:c3:10:6b:01:4d:85:34:55:55:a8:3f:54:85:
0c:ec:65:9a:6a:db:71:b0:71:69:c4:74:0e:eb:9f:
fe:6e:30:88:6a:aa:6f:01:db:c7:6f:85:ed:1a:3d:
31:47:0a:2b:59:14:78:2b:0e:ee:18:68:4f:66:f0:
8a:03:42:51:44:e6:ea:7f:d8:e3:bd:63:7d:55:f5:
29:72:bd:26:c4:30:8b:d7:54:e8:1d:d3:c5:ee:3f:
85:27:e8:73:d9:3a:a0:d1:17:ee:62:30:fd:b1:c9:
58:58:cd:25:ca:04:41:ed:74:bf:a5:79:d7:68:f7:
de:24:5c:67:7d:3f:53:fa:82:50:df:6a:0f:60:38:
b9:c0:bc:1c:7a:29:13:be:f9:12:8e:2d:72:4b:8a:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:35:64:4C:AF:8A:7D:D8:45:2D:6E:4B:C6:C0:82:F8:7E:A7:BB:AD
X509v3 Authority Key Identifier:
keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bb:45:c9:13:b1:c1:b5:49:1b:cd:9c:ce:0a:48:a0:32:2f:
9c:49:60:29:4a:60:7c:b6:89:ac:2e:94:e0:75:da:e2:c6:c5:
ab:5d:d3:4a:69:98:6a:f5:61:a3:dd:5b:3c:d8:ab:3e:95:3e:
a2:3d:d0:26:1a:f7:49:43:7f:05:00:94:1d:3a:cb:aa:01:47:
ec:03:91:9d:db:96:86:07:c4:a5:34:63:5c:ec:41:01:bd:e2:
0b:35:17:f4:63:fe:7b:73:63:6d:31:21:b6:77:40:71:42:d2:
49:99:13:f9:fc:26:60:3c:d2:b1:2f:43:6b:3f:28:2c:d8:0c:
38:d5:c6:9e:30:67:27:75:9f:a0:59:be:a9:11:48:5a:be:0c:
f3:2d:d1:5f:ba:33:75:46:eb:32:e4:23:07:b4:ba:52:39:e3:
94:95:79:52:9d:0f:9d:21:ec:6a:0a:d4:31:94:7a:e8:fb:7f:
67:23:f3:63:a1:99:d1:3a:30:10:93:81:54:67:13:8f:2b:86:
b2:09:a7:11:69:c9:44:c5:b3:33:4d:a9:ae:0c:ba:66:b9:0c:
b3:21:1b:5b:3c:87:b9:6d:18:2a:01:23:af:85:ca:59:ae:5e:
6e:94:c8:17:a4:b9:f7:3a:db:75:8d:de:1f:41:9f:9f:6d:40:
a5:1c:05:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWS8kKh64JoAyz2foFlfrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZjg1YzM2YzY5NmQ1ZGIyY2JiNDhmZDQzZTgyMTczN2Vl
MzQyMjcwHhcNMjYwNTEyMTgwMDQ0WhcNMjYwNTEzMTgwMDQ0WjAzMTEwLwYDVQQD
Eyg3MDM1NjQ0Y2FmOGE3ZGQ4NDUyZDZlNGJjNmMwODJmODdlYTdiYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59ooR8Wil5Y8QBCIcDen+vHPtszG
D+CV5Ta4nAV+Z1/KaW0r37ZKVrmC27FawNtVhmTx+K1cpBVO/xin/CgQ1zlPNDAX
8kpNXIulwmvBMnhAAq0T8HiH/s0mwM6J0FtCKBRlTHv38Uz6scMQawFNhTRVVag/
VIUM7GWaattxsHFpxHQO65/+bjCIaqpvAdvHb4XtGj0xRworWRR4Kw7uGGhPZvCK
A0JRRObqf9jjvWN9VfUpcr0mxDCL11ToHdPF7j+FJ+hz2Tqg0RfuYjD9sclYWM0l
ygRB7XS/pXnXaPfeJFxnfT9T+oJQ32oPYDi5wLwceikTvvkSji1yS4pIpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHA1ZEyvin3YRS1uS8bAgvh+p7utMB8GA1UdIwQY
MBaAFNz4XDbGltXbLLtI/UPoIXN+40InMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jZmJjNjItNWQ1NC00MzI3LWIwNzIt
MGY1MmY4NjcxNzhkLzEvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9jZmJjNjItNWQ1NC00MzI3LWIwNzItMGY1MmY4NjcxNzhk
LzEvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7tFyROx
wbVJG82czgpIoDIvnElgKUpgfLaJrC6U4HXa4sbFq13TSmmYavVho91bPNirPpU+
oj3QJhr3SUN/BQCUHTrLqgFH7AORnduWhgfEpTRjXOxBAb3iCzUX9GP+e3NjbTEh
tndAcULSSZkT+fwmYDzSsS9Daz8oLNgMONXGnjBnJ3WfoFm+qRFIWr4M8y3RX7oz
dUbrMuQjB7S6UjnjlJV5Up0PnSHsagrUMZR66Pt/ZyPzY6GZ0TowEJOBVGcTjyuG
sgmnEWnJRMWzM02prgy6ZrkMsyEbWzyHuW0YKgEjr4XKWa5ebpTIF6S59zrbdY3e
H0Gfn21ApRwFJQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:16:23 2026 by rpki-client