Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
File: 3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json)
Hash identifier: /fOUOwIAEnEuHUy02J8XjtAGZTEBGNKLg7LcPf3ptBk=
Subject key identifier: 35:F8:DE:50:72:19:88:72:9F:FA:0D:0F:B5:A2:83:11:D1:07:CD:CD
Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
Certificate issuer: /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Certificate serial: 01A0D2A5CC9B262B9FBAE84753E8CEDB110D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
Manifest number: 14A7
Signing time: Thu 24 Sep 2026 09:01:16 +0000
Manifest this update: Thu 24 Sep 2026 09:01:16 +0000
Manifest next update: Fri 25 Sep 2026 09:01:16 +0000
Files and hashes: 1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: VofeGzJDwZj/T9iYMnd8eTvDhjBOouRE9OGUejyAppY=)
2: aRFa0aicATO9EZ84Sd0rRZqpUDM.roa (hash: 3/X7mlyrk9jnsPYw8nohsn6KsOPiCxOy8zcW+IBYz8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:cc:9b:26:2b:9f:ba:e8:47:53:e8:ce:db:11:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Validity
Not Before: Sep 24 09:01:16 2026 GMT
Not After : Sep 25 09:01:16 2026 GMT
Subject: CN=35f8de50721988729ffa0d0fb5a28311d107cdcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1b:20:8f:41:6f:cc:34:7a:2f:19:bb:eb:eb:
43:1e:a7:b2:29:7f:31:5a:7e:56:a9:b0:c7:c7:61:
01:40:1e:3b:ca:36:90:a7:30:fb:7e:99:72:91:2e:
30:f4:13:6b:b4:5a:8e:e9:07:58:9c:fd:0e:0e:44:
d9:39:a6:2c:7f:be:9a:5b:a0:5c:dd:45:12:e5:a5:
d4:74:e9:ff:d8:54:d8:5e:39:d1:6f:70:ec:65:64:
56:62:67:cb:2f:53:98:42:ae:6a:20:6a:5b:6d:1c:
72:db:fe:33:e7:a8:31:d4:e5:84:c5:08:05:a4:d9:
fa:d7:19:7e:fc:0c:e4:f7:2e:b6:b8:84:dd:20:87:
92:95:41:f5:9c:38:ef:14:a3:f8:53:b5:c3:2a:72:
5c:62:ee:9b:3a:40:59:4c:33:06:95:19:3a:b1:fd:
9d:f3:be:f4:81:17:57:8b:5a:a2:23:1e:f4:42:96:
c8:ab:74:0a:53:b4:14:31:d5:10:3c:79:ac:4d:53:
4c:99:d1:af:13:23:0e:0a:71:0d:d2:9f:a3:24:9c:
18:1f:78:6b:44:78:52:93:c8:8e:7f:c0:0b:75:5b:
59:e2:33:00:ae:00:57:7a:4c:e4:38:97:db:e3:70:
66:a9:73:dc:72:3a:9a:76:f0:cc:d4:01:59:e5:e4:
51:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F8:DE:50:72:19:88:72:9F:FA:0D:0F:B5:A2:83:11:D1:07:CD:CD
X509v3 Authority Key Identifier:
keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5d:78:41:fc:b5:fb:fc:e2:5e:1f:b4:69:93:a8:a7:76:d5:
e2:6b:97:d6:0d:0b:7c:74:af:b0:43:10:f9:2c:a1:02:d9:52:
20:e5:84:0a:a6:ed:0f:62:75:23:01:cf:98:96:e6:0f:1d:ba:
a3:d7:85:0b:4d:fa:1a:48:31:db:89:c7:aa:e5:58:a7:d6:b1:
22:25:bd:aa:e7:bf:cf:d1:2d:b4:6c:85:8c:64:70:9a:86:2f:
ac:83:8a:d7:63:38:81:25:a1:cf:7f:6c:db:ee:e3:d8:18:8b:
2e:1f:b2:63:e8:05:ea:e1:48:bf:1a:5f:22:f7:d7:12:c9:47:
ae:bf:9a:e4:3c:94:36:6a:66:db:bb:a5:9f:8f:0f:8e:36:40:
af:87:76:c0:25:76:6a:15:28:39:40:c0:79:5c:2d:d4:2f:e0:
7e:8d:b6:5b:75:48:01:f2:f9:d3:92:3f:6f:c7:16:f1:3b:e4:
ae:9c:22:36:bf:95:bf:a9:7a:99:34:1b:a6:6d:4d:e8:dc:e4:
94:fe:bf:b5:70:0f:67:13:40:66:15:a2:73:15:0c:54:c5:8d:
e2:5d:fe:f3:64:bd:89:5a:be:b8:a3:7f:12:3c:7f:d2:ea:df:
1f:2b:f7:7d:e8:7b:aa:19:1f:1c:04:ec:f1:39:8b:3c:c6:7c:
14:0d:43:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:00:10 2026 by rpki-client