Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
File: 3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json)
Hash identifier: qXbhr9R+hkcXjPu3bcAQ8Jv2ONSn3gy80Pi10xtcP54=
Subject key identifier: F5:F9:45:DB:C6:1B:1C:90:7D:F4:4A:09:7B:1C:06:F3:8B:55:7D:57
Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
Certificate issuer: /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Certificate serial: 019D2628994A73121EBF58CC8F220FE3AEC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
Manifest number: 12C0
Signing time: Wed 25 Mar 2026 18:01:28 +0000
Manifest this update: Wed 25 Mar 2026 18:01:28 +0000
Manifest next update: Thu 26 Mar 2026 18:01:28 +0000
Files and hashes: 1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: LEp9POJ9kmB5zqavNk/f+UfxC7ualzDnJPltsZmcjdA=)
2: aRFa0aicATO9EZ84Sd0rRZqpUDM.roa (hash: 3/X7mlyrk9jnsPYw8nohsn6KsOPiCxOy8zcW+IBYz8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:99:4a:73:12:1e:bf:58:cc:8f:22:0f:e3:ae:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Validity
Not Before: Mar 25 18:01:28 2026 GMT
Not After : Mar 26 18:01:28 2026 GMT
Subject: CN=f5f945dbc61b1c907df44a097b1c06f38b557d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:36:ac:a5:39:39:79:a9:b5:15:e9:48:e4:
16:eb:e2:c0:30:14:0a:af:6d:4a:9a:b3:0a:32:43:
43:d6:85:ad:aa:ba:cb:77:97:d7:7b:38:6e:af:93:
fc:b1:85:c0:a6:21:e2:a2:81:4d:44:d6:cf:1c:4f:
96:7d:65:ec:47:a3:ae:7a:b1:a6:f2:32:11:5c:9f:
08:7f:fe:52:7e:19:f9:ad:e8:d1:c4:36:10:d5:32:
6e:6c:f3:85:24:da:cb:df:72:af:3f:6f:d4:c2:dd:
78:e7:78:6d:37:56:26:b4:ba:0d:c1:9e:14:99:44:
1c:78:69:26:03:62:16:7d:e2:f2:92:12:c4:b7:36:
91:82:9a:a5:54:6c:1d:d0:cb:38:15:aa:cb:11:08:
01:82:57:16:40:20:08:8c:ac:a3:ad:ca:8e:f4:b9:
97:a7:fa:1a:f4:49:50:60:52:a1:4b:3a:bf:0f:dc:
be:96:0a:0c:43:c0:73:ef:d2:e9:b1:fc:7c:ec:0c:
4f:04:42:d9:ab:50:d7:f8:04:14:e5:19:25:b7:ec:
fc:cf:10:30:40:b9:90:9b:24:08:7f:49:ab:66:67:
c9:5d:09:b3:e0:de:fe:e6:a2:29:b1:e6:94:97:e4:
c9:a9:47:f6:64:fd:a2:f4:a5:e2:b7:9e:42:10:23:
d5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F9:45:DB:C6:1B:1C:90:7D:F4:4A:09:7B:1C:06:F3:8B:55:7D:57
X509v3 Authority Key Identifier:
keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:af:13:c5:d4:b3:2f:10:e1:d8:3f:34:96:05:7f:9c:c4:e0:
7a:07:b4:ce:4c:75:17:7a:25:a0:90:43:0a:39:d2:01:6c:0d:
99:ca:d4:26:24:4c:9e:7c:c0:eb:24:9e:1d:a5:1f:15:5d:25:
40:ae:32:a7:4c:73:fc:4c:6a:aa:85:85:70:fc:45:49:b9:02:
4f:bc:6a:e5:aa:d6:23:59:8b:b0:29:98:2a:1a:16:e4:4e:08:
fe:e4:4b:66:e3:35:50:aa:db:85:83:99:c1:de:a2:81:e0:2f:
60:9d:33:3a:de:e8:e6:5c:8f:14:39:d7:b4:5c:2a:cc:fc:3e:
4b:9a:16:12:be:42:2d:a7:52:0d:42:b6:c9:97:40:66:5e:64:
4b:ff:30:31:8f:95:3d:48:b9:f7:37:3a:50:08:be:d0:e7:7f:
a9:c3:67:86:3d:0c:5e:50:d3:b3:2a:82:a1:2d:0d:9c:2e:7a:
a0:df:c8:d9:9e:62:70:6d:71:39:ed:65:65:f7:52:a8:d8:2f:
2f:d4:76:7d:c9:1a:5f:0d:b5:53:be:e4:48:e6:96:d7:60:15:
24:b2:fe:21:37:e2:93:ff:fd:80:aa:04:d0:c0:88:fc:39:9c:
a5:40:66:85:97:0e:49:6c:9a:47:7b:9a:4c:b7:30:01:3f:96:
d6:5f:48:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKJlKcxIev1jMjyIP467JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZjg1YzM2YzY5NmQ1ZGIyY2JiNDhmZDQzZTgyMTczN2Vl
MzQyMjcwHhcNMjYwMzI1MTgwMTI4WhcNMjYwMzI2MTgwMTI4WjAzMTEwLwYDVQQD
EyhmNWY5NDVkYmM2MWIxYzkwN2RmNDRhMDk3YjFjMDZmMzhiNTU3ZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK82rKU5OXmptRXpSOQW6+LAMBQK
r21KmrMKMkND1oWtqrrLd5fXezhur5P8sYXApiHiooFNRNbPHE+WfWXsR6OuerGm
8jIRXJ8If/5Sfhn5rejRxDYQ1TJubPOFJNrL33KvP2/Uwt1453htN1YmtLoNwZ4U
mUQceGkmA2IWfeLykhLEtzaRgpqlVGwd0Ms4FarLEQgBglcWQCAIjKyjrcqO9LmX
p/oa9ElQYFKhSzq/D9y+lgoMQ8Bz79Lpsfx87AxPBELZq1DX+AQU5Rklt+z8zxAw
QLmQmyQIf0mrZmfJXQmz4N7+5qIpseaUl+TJqUf2ZP2i9KXit55CECPVNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPX5RdvGGxyQffRKCXscBvOLVX1XMB8GA1UdIwQY
MBaAFNz4XDbGltXbLLtI/UPoIXN+40InMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jZmJjNjItNWQ1NC00MzI3LWIwNzIt
MGY1MmY4NjcxNzhkLzEvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9jZmJjNjItNWQ1NC00MzI3LWIwNzItMGY1MmY4NjcxNzhk
LzEvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzK8TxdSz
LxDh2D80lgV/nMTgege0zkx1F3oloJBDCjnSAWwNmcrUJiRMnnzA6ySeHaUfFV0l
QK4yp0xz/ExqqoWFcPxFSbkCT7xq5arWI1mLsCmYKhoW5E4I/uRLZuM1UKrbhYOZ
wd6igeAvYJ0zOt7o5lyPFDnXtFwqzPw+S5oWEr5CLadSDUK2yZdAZl5kS/8wMY+V
PUi59zc6UAi+0Od/qcNnhj0MXlDTsyqCoS0NnC56oN/I2Z5icG1xOe1lZfdSqNgv
L9R2fckaXw21U77kSOaW12AVJLL+ITfik//9gKoE0MCI/DmcpUBmhZcOSWyaR3ua
TLcwAT+W1l9Izw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:36:34 2026 by rpki-client