Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
File: 3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json)
Hash identifier: eHS5+mr+ArBlaCDBNEsftAx0kHOmQv+/ITrKHUkAabU=
Subject key identifier: 5C:77:13:40:F3:1F:F8:4D:F1:23:47:E5:D2:82:86:46:FB:4A:12:FD
Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
Certificate issuer: /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Certificate serial: 01A0CEC8B8327B83EF4A6DF8AB408EB2A0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
Manifest number: 14A5
Signing time: Wed 23 Sep 2026 15:00:55 +0000
Manifest this update: Wed 23 Sep 2026 15:00:55 +0000
Manifest next update: Thu 24 Sep 2026 15:00:55 +0000
Files and hashes: 1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: h6/Vn6qyzKwWO4PupK6JRg2gQAl+1dUn2p9ILjAX4fs=)
2: aRFa0aicATO9EZ84Sd0rRZqpUDM.roa (hash: 3/X7mlyrk9jnsPYw8nohsn6KsOPiCxOy8zcW+IBYz8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:c8:b8:32:7b:83:ef:4a:6d:f8:ab:40:8e:b2:a0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Validity
Not Before: Sep 23 15:00:55 2026 GMT
Not After : Sep 24 15:00:55 2026 GMT
Subject: CN=5c771340f31ff84df12347e5d2828646fb4a12fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:ec:a3:42:ad:6e:be:9d:68:53:f9:0c:c9:
1a:64:db:27:61:75:07:05:ee:3f:1a:e9:62:c6:e5:
fc:eb:95:60:b0:59:0f:51:e0:08:e9:47:77:8b:83:
e0:e7:09:47:8c:17:e3:2d:1e:43:16:d4:b5:92:c8:
6d:e6:06:66:16:49:49:d5:fb:db:0a:99:20:63:4b:
c0:73:78:8a:e1:f5:d1:9a:f1:23:7b:00:ef:9f:61:
fd:45:60:b6:e7:0a:44:5a:e9:86:2a:ae:bc:9f:fe:
c8:e3:92:23:01:44:7c:ee:22:71:c2:db:15:81:95:
bb:80:bc:52:58:ad:c3:2b:75:08:50:7b:1a:67:8f:
91:28:07:fc:19:a7:71:87:ec:6c:65:ef:5f:63:14:
c7:ee:05:e2:e0:7a:21:a2:15:44:13:bb:86:e4:be:
0f:c9:b7:15:48:3e:41:18:4d:85:39:12:88:18:04:
96:1c:4b:1b:08:d6:8b:66:ed:f4:de:49:4e:f5:c5:
06:54:b4:b7:43:56:a8:c4:a0:e8:e0:b4:6b:7f:6f:
41:8d:1b:c5:0e:b7:00:26:72:1d:8e:c0:9c:9a:20:
1f:7f:ac:e3:32:aa:ce:84:0c:68:2f:61:14:96:ac:
1f:0e:51:b8:1e:89:56:16:ce:02:70:9a:03:85:47:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:77:13:40:F3:1F:F8:4D:F1:23:47:E5:D2:82:86:46:FB:4A:12:FD
X509v3 Authority Key Identifier:
keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:df:ef:9b:42:66:ff:4f:c9:a0:e5:74:ef:e8:e2:23:36:ef:
42:aa:2c:3d:f3:52:da:0c:e0:e1:16:00:9a:b1:87:97:88:9e:
92:3f:c5:fe:54:91:24:68:c7:ff:3e:90:eb:9c:54:f9:e1:32:
8b:8e:e5:70:85:07:f7:eb:cc:c2:9b:00:83:17:78:a6:a7:78:
90:bd:9b:1c:f9:da:f4:8f:53:eb:f9:ea:75:63:26:68:39:b2:
46:7d:65:ff:31:94:3e:3e:42:86:86:dc:48:92:2d:47:c5:12:
99:96:fd:54:52:7c:62:c9:ec:51:ac:76:49:d1:ab:96:b4:6c:
61:25:77:68:1f:e1:40:fc:e6:56:66:b9:e2:da:c2:1e:b3:90:
e5:a0:51:28:89:6f:e4:57:de:a0:ba:b1:76:1a:e7:74:19:eb:
5d:52:a4:cc:d3:e7:7a:a9:ef:04:f5:b0:5b:f4:43:14:4b:49:
ae:f2:d3:ca:a8:23:17:9c:e8:15:ec:dc:07:45:ce:d9:3e:a2:
c4:f3:7b:be:2c:ea:c4:27:72:92:4f:77:2d:0f:8b:2e:7c:21:
7e:44:e2:ef:74:90:7f:5f:cb:68:02:dd:4d:c1:19:9a:7b:39:
d0:84:36:2b:5e:b4:b4:73:ce:28:e3:5a:e2:07:f5:b3:3d:1e:
b4:12:40:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:51:51 2026 by rpki-client