Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
File: 3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json)
Hash identifier: DjwIfoj0LBVmA2yF/LYKXO+kWFZ1f0WCdbkftszTGA4=
Subject key identifier: 15:6C:2D:D4:7D:5C:CE:2E:D7:F0:10:FE:00:09:BB:EA:BC:3A:62:FA
Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
Certificate issuer: /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Certificate serial: 019DA3AEC5FB88D85F20177D0603705F7D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
Manifest number: 1301
Signing time: Sun 19 Apr 2026 03:00:33 +0000
Manifest this update: Sun 19 Apr 2026 03:00:33 +0000
Manifest next update: Mon 20 Apr 2026 03:00:33 +0000
Files and hashes: 1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: C/AVd++cTOifCBlqeoFVIkqQYYos96j2lqG+hmvtBU8=)
2: aRFa0aicATO9EZ84Sd0rRZqpUDM.roa (hash: 3/X7mlyrk9jnsPYw8nohsn6KsOPiCxOy8zcW+IBYz8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:c5:fb:88:d8:5f:20:17:7d:06:03:70:5f:7d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Validity
Not Before: Apr 19 03:00:33 2026 GMT
Not After : Apr 20 03:00:33 2026 GMT
Subject: CN=156c2dd47d5cce2ed7f010fe0009bbeabc3a62fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:8f:4a:03:4d:92:fb:7f:55:0e:59:f5:0a:
af:cf:c1:3a:37:ac:c6:b7:75:71:0d:dd:29:c7:d0:
8b:8d:46:07:dd:d1:0c:2a:64:8c:19:0f:42:aa:3a:
f7:fa:48:5f:d2:f2:cc:3f:d2:ce:99:bf:a6:e2:0c:
39:6a:88:db:76:7a:28:38:1a:6b:91:ab:6e:0b:f0:
01:63:dc:41:7c:24:9d:cf:07:35:ad:35:fe:46:59:
00:55:07:c1:67:38:7b:4c:ef:ad:9d:8b:51:85:39:
59:60:00:b8:75:66:b1:00:e5:40:ee:d8:4c:c6:b7:
50:24:f5:a1:9c:fb:77:01:87:ef:25:df:bc:2b:71:
e3:3a:99:bd:a0:08:f3:60:ff:a6:f7:d8:c6:14:38:
6c:b2:0c:a4:9e:48:8c:56:eb:7d:90:a7:df:c9:d4:
a1:ad:91:eb:bc:bb:2f:da:24:5e:6d:e4:a0:02:ce:
05:c1:82:59:6c:04:03:b2:80:e4:2f:91:a4:cf:b4:
1e:54:28:56:5e:5c:cc:73:80:df:5a:bf:12:fe:11:
ff:cd:ce:ef:15:6a:64:83:ed:e3:55:6c:bc:1c:fc:
95:b7:85:c4:f5:6e:d3:8a:dc:a3:db:b2:37:57:71:
55:4d:79:5d:f1:d1:a9:22:86:e3:47:63:32:4d:bb:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6C:2D:D4:7D:5C:CE:2E:D7:F0:10:FE:00:09:BB:EA:BC:3A:62:FA
X509v3 Authority Key Identifier:
keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:02:99:b9:3d:76:dc:9b:b1:29:5a:28:b5:99:45:d7:a2:cc:
f1:99:cb:c8:97:9b:7b:28:b2:91:78:a4:12:e4:45:78:9b:53:
67:59:24:c9:7c:b6:d6:b2:f8:bb:54:07:f8:7c:fe:8e:96:2e:
58:3d:c0:3d:f7:d4:7f:40:48:e4:bb:02:04:84:69:af:de:37:
5c:24:a5:38:5e:6c:1f:49:af:7f:0d:1d:3d:ac:5e:b5:59:a3:
30:20:1d:1b:ef:db:49:d8:96:33:73:c1:31:f5:e5:80:2f:00:
a7:53:5e:cb:cf:3a:fc:13:41:11:6b:1e:1b:e9:6d:d3:0a:46:
99:7c:3a:29:2d:c9:e1:e2:8e:ef:23:4c:e9:5f:64:3d:fe:5f:
a8:ba:e2:7b:ea:ef:3b:94:81:d5:89:af:41:8d:1f:3e:0b:2b:
c7:10:d5:57:63:74:ea:1e:fe:6a:64:bb:ee:71:8a:c1:b3:e6:
cd:7d:8c:63:b0:8c:07:a8:51:2c:cd:8e:3d:20:b6:98:c0:0e:
7c:65:7f:92:05:82:2d:ed:f7:b2:4b:a9:b3:d5:e9:1b:d8:cf:
ea:1c:c1:f6:ce:2f:5c:9e:c1:3b:4a:b2:47:7f:4a:0e:67:58:
bd:8f:48:ce:dd:c3:a0:94:92:58:1f:ea:79:18:d7:df:f3:47:
ed:69:4f:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jrsX7iNhfIBd9BgNwX31YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZjg1YzM2YzY5NmQ1ZGIyY2JiNDhmZDQzZTgyMTczN2Vl
MzQyMjcwHhcNMjYwNDE5MDMwMDMzWhcNMjYwNDIwMDMwMDMzWjAzMTEwLwYDVQQD
EygxNTZjMmRkNDdkNWNjZTJlZDdmMDEwZmUwMDA5YmJlYWJjM2E2MmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbiPSgNNkvt/VQ5Z9Qqvz8E6N6zG
t3VxDd0px9CLjUYH3dEMKmSMGQ9Cqjr3+khf0vLMP9LOmb+m4gw5aojbdnooOBpr
katuC/ABY9xBfCSdzwc1rTX+RlkAVQfBZzh7TO+tnYtRhTlZYAC4dWaxAOVA7thM
xrdQJPWhnPt3AYfvJd+8K3HjOpm9oAjzYP+m99jGFDhssgyknkiMVut9kKffydSh
rZHrvLsv2iRebeSgAs4FwYJZbAQDsoDkL5Gkz7QeVChWXlzMc4DfWr8S/hH/zc7v
FWpkg+3jVWy8HPyVt4XE9W7Tityj27I3V3FVTXld8dGpIobjR2MyTbt4CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBVsLdR9XM4u1/AQ/gAJu+q8OmL6MB8GA1UdIwQY
MBaAFNz4XDbGltXbLLtI/UPoIXN+40InMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jZmJjNjItNWQ1NC00MzI3LWIwNzIt
MGY1MmY4NjcxNzhkLzEvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9jZmJjNjItNWQ1NC00MzI3LWIwNzItMGY1MmY4NjcxNzhk
LzEvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwKZuT12
3JuxKVootZlF16LM8ZnLyJebeyiykXikEuRFeJtTZ1kkyXy21rL4u1QH+Hz+jpYu
WD3APffUf0BI5LsCBIRpr943XCSlOF5sH0mvfw0dPaxetVmjMCAdG+/bSdiWM3PB
MfXlgC8Ap1Ney886/BNBEWseG+lt0wpGmXw6KS3J4eKO7yNM6V9kPf5fqLrie+rv
O5SB1YmvQY0fPgsrxxDVV2N06h7+amS77nGKwbPmzX2MY7CMB6hRLM2OPSC2mMAO
fGV/kgWCLe33skups9XpG9jP6hzB9s4vXJ7BO0qyR39KDmdYvY9Izt3DoJSSWB/q
eRjX3/NH7WlPhg==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:25 2026 by rpki-client