Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
File: 3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json)
Hash identifier: ILnIyoePCx8w63yLO3cPPOH9G7UoB2UdhIqSnz2abbE=
Subject key identifier: DA:2D:1C:95:24:69:76:E2:6A:4C:05:89:94:78:4E:F9:E6:0B:36:76
Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
Certificate issuer: /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Certificate serial: 019CAA8FAEE73851428F1980CA77F85DD10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
Manifest number: 1280
Signing time: Sun 01 Mar 2026 18:01:08 +0000
Manifest this update: Sun 01 Mar 2026 18:01:08 +0000
Manifest next update: Mon 02 Mar 2026 18:01:08 +0000
Files and hashes: 1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: XKZ+w6vwbWJCcQy6DOLqbaXF8AN2fUdK2EWKLtNTj0c=)
2: aRFa0aicATO9EZ84Sd0rRZqpUDM.roa (hash: 3/X7mlyrk9jnsPYw8nohsn6KsOPiCxOy8zcW+IBYz8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:ae:e7:38:51:42:8f:19:80:ca:77:f8:5d:d1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Validity
Not Before: Mar 1 18:01:08 2026 GMT
Not After : Mar 2 18:01:08 2026 GMT
Subject: CN=da2d1c95246976e26a4c058994784ef9e60b3676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:17:84:1b:8a:7a:21:6c:2e:3e:df:2f:64:
94:b4:0d:30:dd:1f:13:a2:e0:3b:c9:8c:7e:72:63:
4c:21:d2:ec:e2:7f:a2:d5:ad:75:7b:84:96:b7:cd:
84:45:b7:b8:c2:7b:ff:a5:41:75:dc:d6:48:13:15:
61:d2:c2:11:0a:37:85:cf:04:d5:bf:1c:dd:dd:ae:
d4:d7:d4:d7:f8:2e:fe:d0:b5:2e:17:03:1b:6f:ef:
c7:59:99:29:ad:44:5c:dc:cc:be:9f:11:e7:60:44:
54:65:a4:25:cc:a7:05:61:ca:07:53:4b:d5:cd:79:
3b:be:05:bc:3f:d1:4d:e0:67:10:9f:a2:0d:7a:0f:
4f:ed:62:21:81:85:71:33:2e:f5:ab:25:c1:8f:c3:
55:bd:95:19:ad:a8:45:8d:d7:93:b8:f1:88:8d:f6:
94:42:af:47:c0:56:bd:a2:19:7b:17:ef:f5:6c:44:
e4:3e:eb:25:11:3a:a3:ae:24:b1:a6:e3:fd:13:ff:
d4:0a:e6:98:07:c1:e6:70:68:53:c9:00:1f:6b:9c:
17:f9:a1:6f:15:cc:ab:2a:0f:ca:20:39:d4:f7:77:
85:28:83:b1:40:e7:e4:8e:0e:c9:7b:00:b7:68:84:
60:40:f2:03:02:97:87:40:ac:71:dc:c7:16:0c:6e:
04:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2D:1C:95:24:69:76:E2:6A:4C:05:89:94:78:4E:F9:E6:0B:36:76
X509v3 Authority Key Identifier:
keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:21:d0:bb:04:86:be:b7:03:0d:29:27:3b:2d:fc:4a:b8:83:
7e:45:c2:94:62:ac:c9:2a:11:3c:ac:f5:d5:d8:20:3b:16:3d:
2c:9f:7d:87:b8:12:5d:b6:78:a3:f5:d5:72:8c:69:cd:54:0e:
63:ff:29:e8:84:b2:91:f7:ff:ed:20:4f:fb:7a:22:ec:4e:6f:
f3:01:33:dd:e2:fa:56:4f:8c:3a:d3:d0:1f:aa:75:a3:f8:b9:
da:db:33:e8:78:22:28:df:03:75:03:5d:5a:4b:d4:e5:d8:79:
70:40:79:ba:1d:ef:63:d7:e6:6e:53:11:36:b4:18:ac:1d:ee:
c8:79:2d:0c:dd:d4:10:3d:92:cb:fc:70:44:30:4c:d8:5d:78:
e4:52:5b:e8:46:16:4b:ee:45:8c:97:0a:92:90:9f:70:a1:31:
a4:33:99:b5:07:07:d5:7f:48:36:4a:58:cc:d0:41:cb:4c:ac:
46:76:c5:5b:44:85:5d:97:34:b2:bd:58:a1:22:20:c7:0d:c7:
b1:26:ba:67:ed:5b:d6:c4:e1:4f:1d:1e:b7:61:1c:4d:2b:01:
ac:ab:e8:ff:cb:ff:3c:b2:e3:5f:fa:7c:ec:68:b8:1b:b1:c8:
d4:48:a0:bb:75:bf:34:ed:0e:e4:70:de:fc:d8:e9:8b:fe:72:
17:48:2d:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj67nOFFCjxmAynf4XdENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZjg1YzM2YzY5NmQ1ZGIyY2JiNDhmZDQzZTgyMTczN2Vl
MzQyMjcwHhcNMjYwMzAxMTgwMTA4WhcNMjYwMzAyMTgwMTA4WjAzMTEwLwYDVQQD
EyhkYTJkMWM5NTI0Njk3NmUyNmE0YzA1ODk5NDc4NGVmOWU2MGIzNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vQXhBuKeiFsLj7fL2SUtA0w3R8T
ouA7yYx+cmNMIdLs4n+i1a11e4SWt82ERbe4wnv/pUF13NZIExVh0sIRCjeFzwTV
vxzd3a7U19TX+C7+0LUuFwMbb+/HWZkprURc3My+nxHnYERUZaQlzKcFYcoHU0vV
zXk7vgW8P9FN4GcQn6INeg9P7WIhgYVxMy71qyXBj8NVvZUZrahFjdeTuPGIjfaU
Qq9HwFa9ohl7F+/1bETkPuslETqjriSxpuP9E//UCuaYB8HmcGhTyQAfa5wX+aFv
FcyrKg/KIDnU93eFKIOxQOfkjg7JewC3aIRgQPIDApeHQKxx3McWDG4EdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNotHJUkaXbiakwFiZR4TvnmCzZ2MB8GA1UdIwQY
MBaAFNz4XDbGltXbLLtI/UPoIXN+40InMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jZmJjNjItNWQ1NC00MzI3LWIwNzIt
MGY1MmY4NjcxNzhkLzEvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9jZmJjNjItNWQ1NC00MzI3LWIwNzItMGY1MmY4NjcxNzhk
LzEvM1BoY05zYVcxZHNzdTBqOVEtZ2hjMzdqUWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAriHQuwSG
vrcDDSknOy38SriDfkXClGKsySoRPKz11dggOxY9LJ99h7gSXbZ4o/XVcoxpzVQO
Y/8p6ISykff/7SBP+3oi7E5v8wEz3eL6Vk+MOtPQH6p1o/i52tsz6HgiKN8DdQNd
WkvU5dh5cEB5uh3vY9fmblMRNrQYrB3uyHktDN3UED2Sy/xwRDBM2F145FJb6EYW
S+5FjJcKkpCfcKExpDOZtQcH1X9INkpYzNBBy0ysRnbFW0SFXZc0sr1YoSIgxw3H
sSa6Z+1b1sThTx0et2EcTSsBrKvo/8v/PLLjX/p87Gi4G7HI1Eigu3W/NO0O5HDe
/Njpi/5yF0gt8Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:15:07 2026 by rpki-client