Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
File: 3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json)
Hash identifier: mYmDTCaM5fFQUy2R4T6tYjSIA2d6aH//9wApK0kX1lY=
Subject key identifier: 89:85:6F:A1:AB:F6:0B:27:C3:51:55:F5:5F:BB:5F:BD:4E:B3:70:2E
Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
Certificate issuer: /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Certificate serial: 019FA93DFEE8FDFBBEAFC89AACB838BFDE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
Manifest number: 140D
Signing time: Tue 28 Jul 2026 15:00:40 +0000
Manifest this update: Tue 28 Jul 2026 15:00:40 +0000
Manifest next update: Wed 29 Jul 2026 15:00:40 +0000
Files and hashes: 1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: gydF4bKf/231gjJ4iPvet5hh5g0BcUSiqlYPESC4Jxc=)
2: aRFa0aicATO9EZ84Sd0rRZqpUDM.roa (hash: 3/X7mlyrk9jnsPYw8nohsn6KsOPiCxOy8zcW+IBYz8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:fe:e8:fd:fb:be:af:c8:9a:ac:b8:38:bf:de:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Validity
Not Before: Jul 28 15:00:40 2026 GMT
Not After : Jul 29 15:00:40 2026 GMT
Subject: CN=89856fa1abf60b27c35155f55fbb5fbd4eb3702e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:24:e6:80:c1:65:15:cf:d2:46:e0:12:4b:
52:d7:a2:fa:9c:cd:a9:92:dd:b4:f1:32:4c:e3:77:
14:ec:7a:a4:ae:eb:46:bc:f7:d0:af:75:fb:1a:8e:
01:fd:a7:60:0f:0c:b2:40:7f:de:4d:f8:d9:ba:d6:
9c:ad:61:92:54:c6:40:af:c9:7d:a3:c1:52:07:1e:
80:5f:0d:91:62:7d:fe:02:11:e4:69:a8:63:a4:63:
10:76:16:c4:08:66:f5:c3:89:b9:b3:69:4b:bb:61:
78:f8:99:8d:94:d4:ba:79:2b:2d:92:6c:c6:74:b0:
9d:dc:4a:df:93:37:dc:f8:59:02:a1:0a:4a:cc:c9:
04:1e:24:a5:15:3c:6d:8d:b5:1c:50:af:64:93:6c:
82:d7:b5:bb:04:31:96:fa:f2:51:02:e2:ca:cc:aa:
76:5b:b6:e3:40:5c:b2:00:d6:32:71:72:b3:6a:fe:
18:6b:a2:6f:f3:45:92:d1:b8:52:8b:7e:32:2e:e0:
31:b0:d1:03:02:48:3e:ab:24:99:fe:4d:ec:a9:ef:
21:0a:d6:97:86:a2:df:df:4d:77:02:66:31:be:47:
3b:1b:e5:50:51:93:19:65:ce:85:f1:ac:39:27:dd:
62:e0:a4:ce:b4:41:4b:d2:4e:9c:5a:d9:72:36:c5:
b9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:85:6F:A1:AB:F6:0B:27:C3:51:55:F5:5F:BB:5F:BD:4E:B3:70:2E
X509v3 Authority Key Identifier:
keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:27:6e:da:01:0c:25:e7:48:bf:b5:22:4f:b7:f3:bd:55:8a:
43:00:f4:f5:3f:71:2f:37:3e:f5:44:48:a0:e1:d8:1a:d4:64:
15:e1:ca:b6:44:9c:35:90:dc:21:35:3c:49:2c:3a:a0:6f:b4:
03:f4:c9:cf:da:e0:b6:68:95:53:ed:d9:19:c3:60:da:b0:bc:
3d:3d:19:31:a2:3c:f1:cd:96:ff:5a:83:6f:c2:6c:a9:10:59:
5c:e6:18:6b:89:b1:ab:2b:18:c6:37:19:1c:82:43:cb:4d:e7:
c9:02:ad:96:96:b5:5c:83:d5:4f:86:c8:10:27:8b:e7:ab:b2:
ad:aa:9a:68:5a:c5:13:85:a1:c3:b2:c4:a9:c5:66:13:2a:e5:
0e:22:64:c9:a2:5f:b4:e7:82:ff:49:62:5e:8d:4d:f7:cf:93:
31:69:72:14:d0:7d:55:32:1c:c2:e6:f2:87:99:eb:7a:ff:cd:
bd:4f:cc:5b:68:44:4b:64:2f:0b:a9:90:74:22:13:b3:25:5f:
49:a7:22:f9:f3:2e:62:1d:0c:7a:00:d7:7e:0d:1f:3d:73:fb:
33:c6:f1:64:40:4c:15:e6:26:d7:84:0b:ef:6a:db:7b:33:d9:
8b:89:cf:55:d8:83:73:3a:fd:84:17:2c:9e:42:76:11:c4:7f:
49:d1:54:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:54 2026 by rpki-client