Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
File: 3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json)
Hash identifier: nEr3rAvuDoSsQbcd2mpdztlTZBQojEXvEwfx8tFT1Iw=
Subject key identifier: C0:7F:11:08:6B:4C:43:67:E9:03:AD:FA:D5:A7:A7:E7:6B:0A:95:C1
Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
Certificate issuer: /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Certificate serial: 01A08D1FC032C58CAA15B2DAE0616DABC006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
Manifest number: 1483
Signing time: Thu 10 Sep 2026 21:01:03 +0000
Manifest this update: Thu 10 Sep 2026 21:01:03 +0000
Manifest next update: Fri 11 Sep 2026 21:01:03 +0000
Files and hashes: 1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: EZIOHcUbJFiVgwCPr+d87lEvDCRdCn6jNuHBxJu3lI8=)
2: aRFa0aicATO9EZ84Sd0rRZqpUDM.roa (hash: 3/X7mlyrk9jnsPYw8nohsn6KsOPiCxOy8zcW+IBYz8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:c0:32:c5:8c:aa:15:b2:da:e0:61:6d:ab:c0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Validity
Not Before: Sep 10 21:01:03 2026 GMT
Not After : Sep 11 21:01:03 2026 GMT
Subject: CN=c07f11086b4c4367e903adfad5a7a7e76b0a95c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:95:4b:63:48:9e:a8:76:83:a8:5f:10:a5:
c2:0c:06:cc:9a:24:e1:9e:81:fe:20:82:eb:a5:95:
5d:fe:b1:df:18:57:d4:64:8d:16:b4:a9:ab:74:75:
ea:6c:a9:6d:e9:1d:08:ce:fd:f9:db:be:49:1b:a2:
99:ce:27:b0:b9:25:f2:06:97:9d:30:db:0e:71:ad:
aa:0c:57:bb:ab:ea:ed:7f:77:f5:fd:5e:ac:40:25:
b6:72:3f:88:22:19:85:01:85:1a:96:8b:38:31:50:
68:ab:fb:61:b4:fc:73:6b:16:56:ec:b0:6f:d4:59:
32:53:6f:ad:4c:d0:d4:af:25:8f:73:a0:90:99:28:
62:f4:c5:f0:45:6d:d8:76:ec:bf:c3:38:18:c4:c5:
ef:0e:24:29:a2:46:39:c0:8a:a0:9d:71:64:f8:01:
2f:18:11:5f:e2:84:d5:c5:07:79:e6:57:a5:8e:27:
97:c0:cf:e0:d1:e9:73:06:95:98:9c:2b:eb:14:fa:
2c:d1:1c:1f:58:15:68:6f:f0:28:26:04:d7:1d:61:
63:1b:d1:e5:f9:13:27:c0:17:fd:22:2c:58:d1:90:
1a:5b:1f:8a:2b:49:26:eb:bb:5c:d2:b6:d8:b7:e9:
9a:90:84:7f:61:32:7c:fa:24:9d:16:85:8d:4f:54:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7F:11:08:6B:4C:43:67:E9:03:AD:FA:D5:A7:A7:E7:6B:0A:95:C1
X509v3 Authority Key Identifier:
keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:dc:f9:6a:71:b1:ea:25:74:13:b8:cf:3b:52:d5:c2:33:22:
c5:8c:42:82:1a:42:db:b2:92:f9:36:c8:05:0c:75:ed:13:05:
ba:e9:05:e1:05:44:e4:be:5d:64:54:77:14:c8:a8:20:fe:98:
08:16:cc:09:00:61:40:03:84:1d:35:12:72:a9:e0:7e:0e:29:
17:4c:81:8d:e7:24:cf:6e:c1:cb:79:e2:a6:1b:d7:70:7c:f2:
27:a3:7a:f0:8c:52:8a:ec:1d:a3:e1:2a:52:6a:60:e7:8d:9b:
52:29:c3:ee:82:90:05:0e:94:f1:df:da:e1:b2:3b:80:f3:97:
04:2b:17:b3:e2:80:e6:6c:f5:40:10:0d:c2:ff:ed:69:64:de:
3a:d2:22:cd:5d:85:1f:9c:f5:46:fc:f5:e2:3a:3c:25:db:02:
ba:7e:28:42:d5:a2:e3:09:e6:6a:d7:1f:fd:fd:ee:59:da:83:
6f:b4:8f:92:01:0c:43:88:3b:54:49:88:cb:e1:7d:b7:51:6f:
11:39:fa:8f:aa:e8:ed:45:aa:bc:ac:dd:9b:f8:62:b2:d6:b3:
12:61:22:68:f7:37:7c:70:99:f2:b7:77:06:eb:11:03:cf:88:
18:39:3f:96:cc:45:0c:d0:10:a2:ed:a6:e9:71:44:aa:74:1e:
3a:9d:73:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:11:09 2026 by rpki-client