Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
File: 3PhcNsaW1dssu0j9Q-ghc37jQic.mft (raw, json)
Hash identifier: clleooQqX3REr9Ps9tC5K1hBmoU+OTO7dIh9wVjvD8g=
Subject key identifier: B3:B7:F9:84:BE:80:A5:3C:F1:B6:33:05:F6:E0:B2:CB:12:E0:BF:7D
Authority key identifier: DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
Certificate issuer: /CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Certificate serial: 01A193C42662FAAEEB1A281DAD2658621E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
Manifest number: 150B
Signing time: Sat 31 Oct 2026 21:01:07 +0000
Manifest this update: Sat 31 Oct 2026 21:01:07 +0000
Manifest next update: Sun 01 Nov 2026 21:01:07 +0000
Files and hashes: 1: 3PhcNsaW1dssu0j9Q-ghc37jQic.crl (hash: KAwpnsVoq3uw3+9rNWzfGh91OIoGI/Ko6nKjHWWyfkg=)
2: aRFa0aicATO9EZ84Sd0rRZqpUDM.roa (hash: 3/X7mlyrk9jnsPYw8nohsn6KsOPiCxOy8zcW+IBYz8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:c4:26:62:fa:ae:eb:1a:28:1d:ad:26:58:62:1e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf85c36c696d5db2cbb48fd43e821737ee34227
Validity
Not Before: Oct 31 21:01:07 2026 GMT
Not After : Nov 1 21:01:07 2026 GMT
Subject: CN=b3b7f984be80a53cf1b63305f6e0b2cb12e0bf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:1e:6e:9f:2a:ce:42:82:88:9b:19:48:3d:
0d:0b:fd:b2:4b:44:78:f6:54:a6:28:8d:49:58:57:
e7:51:3e:47:32:a1:0e:7f:44:e8:3e:5e:cb:a8:11:
22:31:71:d9:57:24:e7:fd:ef:32:d9:93:16:e4:2a:
09:64:e9:d3:6f:c8:df:5d:69:fe:84:d0:06:56:29:
01:97:1e:49:99:1e:c5:98:45:35:e9:29:74:18:d9:
80:54:44:92:e2:07:44:f3:b2:94:c0:1c:d6:52:9c:
ab:fd:9f:3f:b6:a0:34:24:be:92:12:14:73:e3:73:
9d:02:bc:8e:14:e3:80:21:d5:5e:2d:f1:65:8a:8e:
9e:61:98:00:55:92:a8:f0:69:5b:e9:0f:7b:46:00:
d2:31:a5:ba:2d:93:bd:f9:99:ce:d8:63:60:45:a8:
17:ef:97:59:eb:c7:41:d8:d0:ae:bb:83:65:08:7d:
4e:0a:9e:78:7e:24:f3:9c:9b:61:1c:21:33:8e:99:
05:40:3f:b2:09:60:0b:56:c1:d7:1a:6a:6d:cf:3f:
37:89:ea:bf:88:68:52:b2:31:d7:81:ad:34:11:8d:
fb:c4:4e:fb:4f:7b:3d:92:e0:81:ef:3c:7a:9f:f7:
b5:92:4d:6f:31:fb:92:d9:17:84:de:9b:25:46:b4:
57:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B7:F9:84:BE:80:A5:3C:F1:B6:33:05:F6:E0:B2:CB:12:E0:BF:7D
X509v3 Authority Key Identifier:
keyid:DC:F8:5C:36:C6:96:D5:DB:2C:BB:48:FD:43:E8:21:73:7E:E3:42:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PhcNsaW1dssu0j9Q-ghc37jQic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/cfbc62-5d54-4327-b072-0f52f867178d/1/3PhcNsaW1dssu0j9Q-ghc37jQic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f3:86:01:f6:13:6d:81:65:18:78:2c:9e:df:f4:b1:75:ca:
de:25:49:8a:f8:46:a6:ad:07:9d:62:df:c3:5e:98:35:3c:96:
5b:7f:68:d0:60:0c:e5:5a:5b:5d:eb:17:4c:34:ee:07:15:0e:
8f:f8:73:8d:12:c3:b3:aa:b2:91:e6:11:27:a2:af:d9:45:9d:
bc:91:bd:bc:3e:a5:f6:00:c8:29:29:2e:5a:ca:9c:c8:c0:01:
19:14:41:6a:5a:96:19:f0:6e:4f:7b:72:01:2f:98:e2:9a:8a:
ed:c5:8b:05:e8:6f:da:1f:eb:ae:dc:2b:1d:f4:da:27:e8:4e:
7d:8b:bc:d4:b3:fb:b5:d2:9b:b8:3f:c0:7f:ff:e7:71:4b:bd:
f0:75:40:0c:7e:72:31:d9:fd:d7:63:72:ec:88:18:86:42:37:
ec:90:c6:8b:47:7b:b9:4e:5a:48:c2:d2:b3:c1:e1:1b:21:0a:
26:28:21:3b:0f:92:f6:e8:dc:da:bb:9a:25:50:3b:3e:ff:cc:
41:56:a8:72:e2:36:43:89:94:11:55:36:67:fe:45:70:cc:ff:
c6:1e:65:b6:a3:60:c7:28:33:d7:5e:94:f6:8f:85:67:71:be:
2d:92:ae:91:e8:aa:9f:c9:f4:56:2c:12:72:5a:a1:04:03:09:
70:00:ca:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:52:40 2026 by rpki-client