Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json)
Hash identifier: +GzKCgbkueO4nIUVyqtdt+mlGIRFvdffkH50VEC+baw=
Subject key identifier: 80:DA:76:32:3D:69:E9:97:20:FA:BF:26:52:8D:E6:BC:DC:85:61:96
Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538
Certificate serial: 01A0024B785B4564A00BA4E2B3F80CDE51FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
Manifest number: 0C95
Signing time: Fri 14 Aug 2026 22:01:35 +0000
Manifest this update: Fri 14 Aug 2026 22:01:35 +0000
Manifest next update: Sat 15 Aug 2026 22:01:35 +0000
Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: WXLJChv+2JwDURFxZOt8A301cMWRsqBKiAcoHPd0aBQ=)
2: y8l-GZaij3nY_lsT-zDKBTkrGss.roa (hash: edJk2bhQjppncI7NDvSvP36a6hLKHOIsn+JqFnH50EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:78:5b:45:64:a0:0b:a4:e2:b3:f8:0c:de:51:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538
Validity
Not Before: Aug 14 22:01:35 2026 GMT
Not After : Aug 15 22:01:35 2026 GMT
Subject: CN=80da76323d69e99720fabf26528de6bcdc856196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:89:fa:28:e9:59:22:2d:68:e6:5d:4c:fd:74:
3e:50:20:3e:01:8e:a5:32:aa:4b:72:3e:55:ca:19:
69:31:8b:d2:b4:79:70:19:62:c9:2c:72:94:0a:49:
a9:e7:47:b5:d3:73:a9:0f:a7:7f:00:ab:99:66:fd:
f5:24:ca:65:35:b6:63:03:3b:18:72:ef:06:49:20:
b0:94:30:05:69:b5:ba:33:df:61:c0:3d:a9:f0:a9:
41:71:2a:ee:c9:c1:ff:5f:d5:95:17:f7:dd:fd:ed:
0c:f3:9e:73:e0:fb:16:a8:14:49:42:84:2a:38:bd:
09:00:a7:36:92:d0:20:40:5d:ef:ee:b6:4a:63:cf:
ca:11:38:9a:77:10:42:b2:67:d6:cb:76:bc:d7:0c:
10:05:68:4b:09:07:0b:4b:cf:99:ab:f5:47:3c:1b:
ee:87:cb:da:bf:5c:71:7f:67:8c:38:a1:93:dd:a6:
56:f7:e3:67:e2:52:50:f5:0a:20:8f:ea:90:03:19:
9c:a7:aa:0d:3a:a5:6d:20:b6:d0:1c:35:eb:71:49:
0d:b0:ab:7c:47:13:2a:e3:ce:f5:cf:f8:d1:be:ce:
3d:b5:3c:8f:d3:ff:8b:11:6d:83:f0:ed:47:4d:15:
91:1d:19:43:a9:49:60:d1:8f:ce:70:f4:1a:58:dc:
57:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DA:76:32:3D:69:E9:97:20:FA:BF:26:52:8D:E6:BC:DC:85:61:96
X509v3 Authority Key Identifier:
keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:60:c2:ab:4d:99:54:ef:09:01:a2:6b:41:5e:9b:8b:44:4f:
f5:b6:04:0f:9b:62:44:eb:e5:21:28:47:31:63:80:f8:7a:5c:
c3:d8:fc:06:17:17:9a:ef:a8:a6:ed:de:ca:40:79:4c:a2:f8:
52:57:cb:8c:4d:7a:46:5a:3f:e5:77:92:ed:34:09:b1:15:b8:
3f:42:43:f5:2e:ec:c1:c2:87:44:7b:bc:82:b3:34:eb:16:52:
59:49:e6:9e:00:bf:9c:bd:98:1e:e6:4f:d0:94:6f:ef:52:24:
0a:5f:79:ce:87:6a:6a:94:95:ca:8f:be:dd:8c:58:0b:37:6f:
0a:34:d6:33:ce:fb:cf:fb:e4:2e:eb:0d:68:2c:fe:80:c4:2e:
cd:2d:7a:a6:fe:b1:08:ec:6c:18:07:e8:8d:68:5f:84:09:63:
3a:98:f0:33:9c:c8:8e:61:a5:ec:e4:04:e1:57:1d:36:6a:21:
8e:9f:ea:e2:cd:93:bb:31:04:6f:81:41:a2:f2:09:b2:fb:6b:
5d:4f:c4:99:0b:71:f6:4d:2e:4b:7c:94:00:07:98:2d:58:30:
3b:ed:69:37:7e:a4:4a:9d:e1:24:d5:d4:1c:5a:dd:88:b3:c3:
52:dc:03:28:c3:dc:d3:c6:07:38:67:ac:5b:01:e2:8f:88:de:
2e:06:a0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:40 2026 by rpki-client