Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json)
Hash identifier: W84yG73UIelTC/FuOa9OxFsPHZM13LrE0vP4D6sKjuE=
Subject key identifier: 6E:A2:09:14:62:37:35:41:FD:AD:83:A0:0D:1B:92:57:75:A5:07:7D
Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538
Certificate serial: 01A140F171160E1A0A75AC0AFB1508CD8CFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
Manifest number: 0D3A
Signing time: Thu 15 Oct 2026 19:02:07 +0000
Manifest this update: Thu 15 Oct 2026 19:02:07 +0000
Manifest next update: Fri 16 Oct 2026 19:02:07 +0000
Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: VHzTqqw1ZnwklOrXIg1h+OOZG3Qr4tDMtWxgZLG/8Mw=)
2: y8l-GZaij3nY_lsT-zDKBTkrGss.roa (hash: edJk2bhQjppncI7NDvSvP36a6hLKHOIsn+JqFnH50EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f1:71:16:0e:1a:0a:75:ac:0a:fb:15:08:cd:8c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538
Validity
Not Before: Oct 15 19:02:07 2026 GMT
Not After : Oct 16 19:02:07 2026 GMT
Subject: CN=6ea2091462373541fdad83a00d1b925775a5077d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bd:b2:ef:fa:46:a9:78:47:06:de:e3:2b:38:
b4:a0:fc:9e:13:c8:af:da:68:d2:38:5f:ff:4d:b1:
8a:df:2f:22:3a:7a:7e:d3:4c:43:9d:ca:f2:c3:9b:
92:de:89:d3:6e:8a:ae:a9:14:b7:52:8c:83:d1:6e:
52:21:5e:ff:af:f9:ec:6a:a6:16:67:24:51:1a:f9:
da:d7:15:ab:94:03:0d:e8:74:2c:91:f1:df:33:45:
c1:f2:41:e6:75:4e:3a:54:06:f7:fc:f6:3a:d7:9c:
9d:f3:5c:53:59:15:cd:6d:c9:00:ce:95:f2:4a:16:
b2:08:10:77:eb:59:82:85:eb:3b:9c:80:13:2e:b3:
30:0e:21:5b:39:2a:be:39:5c:64:f7:30:de:70:e0:
09:47:18:12:34:78:a6:c1:82:e7:4f:77:63:3d:d0:
62:aa:56:66:b7:c0:e6:91:af:f3:66:f9:43:ab:d2:
84:5e:4f:df:a0:2f:08:b6:28:8e:ad:17:69:6f:34:
0f:93:88:4b:08:06:b0:7a:3e:b7:df:47:4d:d9:8a:
01:ec:5d:67:b2:7a:f5:92:23:99:e5:65:ef:e4:e5:
66:fa:70:79:77:19:fc:36:8b:c4:82:15:71:38:64:
37:48:f8:5b:91:9e:1e:26:a1:34:5f:58:dd:e6:5a:
cb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A2:09:14:62:37:35:41:FD:AD:83:A0:0D:1B:92:57:75:A5:07:7D
X509v3 Authority Key Identifier:
keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:40:00:01:1e:63:84:85:d9:cc:b5:50:17:9b:1e:1c:f4:8a:
94:6d:2c:4f:35:f1:38:0e:fc:03:7b:66:a4:cb:06:01:92:f4:
95:d9:c4:29:d4:0c:a9:43:10:4f:1a:61:e4:a9:f5:6b:2e:a7:
fd:75:97:da:cc:ad:83:8a:b8:02:7d:36:1c:95:10:89:07:01:
94:33:0d:d2:70:60:43:e6:31:41:2d:a8:ca:b0:f3:b8:1b:3b:
9e:a3:80:28:6c:c6:87:38:70:03:1d:89:13:d2:49:f7:51:91:
ca:52:64:ef:0d:af:80:8c:06:05:90:fe:37:b4:80:58:5d:ff:
ac:38:e4:0e:ed:19:45:1c:26:f2:20:2c:41:aa:4b:5b:2c:af:
44:e0:e2:5f:6f:8e:96:2f:4b:45:ec:99:45:a8:0d:22:e9:04:
e1:54:bb:ca:f1:ec:c3:f1:e1:8b:2a:b8:12:fd:2e:6d:0f:82:
9f:4a:06:27:76:32:f4:40:e5:8a:3b:a3:fb:e0:aa:92:36:8f:
71:ec:0c:14:5f:d2:c9:62:f9:30:b9:0e:c8:d0:5f:47:05:e2:
8d:60:b4:69:75:a8:9e:72:9c:47:86:1e:5b:0c:5e:32:6a:74:
b0:6d:fd:8d:85:4b:71:2d:ae:b8:1b:a2:52:27:35:6e:06:c5:
dd:26:4e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:09:41 2026 by rpki-client