Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: kReMMMSatXq+ChxHtia0zAc4KjQDeo7qmAWzEBb0eoc=
Subject key identifier: 59:54:86:0B:DF:88:C4:B9:C2:F3:48:86:4A:3E:B0:6D:20:63:CF:63
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 019FA305050DFAA0D979C43B1B544B2AABD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 1310
Signing time: Mon 27 Jul 2026 10:00:42 +0000
Manifest this update: Mon 27 Jul 2026 10:00:42 +0000
Manifest next update: Tue 28 Jul 2026 10:00:42 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: 3M21EKRGcHkXRbN816bEmbtfHjDiNd/2PXd6BopWInk=)
2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:05:0d:fa:a0:d9:79:c4:3b:1b:54:4b:2a:ab:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Jul 27 10:00:42 2026 GMT
Not After : Jul 28 10:00:42 2026 GMT
Subject: CN=5954860bdf88c4b9c2f348864a3eb06d2063cf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ee:c6:1e:2b:07:8a:a9:5f:e0:18:03:b2:a2:
04:99:7d:61:aa:6d:45:28:06:cb:ec:8f:b7:bf:e6:
ec:40:93:6b:60:5d:d7:77:34:96:56:55:b8:bb:5a:
b0:3f:f4:d9:75:0f:44:3b:32:0f:78:67:37:9e:b2:
73:1a:12:c3:17:05:02:30:04:43:93:1f:2f:93:f0:
2f:6f:aa:75:a9:87:59:59:e5:ad:ef:8a:25:da:51:
26:5b:08:bb:7b:0c:b2:e1:03:53:47:7d:68:7a:f8:
af:0c:6c:37:96:45:6b:41:a2:73:b4:19:e7:59:38:
54:6f:ea:92:6d:27:29:8c:6a:d2:56:2a:13:6f:d0:
a6:9a:31:ee:16:7a:04:6d:ff:e2:a4:01:8d:52:ed:
ab:c4:62:be:d0:da:20:5b:f1:1d:b8:1c:b7:d6:30:
40:98:34:d1:65:c2:56:42:ab:9b:4e:b6:c5:da:09:
5a:68:7e:87:3f:3e:0e:37:90:e7:b6:17:93:fb:e8:
67:7e:51:1b:1e:b2:53:c6:d1:20:75:bb:92:9e:17:
b0:06:b8:ee:d4:30:fd:8a:aa:d0:0e:34:de:68:3d:
11:ab:e2:b2:ae:9d:bc:2f:57:58:00:fa:42:f6:07:
f0:d8:a5:fd:ea:7c:3a:d3:51:45:3d:a6:c8:a5:7d:
22:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:54:86:0B:DF:88:C4:B9:C2:F3:48:86:4A:3E:B0:6D:20:63:CF:63
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:da:45:ff:7e:71:0d:44:47:ce:ef:eb:a2:49:0e:69:30:5b:
9d:9c:91:59:45:64:ff:c7:a0:28:22:8c:67:43:39:43:72:45:
57:0a:29:86:cc:fd:fa:7f:47:d2:18:5b:70:07:62:33:01:f7:
77:c5:81:16:a2:5d:97:12:e6:62:15:0b:0e:3a:1c:84:d9:37:
c4:36:7c:44:07:72:e9:03:7a:a9:51:c0:66:d9:ab:01:f1:2b:
83:1f:17:4a:c1:7b:f7:86:f1:6f:27:71:bf:14:b5:ed:b0:f3:
05:63:a7:fe:8a:64:6b:83:fd:83:8e:ec:7a:e0:23:45:c7:a6:
29:38:62:46:e8:9e:0e:5e:af:fb:65:e1:df:34:5e:c6:f5:fb:
bd:05:fb:f1:e8:0c:fa:0c:51:74:7f:3e:6a:01:5d:fa:a5:8a:
98:a2:fe:76:8f:ef:2b:48:4c:35:fd:73:57:84:ff:37:96:a6:
ad:95:f4:2a:a5:b7:83:82:54:86:f5:5c:ec:d4:f1:db:37:80:
46:bb:ef:b6:d4:d5:73:3d:46:e4:ad:e2:2c:11:86:70:99:c9:
cb:72:ff:8d:37:5b:23:f6:92:46:bb:5e:31:f1:c2:14:2a:e8:
41:83:e1:6d:32:43:f3:27:f4:a3:a0:81:67:6b:e5:69:af:b8:
2e:59:55:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:55 2026 by rpki-client