Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: zkpO6f5syaqWrz9DvcuOPIsGU7lOj6DkPxQ2Y0eOkzI=
Subject key identifier: 21:6E:41:E0:E1:7C:24:5B:BA:76:86:80:F8:7C:05:29:DD:B9:5B:EF
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 019EB95873663F08CB9D5ABEA12F76EC9A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 1297
Signing time: Fri 12 Jun 2026 01:00:42 +0000
Manifest this update: Fri 12 Jun 2026 01:00:42 +0000
Manifest next update: Sat 13 Jun 2026 01:00:42 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: IbUYQRML+2KHPPmtWaTn4C+a5388eje92C8zYyH/So0=)
2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:73:66:3f:08:cb:9d:5a:be:a1:2f:76:ec:9a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Jun 12 01:00:42 2026 GMT
Not After : Jun 13 01:00:42 2026 GMT
Subject: CN=216e41e0e17c245bba768680f87c0529ddb95bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:b5:b9:3f:b1:f0:6b:89:cc:46:39:c4:1e:
b0:9d:b2:a5:d0:50:24:5f:a5:10:19:65:cf:33:ce:
98:d0:f1:b4:e2:a2:f7:03:d2:33:bf:15:d5:c7:23:
1c:ae:c8:b5:f7:c0:fd:b3:b8:50:8f:33:fa:9a:6f:
5d:c7:22:03:47:5e:b0:62:86:d5:9a:e1:10:c4:a0:
ea:3c:e2:b7:22:0f:8c:7f:4c:7a:9d:08:de:34:81:
8b:da:89:32:72:c3:4c:61:d6:fe:6c:95:4f:f5:89:
01:ef:df:ec:86:87:d0:a9:81:57:9f:92:7b:6b:81:
0e:c7:5c:92:ba:0a:c1:f6:a1:3f:cb:18:31:aa:cf:
bf:91:9e:65:10:11:2f:72:73:b2:32:81:b3:98:83:
12:a5:c8:33:5e:d0:ff:75:5c:e1:8c:55:63:9f:7c:
1e:f5:5d:3d:c7:34:5d:2f:2f:f7:cf:ee:04:35:55:
b5:2f:ee:b2:61:51:68:7c:98:a6:2c:3c:d9:67:45:
9a:94:62:3c:fa:e9:5c:2d:df:42:5e:ca:0a:c6:a7:
ba:61:9f:34:ad:be:95:72:1a:0f:91:41:37:d3:c6:
ce:4e:57:49:79:70:18:ac:7e:fd:1e:5b:f0:31:40:
66:c9:7a:a7:aa:bf:d2:b0:5c:bb:2f:08:67:c3:7a:
6a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6E:41:E0:E1:7C:24:5B:BA:76:86:80:F8:7C:05:29:DD:B9:5B:EF
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:55:b7:f0:73:95:4c:23:97:fd:f2:96:e5:63:e3:83:5b:0c:
6a:f8:7f:4a:f1:d9:13:21:99:7d:a1:d8:7c:6c:d4:93:c3:dc:
0a:da:20:ed:0e:87:53:c0:a8:04:8b:7a:7c:00:0b:c2:25:96:
52:a5:e7:fa:5c:5f:bd:24:98:be:49:f3:fc:c2:fa:a7:65:3a:
82:16:b3:b1:cc:29:ca:a7:8a:89:b4:d4:b5:78:3a:bb:e2:9c:
97:32:52:3f:87:f6:31:25:c2:4a:ae:b9:b2:84:e9:28:98:01:
e1:0b:8b:07:bf:59:ec:c2:ff:f8:a0:94:a3:b1:91:3a:a9:03:
b1:1f:c5:3a:02:44:f9:5c:e4:e3:9e:eb:6e:54:91:b5:ac:0c:
a6:db:c5:ed:df:78:1f:ab:02:be:16:81:80:89:e0:6e:9b:1d:
e9:92:09:e3:7b:85:d0:00:36:2e:15:17:67:48:6f:60:83:cb:
b4:4b:fd:13:16:8c:db:ec:84:43:be:08:05:32:53:af:6e:76:
16:0b:44:1b:1e:fd:24:a6:bd:8b:c2:47:73:55:72:12:eb:09:
74:fb:de:8f:48:7b:54:66:5f:c5:8c:c7:3d:76:35:6d:ed:88:
01:0e:d9:d0:9e:37:84:ae:b1:21:27:a1:bf:5b:8a:09:53:40:
9f:09:91:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:03:11 2026 by rpki-client