Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: leSlIKF/T740end7Pv9sndB9DhN1sC8RA7YUeFxCuH8=
Subject key identifier: 55:DA:23:18:B7:36:E7:D4:4A:AC:0D:CC:E7:F1:23:F3:12:0B:97:5E
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 019DCDBDA5196F380C57051E471117D006C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 121D
Signing time: Mon 27 Apr 2026 07:00:50 +0000
Manifest this update: Mon 27 Apr 2026 07:00:50 +0000
Manifest next update: Tue 28 Apr 2026 07:00:50 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: 3tWsxpuIinO8U4V7aOw+yI7JF8AZ5jw8xSou9zMTJx4=)
2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:bd:a5:19:6f:38:0c:57:05:1e:47:11:17:d0:06:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Apr 27 07:00:50 2026 GMT
Not After : Apr 28 07:00:50 2026 GMT
Subject: CN=55da2318b736e7d44aac0dcce7f123f3120b975e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:84:79:30:54:49:3c:fa:a1:c0:8a:36:a9:5a:
98:9a:1e:59:35:6f:99:4e:17:e4:c4:93:4c:d0:d4:
37:1a:64:65:a1:51:f3:3f:7c:f4:07:3f:27:31:9c:
11:ad:46:f7:db:23:e0:33:d1:4f:8a:01:ed:86:69:
d2:80:cb:5e:dd:3b:0f:0b:85:55:2a:be:9c:16:ab:
af:c9:25:36:ec:5a:be:e9:60:c1:58:ea:bb:70:9d:
a0:24:e3:ce:a9:e5:52:50:9c:44:d9:a6:c6:61:84:
f9:91:5c:16:6a:1f:f9:60:b8:98:72:cd:90:51:04:
b7:0b:7d:5d:66:63:97:1b:31:df:af:bf:e9:04:aa:
02:8e:64:e2:77:04:1f:fb:e0:44:66:30:80:71:09:
f8:07:a4:a6:81:4c:1c:7b:e8:7d:2c:51:db:82:1a:
e2:09:5c:76:2a:2c:cf:fe:33:04:ae:87:95:7c:9b:
43:14:a3:70:fb:6d:f4:19:bb:7e:71:82:eb:13:0b:
95:5a:49:8d:2b:68:91:75:06:aa:a0:ad:58:f3:9f:
1d:3b:ea:41:59:81:c8:ce:d7:8d:e5:dc:cc:87:66:
83:e6:29:3f:7b:3a:38:4d:bb:da:c6:6b:2e:57:3a:
08:8f:6b:09:f4:fd:71:27:82:f7:f1:ea:9c:5f:91:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DA:23:18:B7:36:E7:D4:4A:AC:0D:CC:E7:F1:23:F3:12:0B:97:5E
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:33:dc:25:14:9e:da:2c:2d:21:8c:41:c7:d0:22:00:57:b2:
c4:9d:3a:5c:3c:e9:42:5b:07:49:f6:90:7a:7d:95:81:88:6f:
85:e4:b1:2d:f5:7e:2c:74:ae:6b:91:ef:27:b7:00:ac:27:2c:
f5:5b:b3:35:b9:92:e7:50:fa:66:11:6d:dc:9b:f1:76:7b:9a:
cc:a6:0b:a9:15:43:6e:f5:9e:ee:38:87:2e:27:3b:e1:bc:57:
ae:17:6c:9e:aa:5c:bc:21:8e:67:02:10:6d:d9:9b:f9:64:17:
86:11:4d:8b:1f:f7:82:43:19:0d:5a:d0:30:60:4e:e7:6c:04:
a2:d4:e8:ac:55:3e:8a:7b:da:92:be:2c:6c:1b:7d:f6:9a:e1:
ef:2d:34:f9:8c:47:89:89:1c:0a:55:e7:8d:ec:1d:9c:f9:08:
5e:40:24:48:f1:8d:44:a8:d5:8a:a5:9c:14:e1:d9:03:21:49:
f6:a6:fd:66:bc:78:9c:06:c7:09:f1:07:5b:f8:d2:b0:08:68:
7a:df:55:03:59:82:ee:73:7c:c8:5a:92:71:60:5a:ab:21:8e:
39:47:fa:a9:13:ba:6e:18:f0:00:3f:30:5b:2a:5e:0b:67:20:
34:66:a0:50:7d:4f:8f:00:e4:96:f3:80:81:d2:b3:b9:11:12:
ea:89:f5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:47 2026 by rpki-client