Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: B2/V+aV+snyskXhRj0pcmRLKen+mHGWujwsqKQSrn6s=
Subject key identifier: 5F:48:04:EC:10:3F:DB:B7:C6:08:4C:16:BD:99:35:4E:A7:5C:BD:33
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 019CE5FFC4A196A8B795C3F1DA11883135AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 11A5
Signing time: Fri 13 Mar 2026 07:01:10 +0000
Manifest this update: Fri 13 Mar 2026 07:01:10 +0000
Manifest next update: Sat 14 Mar 2026 07:01:10 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: vpRT1Ei7/YWRYM8F/1FHlA9hIjrEECsykrRdqwjp9Fs=)
2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:c4:a1:96:a8:b7:95:c3:f1:da:11:88:31:35:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Mar 13 07:01:10 2026 GMT
Not After : Mar 14 07:01:10 2026 GMT
Subject: CN=5f4804ec103fdbb7c6084c16bd99354ea75cbd33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:ba:88:fe:dc:4d:d0:df:7d:4b:b6:d4:19:
21:cf:a8:22:0f:74:8e:e3:38:d9:63:7a:f9:6a:d9:
44:39:8d:c7:cb:0d:c8:a3:b0:6b:b5:7c:bc:50:ab:
d9:ee:8f:45:53:e8:a0:72:93:17:28:38:00:7c:15:
fc:1a:32:35:92:2d:c7:d6:d0:b8:e2:7c:34:27:f8:
ed:ee:d3:14:b3:0b:42:8a:2e:fe:8b:38:3e:04:ad:
cd:06:5b:ec:34:b0:1b:56:8a:3f:28:5c:8b:aa:c2:
75:1f:72:b9:0e:c6:67:28:e6:ea:fc:bd:86:c3:a8:
17:bb:55:50:02:81:85:63:75:4c:43:0f:b7:99:87:
a0:f9:ad:be:a2:9c:07:71:28:d0:dc:23:0f:58:09:
35:6f:11:6e:76:97:f3:c7:26:a3:56:1a:6f:6b:e4:
74:de:0c:01:61:51:f2:71:e6:5e:f9:23:0d:48:f5:
2d:10:c6:6f:52:ec:a4:eb:67:e0:61:e0:d3:6e:51:
1f:a7:12:4c:80:3b:c3:6a:ab:5f:a9:09:34:09:f7:
33:b5:32:dc:d5:52:c8:45:f0:01:c9:e1:04:39:88:
95:22:75:ed:1a:05:c8:49:e2:07:98:ff:0c:b0:c9:
6f:dc:e2:a8:35:70:cf:80:2e:d3:78:2f:67:6c:56:
03:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:48:04:EC:10:3F:DB:B7:C6:08:4C:16:BD:99:35:4E:A7:5C:BD:33
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:da:d8:14:4e:e6:bf:fd:84:65:c1:2d:38:09:81:3a:16:ea:
f6:57:35:a5:0e:7f:58:cc:29:1e:59:26:e2:e4:29:57:32:98:
e5:88:e6:68:a5:e1:4c:cd:44:02:43:5a:d8:61:2b:19:0f:15:
bb:f5:e7:e3:87:de:3c:89:74:ae:bc:81:60:5c:87:6d:9a:68:
ea:21:f8:4e:da:19:f7:e5:cf:61:6a:b5:e4:f2:c6:db:50:ad:
fd:b5:63:6b:4c:b1:31:4b:61:0f:c7:23:8e:13:00:8f:fb:06:
bd:53:a1:2f:95:8b:f1:ea:d3:87:2c:0b:cf:8f:51:73:92:e8:
5f:77:8c:ea:44:6d:b6:e8:44:b1:b7:20:3a:7f:5c:13:52:b4:
c0:48:f3:ba:f8:04:db:e4:1c:92:cf:ff:10:70:4d:47:76:82:
eb:bc:03:9a:96:87:af:2e:fd:e0:ef:39:43:a3:fc:b2:17:da:
4b:f6:19:53:df:e5:f8:a2:01:e3:00:19:fe:78:1a:b5:3d:2a:
91:a1:d6:67:ad:7f:16:aa:3c:ef:af:a2:72:eb:02:2a:fb:97:
e8:03:ff:bd:1c:27:50:b2:bd:be:b4:67:a5:aa:36:77:2c:b4:
e0:a5:9e:33:d4:c4:d5:20:ed:79:34:21:a9:b6:48:cb:4d:f6:
d6:23:1d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:12:56 2026 by rpki-client