Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: C2p8hyXIwz6SlelKXRxDbFHJqZ7Z3hujcwn3IQpIySw=
Subject key identifier: 27:A0:D9:78:26:E6:7E:AD:FA:FF:4D:3F:BF:73:06:17:3D:A5:F7:C7
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 01A08AC36D48593A6B80376A6DC4F0FD140D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 1388
Signing time: Thu 10 Sep 2026 10:00:58 +0000
Manifest this update: Thu 10 Sep 2026 10:00:58 +0000
Manifest next update: Fri 11 Sep 2026 10:00:58 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: dB9X2agyVK3JTTugtiLctoRSdMl7m7ubQOKYHghipAM=)
2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:6d:48:59:3a:6b:80:37:6a:6d:c4:f0:fd:14:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Sep 10 10:00:58 2026 GMT
Not After : Sep 11 10:00:58 2026 GMT
Subject: CN=27a0d97826e67eadfaff4d3fbf7306173da5f7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:33:4f:3b:97:14:15:40:16:e4:71:e3:b6:83:
9c:f8:b2:20:b2:16:38:ca:85:45:8a:7b:0a:1c:55:
38:8b:20:40:92:9a:1f:e8:6a:e1:8f:4c:ca:3e:69:
e2:7e:7f:0b:32:c0:1d:14:35:4e:96:95:8c:96:b0:
16:d2:eb:92:dd:3f:07:61:df:34:39:ad:d5:b8:54:
bd:7b:c9:b8:03:55:b9:1e:6d:78:29:32:98:38:f5:
e6:e9:49:96:c6:13:83:2a:dd:33:c9:29:94:00:61:
a8:82:6f:48:13:4c:3e:7d:e7:a8:9d:3a:28:69:d4:
a0:52:f6:c5:e2:4c:b8:6d:61:17:bf:45:af:6e:8a:
85:04:ac:2c:49:3c:ab:ae:4e:d0:fe:b9:f6:69:55:
bd:fa:d3:4a:54:5c:1f:c5:e4:e5:bc:43:07:de:de:
eb:e6:4f:4d:0a:b1:e2:ad:36:e5:89:e6:06:46:d5:
b1:dd:78:32:5f:58:d5:6c:fc:a9:50:33:05:37:d4:
00:f1:dc:82:a6:ed:d1:8c:dc:4d:8a:e0:7b:a1:b3:
d1:25:42:14:ae:e7:80:1e:cc:e6:96:5b:84:c7:5a:
97:92:9b:99:2f:7e:1d:1f:f6:46:b9:29:3e:fc:fa:
a3:20:eb:48:b0:40:2b:75:d4:49:c7:20:d8:10:02:
56:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A0:D9:78:26:E6:7E:AD:FA:FF:4D:3F:BF:73:06:17:3D:A5:F7:C7
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:07:59:2e:e3:ee:ae:ca:9e:fa:20:1f:fd:e5:d6:34:24:4d:
9d:1d:eb:16:a2:ba:62:4a:dd:2d:74:06:6b:1d:a8:8c:f4:a9:
38:e2:06:aa:86:3d:0b:64:5f:09:4a:f9:11:56:ca:89:5a:58:
0a:0d:58:be:23:8d:20:25:5e:d9:d1:ff:89:aa:28:d8:f6:43:
86:c0:65:a2:25:0a:be:0c:85:39:14:7c:bd:7a:17:f8:d1:fc:
02:52:30:24:c5:63:e0:8e:f5:a9:7a:16:60:98:64:25:64:e4:
c2:45:5b:01:bc:77:cc:05:f3:b8:4a:37:e6:94:5c:94:d1:6d:
cb:13:2e:5c:a2:70:3e:7c:7c:2b:66:2b:1f:1f:67:87:5d:e0:
6b:cc:c0:20:e1:14:95:18:48:db:68:ab:ff:1f:b0:51:d0:74:
b1:62:99:07:af:d0:ce:19:96:2d:74:8f:3f:3e:ba:f3:8d:44:
92:26:49:fe:f6:ba:90:8d:4a:53:2b:0d:34:6a:fc:2a:52:9e:
55:70:83:3a:29:fd:98:ff:9e:6b:8e:6c:1a:bb:05:02:a1:0c:
cd:f5:e6:80:7b:7b:1a:6a:06:64:19:4c:56:fc:6e:41:e2:bf:
aa:73:e6:0d:b9:af:03:70:97:87:8a:75:21:54:1c:e7:54:74:
1b:98:08:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:21:02 2026 by rpki-client