Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json)
Hash identifier: xdg5MJRn7iMnPc5W0iWOALxcGDIi/z+xVtpy7VIP7hA=
Subject key identifier: B9:8D:78:26:9D:B7:D6:51:89:B2:B6:DD:99:00:B5:01:97:E0:BD:1D
Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538
Certificate serial: 019F92481FEE40135FE14A1031E3F35A3600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
Manifest number: 0C5B
Signing time: Fri 24 Jul 2026 04:00:28 +0000
Manifest this update: Fri 24 Jul 2026 04:00:28 +0000
Manifest next update: Sat 25 Jul 2026 04:00:28 +0000
Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: hFGUrOH4feKP1Zcb+EYMrmxpY6T5yWvqdJwtchsE4nE=)
2: y8l-GZaij3nY_lsT-zDKBTkrGss.roa (hash: edJk2bhQjppncI7NDvSvP36a6hLKHOIsn+JqFnH50EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:1f:ee:40:13:5f:e1:4a:10:31:e3:f3:5a:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538
Validity
Not Before: Jul 24 04:00:28 2026 GMT
Not After : Jul 25 04:00:28 2026 GMT
Subject: CN=b98d78269db7d65189b2b6dd9900b50197e0bd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:5c:33:4f:e0:41:7c:9b:5a:ea:cf:02:43:
3d:9e:e8:c8:e2:5f:94:e1:0c:a8:a5:21:52:5d:ff:
33:6e:e5:26:80:48:59:a0:d5:a9:5e:a6:ef:06:e4:
79:93:9d:a9:48:17:e6:35:54:4a:ef:c7:7d:a9:a6:
a8:c1:8f:2a:f9:fb:0b:c0:2d:6a:fe:5e:ac:eb:f6:
81:c8:a4:56:38:bf:46:0e:12:59:f6:16:31:61:a5:
e2:bb:2f:b1:47:ff:46:b2:a8:92:d8:32:6d:e5:c5:
de:da:41:c2:55:2c:51:c9:9a:cb:77:d6:36:05:a5:
a7:e5:88:93:da:0e:ff:3b:3f:73:20:35:f8:d4:47:
77:0c:56:50:16:00:7d:df:f8:c2:40:4b:95:1a:1e:
11:03:be:56:bd:72:55:ef:44:ed:29:48:95:2d:82:
03:3d:1c:f2:a0:c9:99:f9:e7:85:b3:39:7a:5c:54:
c7:d1:18:eb:4b:a0:42:48:82:39:2c:1f:f3:60:2e:
ed:79:74:76:e4:a1:a0:c2:db:23:a1:cc:f8:e7:08:
9c:bc:d1:63:89:41:2f:78:8e:31:df:7a:53:b4:e2:
a5:e2:14:bc:40:0a:89:a6:ae:75:dd:3a:58:d3:06:
51:1a:11:8f:a5:4a:9e:d1:2f:a6:b1:07:32:be:74:
75:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8D:78:26:9D:B7:D6:51:89:B2:B6:DD:99:00:B5:01:97:E0:BD:1D
X509v3 Authority Key Identifier:
keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c4:28:1c:c0:d9:f0:1b:21:ac:6e:28:63:bf:41:e5:b2:3c:
91:32:b3:a9:8d:70:4e:79:a8:d3:eb:7d:71:e5:bd:7a:bf:9c:
86:f4:ab:ad:02:ec:3d:8b:10:51:b5:16:68:1c:06:e8:9a:91:
ed:e6:a5:16:54:dd:12:a8:1d:cf:4f:bc:a4:3a:dd:39:5c:1d:
07:d4:e2:f1:43:78:af:e7:d0:9f:2c:1b:77:e6:cc:09:4c:70:
ba:50:47:6e:e5:14:c4:9d:75:8d:b2:9e:da:d4:93:fb:27:b5:
8d:25:c1:0a:94:8d:05:29:8c:bd:13:ed:9e:4e:da:30:a9:7e:
1b:1e:c1:bf:f9:ac:d6:32:f1:5f:7d:74:a2:5d:35:25:ad:dd:
36:54:1a:09:5a:e7:fa:c7:fd:d8:fb:d9:67:c6:c5:3d:58:1c:
6b:49:e6:15:0b:56:80:27:03:e3:42:cb:4a:2f:33:e7:d7:f2:
93:e0:94:e7:98:78:09:26:f0:84:02:4e:2a:5a:e1:65:0a:f6:
e5:fb:ce:3a:89:d1:0c:46:b8:7f:f7:ae:d4:77:97:ca:c3:cc:
0f:41:61:7c:ce:a9:e2:11:47:f4:4a:40:c9:a6:d0:29:00:50:
0e:69:5b:4d:31:d2:22:4c:a7:86:a5:82:0f:14:72:64:de:27:
25:00:e5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:48:21 2026 by rpki-client