Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json)
Hash identifier: chv9zA1B5VIW11aIepb3Kx/xwuqUHRzsN1osQRzQnGU=
Subject key identifier: C6:BE:C1:05:47:43:B0:AA:39:B2:5D:13:79:DB:B7:8B:54:63:1F:4A
Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538
Certificate serial: 019E1F7FA5F351048C84E406F2CEA9E568CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
Manifest number: 0B9B
Signing time: Wed 13 May 2026 04:01:59 +0000
Manifest this update: Wed 13 May 2026 04:01:59 +0000
Manifest next update: Thu 14 May 2026 04:01:59 +0000
Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: rvqpWLtjXjZXMq6Gxiaum5XJPQRdMXUrvqmqSgOSKP4=)
2: y8l-GZaij3nY_lsT-zDKBTkrGss.roa (hash: edJk2bhQjppncI7NDvSvP36a6hLKHOIsn+JqFnH50EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:a5:f3:51:04:8c:84:e4:06:f2:ce:a9:e5:68:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538
Validity
Not Before: May 13 04:01:59 2026 GMT
Not After : May 14 04:01:59 2026 GMT
Subject: CN=c6bec1054743b0aa39b25d1379dbb78b54631f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3d:f5:bd:d8:b0:c0:30:3f:9f:8d:4c:c4:2e:
a0:5b:82:08:f7:23:8b:bc:77:7d:89:3f:37:83:90:
36:b0:dc:75:66:ac:51:45:3f:66:f5:40:42:b2:2f:
26:e2:f5:ac:20:55:73:aa:bf:6b:a9:77:86:f1:65:
7a:1c:7a:af:81:4d:7b:58:b5:f1:78:02:d1:b2:16:
59:a9:42:e9:85:b4:8c:0f:bf:77:02:e4:25:9f:59:
69:d9:6f:fc:6d:49:7c:33:89:a2:82:d0:ba:65:10:
3f:17:50:2d:75:09:4d:45:55:69:50:fa:ae:40:2c:
f1:0a:ff:eb:d9:45:cf:6d:c0:54:e6:69:ff:e4:4c:
9f:a9:64:fb:23:6d:63:0b:30:f0:cd:70:6c:0e:a4:
29:98:4c:01:f3:c4:cb:fd:c4:ca:a3:b4:70:16:43:
1b:51:45:49:97:7d:6b:c8:16:28:35:30:4c:aa:cd:
db:c4:3e:f7:88:ca:82:45:a5:b6:4e:2a:ce:19:4a:
fb:a9:27:dc:bd:9d:ff:b1:b5:dd:54:a6:53:98:b2:
70:24:79:13:9c:f5:22:2e:3d:26:04:80:4e:6e:8f:
e8:6e:30:6f:83:da:83:e2:f9:23:54:f2:ec:00:d5:
c1:7a:ae:c7:70:af:11:59:56:3f:39:eb:68:f7:56:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BE:C1:05:47:43:B0:AA:39:B2:5D:13:79:DB:B7:8B:54:63:1F:4A
X509v3 Authority Key Identifier:
keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d1:4f:be:ae:7d:e8:78:d9:7b:99:b0:19:6d:fc:fc:fb:26:
f0:71:ca:31:44:c8:c4:b0:2e:0f:56:ba:13:78:60:81:47:39:
a3:b3:5b:01:ea:4b:1b:82:a8:fd:18:f9:ce:e0:a4:40:5d:b1:
af:b7:a0:d5:15:25:a1:d1:ea:b7:07:47:fe:b2:5f:3d:91:28:
3f:99:77:f4:92:88:14:c0:f7:87:46:b3:ca:ce:07:1c:a1:e2:
87:f5:c0:26:73:04:65:13:79:2a:30:c6:71:80:f7:0f:0f:66:
4e:47:8f:84:7b:1a:6f:e6:a6:5e:d9:45:bc:3a:78:ed:30:72:
69:a8:6c:fa:a7:1d:ea:16:17:5b:29:e7:13:b4:f0:cb:fe:f4:
47:95:97:3b:4b:00:6f:d4:b4:20:10:24:d3:46:79:5c:e9:7c:
1d:05:3b:f9:f1:56:86:9a:7c:c7:78:f8:28:9d:71:55:8a:7b:
a0:b8:1e:d7:d2:a3:0a:e4:8d:47:b4:64:c1:a4:a6:09:45:43:
62:9e:74:8e:a2:8e:5c:18:6f:5b:67:9c:d2:e4:52:24:f2:10:
bc:79:08:15:52:57:c9:41:a5:56:e4:27:16:58:b4:2b:57:6c:
aa:85:2d:b6:6b:ab:b6:b0:2c:3d:02:17:94:d0:6a:e2:e5:13:
f6:0a:dc:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ff6XzUQSMhOQG8s6p5WjOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYmU1MTdlNzQ3NWUxN2MwNjk2NDM5MTBmZDZmNzdiMzE3
Yjg1MzgwHhcNMjYwNTEzMDQwMTU5WhcNMjYwNTE0MDQwMTU5WjAzMTEwLwYDVQQD
EyhjNmJlYzEwNTQ3NDNiMGFhMzliMjVkMTM3OWRiYjc4YjU0NjMxZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz31vdiwwDA/n41MxC6gW4II9yOL
vHd9iT83g5A2sNx1ZqxRRT9m9UBCsi8m4vWsIFVzqr9rqXeG8WV6HHqvgU17WLXx
eALRshZZqULphbSMD793AuQln1lp2W/8bUl8M4migtC6ZRA/F1AtdQlNRVVpUPqu
QCzxCv/r2UXPbcBU5mn/5EyfqWT7I21jCzDwzXBsDqQpmEwB88TL/cTKo7RwFkMb
UUVJl31ryBYoNTBMqs3bxD73iMqCRaW2TirOGUr7qSfcvZ3/sbXdVKZTmLJwJHkT
nPUiLj0mBIBObo/objBvg9qD4vkjVPLsANXBeq7HcK8RWVY/Oeto91aYdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMa+wQVHQ7CqObJdE3nbt4tUYx9KMB8GA1UdIwQY
MBaAFN6+UX50deF8BpZDkQ/W93sxe4U4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zODUwYzktOWM2OC00NjEzLWE4NzAt
ODlmNWM0ZjMyOTcwLzEvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zODUwYzktOWM2OC00NjEzLWE4NzAtODlmNWM0ZjMyOTcw
LzEvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9FPvq59
6HjZe5mwGW38/Psm8HHKMUTIxLAuD1a6E3hggUc5o7NbAepLG4Ko/Rj5zuCkQF2x
r7eg1RUlodHqtwdH/rJfPZEoP5l39JKIFMD3h0azys4HHKHih/XAJnMEZRN5KjDG
cYD3Dw9mTkePhHsab+amXtlFvDp47TByaahs+qcd6hYXWynnE7Twy/70R5WXO0sA
b9S0IBAk00Z5XOl8HQU7+fFWhpp8x3j4KJ1xVYp7oLge19KjCuSNR7RkwaSmCUVD
Yp50jqKOXBhvW2ec0uRSJPIQvHkIFVJXyUGlVuQnFli0K1dsqoUttmurtrAsPQIX
lNBq4uUT9grccQ==
-----END CERTIFICATE-----
Generated at Wed May 13 08:41:28 2026 by rpki-client