Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json)
Hash identifier: lCnfNFrJKETrkuZxsrf2RW03k3W7rcZdQQgKxKGHeNU=
Subject key identifier: 0A:E1:5C:A7:FE:31:D7:9D:9C:BA:1C:66:14:02:F2:FC:E1:A9:B0:A2
Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538
Certificate serial: 01A0EBF962A3CE8643B792795FE602966A65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
Manifest number: 0D0E
Signing time: Tue 29 Sep 2026 07:03:04 +0000
Manifest this update: Tue 29 Sep 2026 07:03:04 +0000
Manifest next update: Wed 30 Sep 2026 07:03:04 +0000
Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: B3p9AY2E9LPicZLQCCvZr+9RGicQFP5fuj/Bw2UUH2U=)
2: y8l-GZaij3nY_lsT-zDKBTkrGss.roa (hash: edJk2bhQjppncI7NDvSvP36a6hLKHOIsn+JqFnH50EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:62:a3:ce:86:43:b7:92:79:5f:e6:02:96:6a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538
Validity
Not Before: Sep 29 07:03:04 2026 GMT
Not After : Sep 30 07:03:04 2026 GMT
Subject: CN=0ae15ca7fe31d79d9cba1c661402f2fce1a9b0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2b:43:bc:e5:a0:1f:f4:e6:9e:05:cb:43:33:
15:b3:19:07:94:31:dc:75:44:d3:45:62:94:bd:5d:
6e:df:ad:15:bb:49:57:03:c8:47:48:f6:02:81:99:
7c:9c:24:10:37:32:8f:b8:ee:d4:69:11:22:e1:ce:
af:09:6e:f2:0b:af:f1:71:ba:2a:ff:6e:6e:42:3d:
4f:0e:c2:7a:0a:2f:62:dd:65:02:3f:58:dd:6e:ed:
68:19:83:17:17:3f:2f:15:b8:86:89:fc:47:82:22:
61:9d:89:48:51:d2:03:e1:fe:65:dc:28:ec:f5:22:
e9:e8:7d:da:77:83:b9:ae:52:6e:55:a7:2c:e0:94:
33:17:ec:05:d0:fa:c4:8f:de:6b:20:5d:a7:f2:64:
6e:02:3c:d9:ea:dd:e0:2a:81:09:2b:df:e9:08:be:
9a:1d:fd:70:a7:52:87:9f:c6:f0:05:ed:3c:1d:78:
a4:b8:25:04:72:f6:74:81:05:6e:a3:26:7a:2a:cb:
d6:4b:f1:8c:f6:49:03:9c:e1:64:ba:d0:b5:af:3e:
59:3c:e0:d7:e9:6d:90:bf:44:09:c3:47:23:93:a0:
6a:51:45:4b:0e:10:d2:d1:56:17:f8:20:de:ae:e9:
12:55:2e:68:6f:10:ea:37:b3:6a:6a:cd:ff:cb:64:
af:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E1:5C:A7:FE:31:D7:9D:9C:BA:1C:66:14:02:F2:FC:E1:A9:B0:A2
X509v3 Authority Key Identifier:
keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:b4:21:80:6a:70:2e:07:df:57:43:97:22:1e:cf:ad:28:0b:
5b:b4:70:ad:f2:8a:84:41:d7:11:f9:5d:39:24:4e:45:e5:db:
56:aa:f7:ff:88:a2:63:da:0d:b2:59:4b:c3:70:de:7f:61:9b:
79:b8:3e:c4:5d:85:bc:b9:7f:04:0d:eb:9a:ca:6f:2e:e5:22:
24:8a:e2:1b:26:9f:9b:35:87:fe:29:2e:18:7e:92:b3:3b:19:
fa:31:e3:41:9f:d4:95:b5:75:f4:9e:d2:28:72:3b:21:57:ee:
f6:9b:54:54:01:94:e2:e9:3e:6a:07:d3:2f:e2:b1:1f:d6:94:
7e:9a:5b:55:60:5e:5e:a2:0d:31:52:ff:d8:45:1e:9f:29:d8:
76:dc:54:d3:ed:63:a2:5e:18:14:16:1e:5d:21:8b:05:70:cf:
62:f7:70:29:ba:f6:70:67:99:7f:fc:af:59:3e:fa:17:b5:24:
10:6a:89:d1:77:8c:44:60:06:15:c4:bf:70:39:7d:57:64:a2:
c5:49:20:9c:e0:e0:9c:0a:38:d8:c5:98:89:21:e3:e0:06:f4:
38:79:2a:47:6c:87:b0:f4:9d:5f:86:c9:76:f4:b9:f1:69:e0:
8d:76:1b:7c:d4:eb:4d:04:05:ac:44:09:ca:0e:96:a9:b5:6b:
84:25:c9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:36:55 2026 by rpki-client