Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json)
Hash identifier: 6DbSIxiPk8i2kGwyVya2WZmaseb3aHb+ViQl/9ljaRY=
Subject key identifier: C5:EE:F4:70:E6:F3:87:54:FD:32:51:89:54:8F:89:CB:8E:CB:EA:78
Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538
Certificate serial: 019D284E08260A67A9CC45836056FB9A1118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
Manifest number: 0B1B
Signing time: Thu 26 Mar 2026 04:01:35 +0000
Manifest this update: Thu 26 Mar 2026 04:01:35 +0000
Manifest next update: Fri 27 Mar 2026 04:01:35 +0000
Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: Y4mBwNk6JowFRT0s/EXICXB0+2ruKl8auYRGBPpzgWE=)
2: y8l-GZaij3nY_lsT-zDKBTkrGss.roa (hash: edJk2bhQjppncI7NDvSvP36a6hLKHOIsn+JqFnH50EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:08:26:0a:67:a9:cc:45:83:60:56:fb:9a:11:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538
Validity
Not Before: Mar 26 04:01:35 2026 GMT
Not After : Mar 27 04:01:35 2026 GMT
Subject: CN=c5eef470e6f38754fd325189548f89cb8ecbea78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0b:e5:c8:53:2f:6b:c9:3b:77:cd:44:bb:e1:
7d:6a:97:f0:71:98:ee:92:41:4d:d3:e0:fb:71:e4:
ce:a8:53:36:b2:45:a4:65:eb:33:17:62:fb:69:9e:
20:61:0e:19:06:fc:a5:30:8e:c3:6a:35:b9:c6:b0:
74:3c:d0:49:6d:e4:cf:c8:ea:cb:af:aa:85:00:c7:
65:1b:29:b2:9b:4b:91:08:0e:aa:e9:e4:43:8e:81:
20:18:54:55:4a:24:c9:d6:e4:8a:94:f9:7e:cb:25:
4c:08:e4:01:88:eb:f8:cf:71:36:56:c0:af:4a:da:
87:53:25:63:a2:59:cd:e1:e8:03:45:55:01:63:27:
1d:5f:f8:25:c9:bb:7c:96:34:26:99:5e:0e:f3:84:
c6:7e:ee:64:a3:4c:4a:4a:db:36:db:be:d7:f0:b4:
c0:fb:aa:b8:ce:31:0d:64:fa:28:0e:a8:4d:a1:e1:
fd:b6:b1:c5:0a:0d:9a:eb:12:d9:88:bb:4b:ea:5a:
c8:63:d3:da:27:35:64:2a:1f:2c:e1:b5:83:1b:51:
2f:aa:1e:54:dc:b3:ea:b5:cb:ae:bf:9a:fe:b2:0d:
14:a4:fc:8f:64:1e:d6:f7:0a:f6:b8:13:ef:29:42:
b5:da:0e:18:c9:20:b7:ba:58:e6:ef:61:0a:4c:29:
af:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EE:F4:70:E6:F3:87:54:FD:32:51:89:54:8F:89:CB:8E:CB:EA:78
X509v3 Authority Key Identifier:
keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:43:47:43:d1:b6:d3:81:91:55:c8:c4:3e:3c:dd:08:02:c0:
1a:3c:ad:30:8e:fe:cf:9a:7e:75:12:cb:1b:79:55:33:34:2b:
68:a9:86:0a:a9:ce:67:d4:fe:59:36:13:cf:23:fc:e4:65:08:
c6:33:1b:57:8e:7c:bf:a7:07:e9:f1:f2:2d:34:e6:8a:52:e8:
de:38:ee:1e:db:b6:0e:41:15:7b:83:82:d2:46:3a:92:ab:97:
9f:2d:80:18:a8:55:ca:80:a0:aa:00:a8:c6:d1:d6:90:5c:a5:
57:54:83:be:38:71:8c:f3:df:9d:b6:ab:9f:f4:eb:96:fd:ea:
d2:35:e9:24:5d:6b:5a:5d:6c:eb:a2:a3:ed:51:f3:3c:33:18:
fb:98:57:f7:18:62:63:d2:68:60:4e:8a:3d:fb:43:a7:fb:34:
d9:27:62:99:e4:c9:e0:66:c2:f4:8f:22:01:0f:4c:1c:be:8d:
43:06:5b:c9:1f:59:bc:8a:41:ed:d4:20:02:31:01:7a:18:0d:
15:32:ad:e7:3a:82:e8:c5:db:74:01:5a:08:d4:23:c5:d8:8d:
d9:c0:5e:42:e7:c7:c8:8e:4a:76:82:4a:34:45:fc:c6:42:83:
98:04:10:31:19:56:3e:f5:c7:fb:4d:4a:91:67:75:0c:42:69:
e5:82:a0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:24 2026 by rpki-client