Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: 8m+fBP0G1ybq7mumeW1ERACda70wE1UD/Jap42mo8/I=
Subject key identifier: C2:E9:C7:61:52:7B:7D:B9:4F:38:A2:2B:F1:44:51:48:18:36:1F:8F
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 01A0D04945FF1263C5360FF9FA120546BDF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 13AC
Signing time: Wed 23 Sep 2026 22:00:57 +0000
Manifest this update: Wed 23 Sep 2026 22:00:57 +0000
Manifest next update: Thu 24 Sep 2026 22:00:57 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: iVuJnFM4uro8KyyDrTOsErXXf9stV2puSHuoqy2kzw0=)
2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 22:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:45:ff:12:63:c5:36:0f:f9:fa:12:05:46:bd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Sep 23 22:00:57 2026 GMT
Not After : Sep 24 22:00:57 2026 GMT
Subject: CN=c2e9c761527b7db94f38a22bf144514818361f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:bf:70:f5:0a:6c:e1:c2:e6:e4:be:95:88:
47:f1:33:f8:59:43:eb:de:42:a6:54:6b:ee:c5:fc:
11:56:83:f8:c3:75:11:71:62:58:de:aa:ad:d0:f7:
f0:bc:c8:da:ed:08:54:0b:c6:99:dc:51:ee:23:1b:
91:56:27:c5:e5:c7:4e:1f:74:4a:f3:c6:6d:9a:cb:
c1:77:82:d3:1b:5b:f8:7c:66:74:8b:52:68:b9:a8:
f7:f4:87:9b:36:a5:1d:30:fb:b9:bf:5b:b6:b2:58:
3e:3b:96:1d:91:75:31:2b:50:c0:57:e7:e6:90:27:
db:ee:6e:91:63:89:32:f2:fc:9c:d2:fe:41:cc:6f:
a6:8b:dd:00:87:59:e6:82:13:d0:83:80:dd:9c:07:
ed:08:fb:b0:07:ab:20:e2:a2:ff:7f:ba:83:fd:eb:
b3:b8:ee:46:bc:1a:e7:6a:e0:a8:78:49:e0:1a:d0:
ca:fc:29:30:5a:72:8b:26:09:67:ad:1f:a2:8e:fd:
bd:0f:48:ee:3b:9f:80:c6:2e:04:e9:32:45:25:b1:
7e:e9:12:f1:8f:e0:89:42:93:da:71:33:3e:b5:d3:
c0:ec:23:94:50:ba:38:d6:b6:67:1a:46:c8:c1:2f:
98:ea:2b:84:3c:07:3b:59:9b:19:00:73:ec:cc:61:
f7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E9:C7:61:52:7B:7D:B9:4F:38:A2:2B:F1:44:51:48:18:36:1F:8F
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:53:81:4a:db:1f:8f:9b:9c:00:0f:4a:8c:ca:26:84:49:11:
ff:07:76:31:6d:18:39:19:a5:42:34:f3:eb:80:4b:39:26:4d:
d6:8e:ec:45:67:91:1a:60:6f:14:40:e7:f6:1d:1e:f3:26:59:
c2:74:3a:d4:79:45:60:c8:53:9c:b2:2d:f6:9f:68:76:d4:61:
d8:d8:69:be:16:c1:1e:69:ab:71:e9:13:74:32:a2:24:88:10:
cf:ac:55:31:78:f7:62:a5:4b:30:e0:a4:44:10:60:55:99:8c:
a9:c4:8b:19:61:60:c2:0d:9f:5d:09:32:3c:b7:26:94:72:ab:
26:9c:96:44:e6:15:1d:82:66:e3:6f:ef:c5:b7:88:11:23:31:
ef:f2:48:fe:08:16:1a:d7:aa:27:d3:b2:42:20:28:56:67:6c:
89:51:b4:93:26:e5:ec:f8:a9:81:fc:e3:e3:f3:5f:9a:29:0c:
3e:59:25:30:0c:15:85:b8:6d:25:ac:bc:83:0b:ee:7d:a4:f1:
80:76:e4:c5:d4:2e:ea:1c:da:19:24:e3:48:55:51:80:e4:15:
b8:5a:d1:0b:14:3f:64:12:bb:b7:79:72:58:f7:7a:21:5d:41:
3e:29:92:8c:31:37:2e:3d:36:47:11:28:e8:b9:2c:e4:e2:0a:
19:ac:63:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:57:38 2026 by rpki-client