Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: ey8/3O3gszV7zYewJMlW6sEa7SwixEdqYJ0fVhIYfbM=
Subject key identifier: 6A:E2:00:82:30:63:A7:AE:32:A4:0E:03:C1:79:D1:FF:E2:B9:96:8B
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 019D2996FB158DC1337BF833EEB2971AA50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 11C8
Signing time: Thu 26 Mar 2026 10:00:53 +0000
Manifest this update: Thu 26 Mar 2026 10:00:53 +0000
Manifest next update: Fri 27 Mar 2026 10:00:53 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: N+dZn0e9Ar6qg3G/ACfTWTLsZTP/DBXmYerL8Bf/QPs=)
2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:fb:15:8d:c1:33:7b:f8:33:ee:b2:97:1a:a5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Mar 26 10:00:53 2026 GMT
Not After : Mar 27 10:00:53 2026 GMT
Subject: CN=6ae200823063a7ae32a40e03c179d1ffe2b9968b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:f6:5d:c0:2f:59:91:65:52:90:c0:24:a0:
29:b0:93:a7:5a:a9:86:8f:0e:4c:12:14:1b:60:c2:
e9:d2:67:50:e8:a9:ef:04:1b:9d:d0:06:d3:77:8a:
5a:f0:a6:6b:d1:7b:24:3c:6e:53:5d:64:a7:c3:9d:
be:53:56:71:5f:db:7f:ce:94:47:a5:45:cf:d7:51:
0e:75:11:ac:ad:5b:22:e4:f6:36:9e:09:6c:7d:57:
61:c7:91:16:91:f6:84:5c:fe:82:59:39:93:56:1f:
98:30:c1:8b:5c:27:34:f6:bb:90:7b:81:49:7b:88:
57:d2:e1:ec:2b:5f:05:11:b2:6a:5e:a1:d8:da:1e:
f6:43:ff:73:b6:be:f2:0e:82:9f:17:1f:37:60:51:
23:9b:d2:93:12:af:ab:51:85:c7:c4:59:c0:75:78:
a6:24:d8:4e:7a:de:c5:83:1c:c3:0f:12:44:25:18:
0d:34:aa:78:a5:ad:5b:28:81:d2:41:77:9e:de:fd:
da:0f:d5:9b:c3:fd:02:70:ab:8d:87:0a:72:d4:91:
7b:ca:bf:ca:9a:75:3f:07:17:16:e0:b2:ae:1e:b9:
f6:4f:86:26:0c:54:b7:ed:d6:9b:00:41:5b:dd:08:
9c:3f:ca:86:d9:50:fb:56:27:49:3f:e7:9c:dd:8b:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E2:00:82:30:63:A7:AE:32:A4:0E:03:C1:79:D1:FF:E2:B9:96:8B
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:42:ce:9f:6c:3a:73:ba:c0:f1:fb:2e:7c:11:a8:0b:32:43:
e3:dd:f0:ea:79:3a:e7:9b:19:de:8f:79:7d:c2:69:ef:cf:1b:
82:fa:59:66:df:b0:7a:ef:9a:be:0f:bb:6c:57:31:78:02:ec:
a3:24:d1:3a:57:49:23:f8:96:53:48:c4:a1:66:b4:26:97:94:
75:4d:64:0f:c2:6d:ba:f0:ec:68:5b:a9:3f:8c:cb:20:4b:25:
4c:74:35:38:a2:f5:82:c0:2a:be:d1:42:f2:20:1a:5f:b4:4f:
62:ad:71:a3:85:3e:d4:e7:65:76:27:08:94:7c:93:d7:2b:0e:
e5:1c:0b:97:09:ed:e5:30:b6:ab:79:6e:62:73:da:5c:80:85:
54:76:c4:58:b0:52:9f:56:22:0d:21:dd:5f:9a:9f:fc:c0:d1:
70:f9:dd:01:eb:2a:38:3b:71:47:55:fa:ab:37:3b:ca:fd:ab:
d1:a2:09:c0:80:80:6b:57:52:8b:fe:78:d6:46:29:4b:1f:df:
35:7d:e9:f1:0b:ae:5a:7c:77:72:e6:f5:35:67:90:a4:42:2f:
7d:80:c6:5c:a9:66:3f:e8:14:eb:45:9f:82:dc:da:51:76:da:
eb:4d:89:b2:62:23:9a:d5:b6:ad:55:62:bb:60:67:2f:67:79:
58:53:09:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:01 2026 by rpki-client