Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: PGFK1MCFhx1wRnyZuZa8mEijPUA9+BlpIzqFxE+hBbE=
Subject key identifier: 43:B5:3D:F2:96:43:26:3D:81:D2:8F:CA:57:D9:FB:12:68:F6:16:3B
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 019E1ED9FC152E99B7BA66C6237F101D67CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 1247
Signing time: Wed 13 May 2026 01:01:02 +0000
Manifest this update: Wed 13 May 2026 01:01:02 +0000
Manifest next update: Thu 14 May 2026 01:01:02 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: q//64ehYHntOGvvBgyWlx/DQ3ASI31FcEwyWM9zh+GQ=)
2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:fc:15:2e:99:b7:ba:66:c6:23:7f:10:1d:67:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: May 13 01:01:02 2026 GMT
Not After : May 14 01:01:02 2026 GMT
Subject: CN=43b53df29643263d81d28fca57d9fb1268f6163b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:dd:e3:7c:32:b8:9f:0f:bb:dd:01:c1:e0:
84:eb:4a:d2:8e:91:06:61:d4:46:49:3c:39:4a:a5:
f4:5e:7c:af:f7:1a:46:31:7f:a7:ab:31:22:21:82:
c9:ef:ff:a8:98:dc:34:bf:20:a3:1e:97:5d:02:0f:
af:9b:25:86:73:e0:61:0c:bf:d0:de:5b:07:f5:28:
2a:4d:f6:57:ac:11:71:cb:e5:c6:9b:d2:82:53:4c:
f9:83:4c:ba:e5:98:52:c4:a3:35:00:8d:f8:d5:dc:
50:70:95:8e:46:4c:13:d9:fc:8b:a0:2f:ec:b9:64:
a5:1d:9e:d4:a6:14:8b:cb:49:bb:ec:d7:7b:f6:b4:
9c:e0:02:cd:97:ce:46:90:66:82:37:bb:27:1a:67:
b3:2f:11:da:5c:d9:bd:01:b6:29:0f:87:ae:63:b4:
24:dd:4f:e2:96:74:75:32:0d:78:26:33:01:e8:86:
83:43:67:8f:86:14:35:52:62:d5:40:42:ca:07:9c:
f6:df:cf:a7:55:67:a5:1b:8b:3d:1a:ff:24:77:c6:
85:89:6c:33:cd:a5:21:b4:b8:04:11:73:db:56:2e:
22:ba:9a:98:3a:7b:e8:4a:3a:4b:4e:4f:b5:61:12:
14:8c:29:52:67:79:7a:b1:20:db:19:3f:0d:d5:1d:
b4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B5:3D:F2:96:43:26:3D:81:D2:8F:CA:57:D9:FB:12:68:F6:16:3B
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3c:13:a4:0a:80:f6:87:75:96:23:90:b0:3e:86:8e:0e:2f:
0e:2a:f5:dc:77:0a:a3:87:f9:94:20:49:11:61:33:5c:99:69:
e9:40:46:ff:23:e8:d1:71:08:8f:5c:fb:92:ef:f2:d8:42:0d:
45:6e:f2:05:08:5b:3b:93:b0:a4:96:63:dd:c9:4e:ea:42:e6:
fe:8e:75:cb:ed:fb:ca:59:e6:22:18:da:29:b6:d4:d9:1f:25:
c4:d9:26:82:4c:b0:5e:09:4a:88:c9:48:8f:cc:cc:82:e6:c7:
c9:e1:83:2f:ac:4e:c4:c1:cc:65:06:eb:30:42:6f:73:33:19:
7f:c3:03:8d:25:7c:43:c1:42:af:86:a3:87:ad:e1:93:a4:1d:
88:6a:e9:4e:c0:8f:e3:86:54:2b:b3:e2:80:e2:26:a6:df:47:
be:46:22:e7:32:e0:f6:f6:a0:28:0f:d0:98:7a:d7:0d:7f:26:
1e:b5:80:60:57:48:6e:32:0d:39:0c:88:8b:20:96:b8:92:cb:
fd:fd:e5:ba:61:d7:7a:ab:de:6d:fd:b8:9e:48:8f:ed:01:45:
8c:d7:63:c3:3c:9d:4a:48:d8:6a:fd:0b:52:b7:ce:5c:89:9b:
9b:5d:9b:a6:5a:1e:bc:d8:65:2b:0d:47:0a:d6:2c:87:c0:15:
76:0a:c7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:50:07 2026 by rpki-client