Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: itwznu9SDX7GVaGgbsnDaous4fG8cL+2QRJaKGlX/q8=
Subject key identifier: 58:8D:4A:6B:03:68:CE:6C:34:6F:E6:C9:C8:C8:57:90:62:C2:F8:E8
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 019F91A395741A7991093A5F8C3C04D34BD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 1307
Signing time: Fri 24 Jul 2026 01:00:44 +0000
Manifest this update: Fri 24 Jul 2026 01:00:44 +0000
Manifest next update: Sat 25 Jul 2026 01:00:44 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: mC3zhNc7cziMhJhV6dtotBukSo2+t5l0fwC2tKLZfh0=)
2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:95:74:1a:79:91:09:3a:5f:8c:3c:04:d3:4b:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Jul 24 01:00:44 2026 GMT
Not After : Jul 25 01:00:44 2026 GMT
Subject: CN=588d4a6b0368ce6c346fe6c9c8c8579062c2f8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:99:72:15:ab:14:aa:83:e4:50:44:94:96:
c3:57:e6:ba:a6:1e:e0:8f:5d:02:c0:99:61:70:78:
4f:ba:84:3c:53:27:86:7a:ad:ae:e3:ec:62:50:c7:
15:7f:40:6e:25:29:ba:d2:ba:9c:d6:a6:4a:9d:f0:
d2:a8:9c:41:b9:76:91:b3:7b:2e:b5:32:6b:46:db:
07:f6:26:13:7f:b4:ae:60:da:a9:4a:a4:cf:c8:87:
45:7b:a4:59:5d:27:14:e4:4d:e3:25:41:a0:d5:26:
c1:b3:e4:76:01:85:c4:fb:a3:66:f9:69:19:48:9a:
ac:da:50:80:e7:0d:73:c3:e9:2f:c9:b9:13:35:40:
3a:08:a1:3f:24:9e:2f:85:ce:ce:55:33:03:dd:1f:
1e:ab:b7:1e:71:b3:cc:11:8a:92:7b:23:0d:59:4c:
af:90:56:c2:d1:bc:d4:a5:4d:0c:2f:cf:47:2c:bf:
56:c4:98:98:ab:22:c1:ed:1c:6b:83:60:b2:a4:fd:
6d:42:56:1b:b8:be:9e:79:4e:3f:88:ea:cf:14:f4:
7c:fa:08:93:ea:06:54:4b:97:cd:92:6e:8e:9a:53:
71:d3:d0:40:56:c2:f9:e3:a4:47:77:2e:4e:bf:a7:
8e:0e:1d:18:0c:61:f5:94:f3:1b:b5:d7:98:8e:d3:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8D:4A:6B:03:68:CE:6C:34:6F:E6:C9:C8:C8:57:90:62:C2:F8:E8
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:78:00:a1:1c:cf:50:2d:d0:ec:b7:a5:7f:1f:95:7d:ad:e4:
92:07:27:bf:1a:b3:a8:62:04:97:a5:63:24:63:e1:9c:61:67:
55:36:18:56:fa:55:08:eb:51:a8:70:fc:24:b9:2e:fd:62:cc:
b0:9e:ed:b5:dd:a6:af:5a:67:64:c7:4d:05:e3:66:06:80:13:
c3:38:00:24:e1:d0:0a:c2:dc:12:54:38:c4:b7:5a:25:da:fc:
c3:b3:3f:8c:d7:81:ff:4e:cd:8f:3b:87:ab:41:7a:3c:94:08:
79:2c:86:10:63:3a:7c:d9:c1:6e:20:19:49:59:0f:2d:4c:ce:
a6:fc:e1:a9:eb:21:de:48:76:df:1c:42:2d:d4:4e:2a:0b:38:
b7:0d:76:34:47:6c:b8:88:f3:49:a9:eb:02:53:17:8f:32:ac:
0d:c3:ce:ec:82:ad:9d:e7:d6:35:9b:16:15:91:1b:cd:13:fe:
8b:eb:67:e7:e7:60:bd:de:3b:05:c5:af:de:f6:b8:9d:72:a1:
16:42:9a:79:d9:e7:b1:cc:43:83:fa:6e:6a:3d:13:50:f4:09:
e3:a0:36:9e:56:62:9e:54:2c:99:06:4f:56:7f:21:20:53:79:
cd:ea:2e:5f:4d:4b:3b:85:74:d4:d0:10:2c:7d:c9:ff:41:e6:
f9:b9:71:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:53:22 2026 by rpki-client