Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json)
Hash identifier: tvTScQFo2VqHBNNROX06vbka5s0N1Yoi3iWadqn72EQ=
Subject key identifier: 4D:D0:3F:0B:AE:F6:90:71:C7:F7:A8:04:55:1F:C1:CB:BC:F3:95:D4
Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538
Certificate serial: 019D9A3F1501066690881ADA6547628440DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
Manifest number: 0B56
Signing time: Fri 17 Apr 2026 07:01:58 +0000
Manifest this update: Fri 17 Apr 2026 07:01:58 +0000
Manifest next update: Sat 18 Apr 2026 07:01:58 +0000
Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: 7RFOVefwhldHcRH0+IG8EVcVB05SEKRFNnuieCflJEA=)
2: y8l-GZaij3nY_lsT-zDKBTkrGss.roa (hash: edJk2bhQjppncI7NDvSvP36a6hLKHOIsn+JqFnH50EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:15:01:06:66:90:88:1a:da:65:47:62:84:40:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538
Validity
Not Before: Apr 17 07:01:58 2026 GMT
Not After : Apr 18 07:01:58 2026 GMT
Subject: CN=4dd03f0baef69071c7f7a804551fc1cbbcf395d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5e:dc:01:be:e8:4f:2b:1f:f6:66:fa:88:68:
23:61:83:37:de:e7:6b:40:50:be:0d:04:67:f5:34:
14:b9:19:24:88:75:60:66:f0:eb:eb:43:77:c4:7b:
3a:33:d5:c2:72:52:28:87:ff:cd:ae:d7:56:bf:a4:
57:3b:d1:fd:62:59:28:a8:1a:b0:2a:b8:26:ec:09:
49:e2:b2:a8:2c:a8:3d:f0:89:95:ce:8d:d9:a4:2e:
b3:f1:9a:05:81:b7:30:08:4b:a9:76:98:f5:8d:3a:
51:ca:30:39:3c:11:77:0f:36:6f:36:e7:ca:0b:87:
2c:36:37:29:e8:29:b7:4b:0e:bf:d1:fb:d1:f5:7f:
17:3b:e8:a9:cb:2a:55:a2:4e:3e:a1:cb:5c:48:27:
ea:b9:af:79:0d:bf:07:02:fd:59:71:b8:e2:a3:8c:
ff:37:f4:5b:fc:2e:ea:c3:7b:3d:56:08:fb:78:58:
fe:c3:20:72:bc:6f:dc:ee:13:1a:0f:5b:1f:cd:98:
77:b2:5c:a9:d3:7f:74:b3:ac:a1:6d:14:ba:88:6e:
96:7b:1b:35:cb:4f:25:ad:e9:e7:c9:de:e8:16:07:
16:36:dd:cf:35:4b:54:9c:29:10:01:49:46:b3:df:
1e:63:6a:86:6f:77:de:30:c0:91:f1:3b:32:69:dd:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D0:3F:0B:AE:F6:90:71:C7:F7:A8:04:55:1F:C1:CB:BC:F3:95:D4
X509v3 Authority Key Identifier:
keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:d9:0e:86:9f:01:ec:8d:61:c4:a7:84:83:c2:d5:e4:0c:ad:
25:d5:aa:83:ff:50:1f:6e:66:f7:f3:8e:c9:fb:39:e5:01:c1:
2f:f0:89:a5:a8:69:8a:23:cf:b2:59:f2:1c:95:40:d5:ad:4e:
1b:51:14:4e:6d:e9:47:d3:f5:43:72:9f:7e:cd:90:75:1b:0e:
fe:15:ea:50:90:03:b4:13:23:e3:57:ea:3d:40:28:f9:bb:c0:
96:c0:68:df:86:05:bb:8a:f5:8a:cf:93:c0:5b:c7:ca:e0:17:
81:59:41:26:91:b2:2e:9d:5b:52:45:c9:fc:55:e8:e7:4c:0d:
a6:9b:2c:e1:b4:c7:a7:75:d1:f5:c1:36:84:16:19:99:2d:08:
af:1c:57:ea:d0:14:99:20:ad:c2:d9:78:71:35:82:95:1f:b8:
09:42:e6:ae:20:06:39:17:a1:25:0c:26:4c:c3:1e:8d:67:d4:
bf:23:a8:07:1e:20:12:ee:c5:da:10:3b:23:a4:0a:03:a6:bd:
a7:4a:67:c4:24:8c:92:e7:c7:bb:11:20:d8:b1:46:f2:ea:82:
89:1c:53:31:6e:54:5c:cb:6a:d9:ba:d6:1b:23:04:fe:08:e1:
9a:95:04:b4:0b:e4:72:ce:dc:21:f7:b0:67:3a:7a:c0:d2:a1:
52:a1:94:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPxUBBmaQiBraZUdihEDdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYmU1MTdlNzQ3NWUxN2MwNjk2NDM5MTBmZDZmNzdiMzE3
Yjg1MzgwHhcNMjYwNDE3MDcwMTU4WhcNMjYwNDE4MDcwMTU4WjAzMTEwLwYDVQQD
Eyg0ZGQwM2YwYmFlZjY5MDcxYzdmN2E4MDQ1NTFmYzFjYmJjZjM5NWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2V7cAb7oTysf9mb6iGgjYYM33udr
QFC+DQRn9TQUuRkkiHVgZvDr60N3xHs6M9XCclIoh//NrtdWv6RXO9H9YlkoqBqw
Krgm7AlJ4rKoLKg98ImVzo3ZpC6z8ZoFgbcwCEupdpj1jTpRyjA5PBF3DzZvNufK
C4csNjcp6Cm3Sw6/0fvR9X8XO+ipyypVok4+octcSCfqua95Db8HAv1Zcbjio4z/
N/Rb/C7qw3s9Vgj7eFj+wyByvG/c7hMaD1sfzZh3slyp0390s6yhbRS6iG6Wexs1
y08lrennyd7oFgcWNt3PNUtUnCkQAUlGs98eY2qGb3feMMCR8Tsyad3ZcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3QPwuu9pBxx/eoBFUfwcu885XUMB8GA1UdIwQY
MBaAFN6+UX50deF8BpZDkQ/W93sxe4U4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zODUwYzktOWM2OC00NjEzLWE4NzAt
ODlmNWM0ZjMyOTcwLzEvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zODUwYzktOWM2OC00NjEzLWE4NzAtODlmNWM0ZjMyOTcw
LzEvM3I1UmZuUjE0WHdHbGtPUkQ5YjNlekY3aFRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9kOhp8B
7I1hxKeEg8LV5AytJdWqg/9QH25m9/OOyfs55QHBL/CJpahpiiPPslnyHJVA1a1O
G1EUTm3pR9P1Q3Kffs2QdRsO/hXqUJADtBMj41fqPUAo+bvAlsBo34YFu4r1is+T
wFvHyuAXgVlBJpGyLp1bUkXJ/FXo50wNppss4bTHp3XR9cE2hBYZmS0IrxxX6tAU
mSCtwtl4cTWClR+4CULmriAGORehJQwmTMMejWfUvyOoBx4gEu7F2hA7I6QKA6a9
p0pnxCSMkufHuxEg2LFG8uqCiRxTMW5UXMtq2brWGyME/gjhmpUEtAvkcs7cIfew
Zzp6wNKhUqGUnQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:49 2026 by rpki-client