Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json)
Hash identifier: xqu4O4zNRWZ+wD1WlmYiOw07xjA/O6nWBcksS6YMqgQ=
Subject key identifier: EB:F2:D9:52:99:D3:CB:F9:9C:3C:F9:5D:85:89:40:AD:33:76:02:C5
Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538
Certificate serial: 01A0E43E97F4F4FDE2F765AABAAA62C4A9DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
Manifest number: 0D0A
Signing time: Sun 27 Sep 2026 19:01:42 +0000
Manifest this update: Sun 27 Sep 2026 19:01:42 +0000
Manifest next update: Mon 28 Sep 2026 19:01:42 +0000
Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: Q9XiRenZ6uyodspSqdFmusODQdSSzwlWVcFJU6OBEQk=)
2: y8l-GZaij3nY_lsT-zDKBTkrGss.roa (hash: edJk2bhQjppncI7NDvSvP36a6hLKHOIsn+JqFnH50EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:97:f4:f4:fd:e2:f7:65:aa:ba:aa:62:c4:a9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538
Validity
Not Before: Sep 27 19:01:42 2026 GMT
Not After : Sep 28 19:01:42 2026 GMT
Subject: CN=ebf2d95299d3cbf99c3cf95d858940ad337602c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:8b:9e:37:10:d2:de:14:db:5d:e3:80:78:
ce:6c:c4:33:49:ac:c3:7e:c6:88:c2:8c:30:cc:ee:
7b:b4:91:1e:6f:14:17:66:91:bd:9d:2b:f6:bd:08:
c1:3f:4b:fc:28:17:ed:12:06:ce:11:a6:c2:0e:bb:
ad:65:9c:98:71:a1:f7:9a:87:4b:19:d1:d4:87:80:
64:fd:98:9b:8e:65:ae:bf:eb:3a:ec:29:94:19:4e:
e6:36:67:ce:07:8c:c1:9d:1c:6c:24:1e:c6:79:99:
05:d3:bc:92:f9:5e:22:64:05:a5:e2:68:f9:01:17:
70:57:72:1b:43:91:68:7b:ff:7c:cb:dd:76:ed:92:
26:0c:e0:dd:34:3c:9a:4b:a9:b6:64:ec:86:4e:86:
c6:a9:75:17:f9:f5:64:c0:3f:62:c4:bd:f4:68:c5:
58:4a:a0:1a:7f:f8:8d:2c:c6:af:a1:3a:bc:60:ab:
b9:a1:1f:8a:67:22:a0:81:bb:90:da:46:a3:a1:b2:
03:8e:67:c1:11:06:ff:2b:2f:e0:07:d6:97:d3:8d:
b9:81:29:32:81:81:30:84:22:5a:b3:c7:33:88:2c:
0b:95:e7:92:b4:c6:03:6b:c7:fd:58:b0:e8:f0:4d:
42:b2:c5:ed:ad:56:f6:c0:32:1c:42:9c:08:8a:66:
d5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F2:D9:52:99:D3:CB:F9:9C:3C:F9:5D:85:89:40:AD:33:76:02:C5
X509v3 Authority Key Identifier:
keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:dc:8b:4d:71:c3:cc:a2:58:4f:16:a0:87:bb:26:8f:7e:9e:
0e:8c:c7:b2:f1:75:fb:0b:de:ff:96:1e:30:ba:38:20:8d:55:
f7:69:3b:73:9d:19:fa:ff:47:f7:f4:00:35:00:10:5d:d2:8a:
9c:48:25:d9:8d:6f:9d:0c:9e:90:ce:67:07:f1:60:0b:34:95:
da:69:ec:84:b7:39:e8:28:0d:0b:5a:df:99:1f:06:3f:d2:7d:
89:b6:ed:dc:c1:f7:db:46:94:ad:b7:48:e6:c9:e6:29:23:39:
b2:3b:64:96:ca:b3:52:65:18:e7:62:f3:5d:07:57:1a:8d:6f:
79:0a:da:1a:35:82:77:74:29:80:55:90:f5:37:24:e0:0c:d5:
d2:3d:4b:10:a4:b2:55:94:0e:8e:c0:03:07:f6:04:a4:dc:72:
e3:df:24:c2:a0:e6:df:8d:24:f8:26:3d:aa:88:87:39:e0:45:
2c:4d:f0:86:ae:73:8b:25:26:19:0f:f4:ad:93:58:90:0c:ac:
cf:92:a8:3e:4c:49:a2:bd:c5:ba:fe:b5:9a:34:fa:4b:45:08:
b0:ed:30:fa:04:4d:d9:1f:d3:92:52:f3:4c:e8:83:bf:5f:ff:
80:02:88:71:70:45:55:65:70:f8:65:54:90:96:7d:41:a6:b6:
51:60:77:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:36:14 2026 by rpki-client