Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json)
Hash identifier: sSF5soXBg2ncNZwLPRy3KfitslilrdJUt8WWgVM3Z5c=
Subject key identifier: B7:62:23:55:76:AB:BA:CA:D9:68:FE:33:E8:51:C7:B9:92:3D:14:78
Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538
Certificate serial: 019CAAC65642A84DCA1ED23F74FA4A8002FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
Manifest number: 0ADA
Signing time: Sun 01 Mar 2026 19:00:50 +0000
Manifest this update: Sun 01 Mar 2026 19:00:50 +0000
Manifest next update: Mon 02 Mar 2026 19:00:50 +0000
Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: 9lVxsyqM/SiwK0BEQ4OetjMhbXeEx1UcSrT8PEQdh8o=)
2: y8l-GZaij3nY_lsT-zDKBTkrGss.roa (hash: edJk2bhQjppncI7NDvSvP36a6hLKHOIsn+JqFnH50EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:56:42:a8:4d:ca:1e:d2:3f:74:fa:4a:80:02:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538
Validity
Not Before: Mar 1 19:00:50 2026 GMT
Not After : Mar 2 19:00:50 2026 GMT
Subject: CN=b762235576abbacad968fe33e851c7b9923d1478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:24:b2:bd:cc:b2:ae:c7:b7:c8:62:ef:0e:59:
61:c4:3e:2e:a3:9b:95:5c:85:35:8e:9e:23:7e:3b:
eb:64:f6:11:42:a7:f8:ba:97:f9:ac:02:26:57:7d:
62:1e:05:c9:40:fa:a6:7d:93:9b:56:25:37:a8:30:
73:45:9a:98:a8:cb:50:41:3e:d7:9b:1a:71:a4:41:
08:47:11:81:ed:9f:f8:75:b1:41:bb:bf:5f:06:bd:
11:c7:6f:39:04:16:aa:19:01:e6:8e:c0:0a:6c:f4:
3c:01:72:b5:ef:ea:6f:e3:02:39:81:7c:81:27:4a:
3f:fe:25:dd:44:93:dd:a6:d5:46:cc:70:82:10:37:
8f:66:32:e2:3f:9b:e5:c6:be:9b:bf:6c:21:99:d2:
bf:90:0e:e7:42:61:49:2f:59:87:13:c5:bd:ac:91:
4a:1d:bf:26:43:fc:f1:0c:9f:ed:b8:a9:7d:d6:c0:
f7:f7:c9:0e:70:9b:76:16:0e:54:eb:7b:2b:83:7a:
44:c9:2f:69:ec:24:cd:ad:31:20:18:12:f7:20:3f:
ea:91:74:5e:bd:a3:2f:68:8d:99:3c:05:34:28:ed:
aa:51:3f:0b:38:ab:51:ad:d9:e9:b5:b7:5e:89:49:
30:24:4e:6d:4d:aa:de:e6:7a:c1:2a:51:e9:91:29:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:62:23:55:76:AB:BA:CA:D9:68:FE:33:E8:51:C7:B9:92:3D:14:78
X509v3 Authority Key Identifier:
keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:95:bd:f7:37:44:99:4c:dd:c7:51:f5:7d:04:28:1e:f1:69:
07:46:66:d5:be:b0:51:c4:b2:89:fe:52:26:fb:c0:35:80:30:
fa:a9:cb:3b:3b:4d:e5:e5:c1:ef:3b:38:8b:03:6a:84:59:c6:
2e:04:ff:5b:ae:87:c0:bf:e2:48:00:2a:b1:2a:4c:2d:3d:af:
12:26:54:93:c4:37:9f:04:27:ae:5b:2c:02:1f:f5:a6:e9:6b:
80:b6:ea:ae:94:f5:31:1b:70:ca:ad:91:19:d5:4e:83:50:9e:
2e:59:55:b6:d9:9d:2f:e1:6f:da:c1:f8:1b:90:39:b4:1f:40:
93:94:b9:27:03:eb:8f:94:67:e0:8d:e4:97:99:5c:99:c1:d5:
d2:3f:d9:04:ef:2a:27:5c:97:b5:4f:73:c4:29:1e:90:b9:36:
e4:1e:02:e0:c8:51:4a:f4:31:6f:31:71:c0:42:7c:bc:78:ef:
d2:6b:1e:10:9f:0a:35:cb:ff:8b:7c:ec:90:12:e6:55:5a:2d:
89:43:66:16:0c:cd:5c:92:e1:64:02:be:95:06:c6:95:b0:45:
88:38:4d:3e:3b:a6:82:52:83:e7:d9:0a:4a:6a:ca:3f:e6:64:
79:ba:93:1c:95:b9:f0:8f:be:47:dc:62:c6:8f:56:5f:71:0d:
4b:44:5e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:53:06 2026 by rpki-client