Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json)
Hash identifier: GIazmo+NDPVcLVk8+woI8QsGISMS8rQQ6smWzf/wG+Q=
Subject key identifier: 0B:4B:44:1D:3E:83:E6:EA:AE:68:DC:B2:E7:4F:B1:C3:84:F8:D5:20
Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538
Certificate serial: 019EC1B6B248943380DF24259FF23F77FD69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
Manifest number: 0BEF
Signing time: Sat 13 Jun 2026 16:00:36 +0000
Manifest this update: Sat 13 Jun 2026 16:00:36 +0000
Manifest next update: Sun 14 Jun 2026 16:00:36 +0000
Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: fYp8wppUMCsjOQVtXfnv02lx6GJW2YLOv0zX7P2D4Qg=)
2: y8l-GZaij3nY_lsT-zDKBTkrGss.roa (hash: edJk2bhQjppncI7NDvSvP36a6hLKHOIsn+JqFnH50EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:b2:48:94:33:80:df:24:25:9f:f2:3f:77:fd:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538
Validity
Not Before: Jun 13 16:00:36 2026 GMT
Not After : Jun 14 16:00:36 2026 GMT
Subject: CN=0b4b441d3e83e6eaae68dcb2e74fb1c384f8d520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1f:be:19:6d:50:8e:6f:d4:bc:69:7f:02:b3:
14:d1:1c:9b:a2:0b:0c:c2:88:d4:82:32:c1:75:18:
ec:77:4a:56:16:a2:20:7e:77:1d:d3:cc:9d:b5:fe:
33:f1:94:9b:74:79:7c:ac:97:25:ac:64:4d:21:60:
6d:ef:ac:ab:ea:e9:b8:c6:83:63:fb:80:6a:ec:b9:
84:c1:25:e1:a7:17:5c:53:8e:4f:c6:e1:76:b8:37:
cb:c7:57:a0:57:02:2b:81:10:32:4c:b4:1f:10:dd:
f7:6b:3f:ee:2b:c6:3f:fa:20:2f:08:ce:92:0a:97:
76:e8:8a:52:c6:22:10:13:c3:e6:91:75:1c:18:c4:
eb:b7:67:e4:4a:44:59:a1:9f:27:15:a9:21:68:a4:
aa:7e:a5:7d:a7:d4:f5:b0:bf:22:d8:9f:ff:7e:0c:
0f:5d:c4:77:0a:d7:c0:03:a1:8b:2d:d4:a3:47:84:
e6:a2:57:53:c5:c9:cf:f5:81:08:ea:32:9c:46:64:
7d:86:f9:7c:3f:34:a9:72:d6:04:df:b4:cb:24:c2:
52:55:8e:68:e9:9c:a9:74:28:51:47:a7:62:b5:f8:
e6:51:40:42:60:7f:35:b6:e3:90:1d:0f:7b:7a:03:
e4:f6:ad:43:08:6e:4d:42:40:cf:e5:e3:f7:14:2a:
3a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4B:44:1D:3E:83:E6:EA:AE:68:DC:B2:E7:4F:B1:C3:84:F8:D5:20
X509v3 Authority Key Identifier:
keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3f:f4:72:7e:6f:0f:03:6b:fd:44:4b:f8:69:97:05:08:0b:
d1:c7:25:23:83:40:55:85:2e:34:f7:99:f6:5b:d2:3d:8b:50:
f1:75:85:bb:b4:c9:16:99:41:54:c3:b2:0c:f1:39:12:5f:c0:
80:dd:c1:60:bc:5b:9b:af:0a:20:d0:1b:e7:f6:58:98:64:4b:
31:de:2a:f7:0c:fa:d3:ea:67:35:a7:bd:de:d8:12:4b:ca:ff:
b9:d9:74:c3:6c:17:52:8c:0b:8e:19:fa:cb:aa:f8:9c:9d:e8:
87:8b:ed:ac:c2:0f:ce:67:76:c1:c3:f8:08:56:66:ed:e7:fa:
16:1d:c1:23:be:66:04:96:04:5c:7d:1a:ac:73:5f:a5:d1:14:
74:0c:05:7d:38:88:a3:f7:a9:a1:18:a7:cb:c9:f1:b4:19:50:
2c:b3:e4:ef:76:a4:68:d4:4c:37:6a:1a:d0:c3:d1:12:04:af:
49:97:20:5f:98:99:f7:45:4f:e6:a1:a2:11:e4:a6:aa:26:83:
6e:a3:b5:84:90:38:2e:f9:a4:d9:86:fd:47:20:dc:f7:04:05:
45:57:f7:3c:c6:3b:ef:b2:ab:5a:c4:ba:67:91:c7:ac:c8:a0:
26:f5:5b:39:84:a9:d4:c9:32:19:99:6f:cd:ca:bd:35:3f:76:
3a:73:01:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:13:43 2026 by rpki-client