Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
File: 3r5RfnR14XwGlkORD9b3ezF7hTg.mft (raw, json)
Hash identifier: 1TSD1UEjjSNugw1dEndaXZqRqobmcyIt+WV4ejqQ5ns=
Subject key identifier: EB:1C:3D:5F:47:FC:7D:93:70:BB:BC:B5:E7:6C:85:17:40:54:FD:FA
Authority key identifier: DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
Certificate issuer: /CN=debe517e7475e17c069643910fd6f77b317b8538
Certificate serial: 019FA9753B5C9C6E16969EB9BE6650149C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
Manifest number: 0C67
Signing time: Tue 28 Jul 2026 16:01:00 +0000
Manifest this update: Tue 28 Jul 2026 16:01:00 +0000
Manifest next update: Wed 29 Jul 2026 16:01:00 +0000
Files and hashes: 1: 3r5RfnR14XwGlkORD9b3ezF7hTg.crl (hash: KbnTzSDajz5mbcHPgVR6f9y/biWvu9q8nS5BglfHeBw=)
2: y8l-GZaij3nY_lsT-zDKBTkrGss.roa (hash: edJk2bhQjppncI7NDvSvP36a6hLKHOIsn+JqFnH50EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:3b:5c:9c:6e:16:96:9e:b9:be:66:50:14:9c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=debe517e7475e17c069643910fd6f77b317b8538
Validity
Not Before: Jul 28 16:01:00 2026 GMT
Not After : Jul 29 16:01:00 2026 GMT
Subject: CN=eb1c3d5f47fc7d9370bbbcb5e76c85174054fdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fd:78:a6:76:8a:04:6c:1b:e9:fd:a8:c4:e6:
8d:ac:2f:16:5a:4b:7e:cd:ab:ec:65:3f:e3:46:e7:
3e:80:03:1a:c2:41:06:dd:71:2c:8b:ff:67:a2:72:
5a:60:5e:55:2e:05:40:ef:3d:39:18:47:1b:57:53:
3a:c4:a7:1b:1b:ac:d0:22:de:2d:8a:48:be:26:c8:
14:b3:8a:c8:87:00:e2:37:dd:53:1d:0f:5a:38:9c:
b3:39:89:d8:b4:1e:74:65:35:2e:0b:4f:76:fa:71:
49:f0:62:b2:4d:8b:34:90:45:df:e0:33:ec:24:8c:
6f:69:b0:78:5b:05:c7:34:8e:a3:49:56:c1:a3:79:
35:b6:5c:1f:b4:56:2d:0a:e3:cc:98:3f:20:e1:36:
f9:f2:0e:68:6e:51:dd:e4:90:50:67:06:43:f0:8d:
93:1f:a3:07:a5:df:06:bb:43:e0:81:b4:bb:1f:a5:
b5:bb:d8:1c:9f:9c:f5:e7:71:20:fc:36:9d:e0:58:
b4:09:dd:e2:84:3a:45:0c:38:b1:f4:98:3a:3a:f6:
70:b7:1c:24:f5:20:9a:25:21:2c:ef:ae:74:f6:60:
e0:28:71:80:7e:c1:53:97:e8:ba:22:10:57:d9:28:
a5:32:5e:0e:e0:12:d0:a4:12:f4:08:9c:95:45:03:
ba:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1C:3D:5F:47:FC:7D:93:70:BB:BC:B5:E7:6C:85:17:40:54:FD:FA
X509v3 Authority Key Identifier:
keyid:DE:BE:51:7E:74:75:E1:7C:06:96:43:91:0F:D6:F7:7B:31:7B:85:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3r5RfnR14XwGlkORD9b3ezF7hTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3850c9-9c68-4613-a870-89f5c4f32970/1/3r5RfnR14XwGlkORD9b3ezF7hTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:72:82:f3:ed:38:02:89:7d:ec:0a:58:93:97:52:22:c4:a8:
d5:39:ee:bf:a6:d6:39:d0:4c:07:01:a5:64:bf:73:2f:aa:23:
5d:57:de:d4:d1:db:54:ac:a5:24:ae:0c:db:ac:21:7c:b6:28:
7b:c6:df:2d:8b:d8:ce:0e:04:63:18:2c:53:4b:c5:24:58:35:
ad:07:5e:e5:a5:ce:c9:22:c5:ca:b9:c3:15:cd:a2:25:10:1a:
f0:ef:1a:95:3d:d7:aa:57:f5:aa:a7:24:d6:25:67:49:21:4a:
80:45:0d:c9:fe:29:7b:90:1a:f5:d9:52:dd:ab:b6:fb:42:ab:
7c:a7:43:15:74:45:f2:60:f3:fe:a7:b5:84:0c:68:75:b7:9b:
ae:d7:09:45:40:05:ec:c1:36:0d:18:70:84:13:b2:c1:d2:4e:
9d:70:39:6d:53:4a:52:d4:cb:53:c8:5b:ab:4e:7e:cd:68:2d:
45:de:3b:43:52:fb:88:a1:b4:b6:c2:85:d8:a3:d4:71:97:e5:
e9:1b:8f:21:88:41:b0:1f:ba:7a:44:9d:7b:72:f2:ee:cc:23:
b9:7e:61:68:af:bd:8e:75:71:03:b5:9f:da:80:53:88:f5:cc:
ea:d0:45:82:34:7b:e4:22:2a:44:59:00:a2:15:92:ea:26:9b:
14:24:2a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:34:20 2026 by rpki-client