Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: U2GW6hgDl1NmUxVj0eBJ9mQW7H8BVEGu69BG6hz9y54=
Subject key identifier: 3F:81:C3:49:4D:D7:35:DC:DB:38:DF:8C:86:8B:6D:B1:BE:1E:12:6D
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 019FA8D027D881F18057DD251D95851A5C92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 1313
Signing time: Tue 28 Jul 2026 13:00:41 +0000
Manifest this update: Tue 28 Jul 2026 13:00:41 +0000
Manifest next update: Wed 29 Jul 2026 13:00:41 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: UcV/KARrMBglAfDtTKM0ATTjMqu6VVpUpeRJM33P5wE=)
2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:27:d8:81:f1:80:57:dd:25:1d:95:85:1a:5c:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Jul 28 13:00:41 2026 GMT
Not After : Jul 29 13:00:41 2026 GMT
Subject: CN=3f81c3494dd735dcdb38df8c868b6db1be1e126d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:65:c5:fd:65:d3:5e:69:d2:cc:f5:45:9b:
30:9d:34:56:ca:8c:f4:ec:8c:eb:00:30:e0:f3:7b:
2e:39:c8:0b:b9:cb:16:e7:9f:15:8a:39:22:52:62:
64:d1:b9:8c:33:4f:94:7f:f1:14:7e:d6:43:47:34:
05:b2:3d:b9:a0:86:2d:39:5f:64:34:76:95:c8:9d:
1f:1e:97:6d:65:e0:5a:2c:1b:0b:61:73:dc:0c:e9:
60:c0:1b:c1:e6:d4:cd:aa:39:8c:82:34:0b:3e:15:
2a:48:2d:27:39:16:39:fd:28:64:57:4f:cd:f7:9c:
50:d9:fd:a3:61:62:a8:18:e9:18:4a:ff:30:ab:82:
bb:5b:ad:7b:a8:e1:a8:cb:43:a3:1e:5b:5e:94:75:
f0:00:56:ae:38:6b:fe:a7:17:e0:be:00:8c:82:c7:
d3:c3:7c:e8:2e:7d:6b:4b:b9:c0:e4:22:44:66:f6:
52:1e:7c:a1:22:a1:b2:c7:81:42:eb:9d:4c:ab:86:
00:8e:f7:85:69:cc:b4:29:e1:17:cd:6a:9b:5b:33:
08:40:82:1e:a4:34:e9:fe:7e:7f:b5:7d:1e:41:cd:
97:a7:58:aa:cf:27:e4:5d:0c:06:7f:84:a8:d0:5b:
54:c4:50:5c:95:40:0b:ef:c7:7c:f7:b6:e8:dd:5b:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:81:C3:49:4D:D7:35:DC:DB:38:DF:8C:86:8B:6D:B1:BE:1E:12:6D
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:40:a4:67:94:d2:99:4a:da:74:79:bb:56:3b:ef:6a:1c:3d:
9a:66:99:89:46:44:86:c0:b3:0b:7e:3b:3f:7b:0e:c1:15:08:
e4:f7:67:83:fd:a0:c0:85:2a:5a:7b:8e:a5:1e:da:ad:2e:df:
59:35:69:31:61:22:3c:1d:c6:65:e4:d3:13:42:f8:24:e8:4a:
cd:4d:5a:99:9e:c8:ec:37:d3:52:46:c4:e2:c6:39:b5:73:b0:
f7:03:22:c1:e4:3f:e9:b9:d7:d4:25:7b:70:a7:3f:29:37:69:
c6:7e:28:89:8c:59:83:ea:83:d2:ea:9e:46:71:2d:0c:1b:c8:
b3:01:38:a6:23:dc:04:e3:11:62:51:bb:a2:f9:3d:56:00:40:
48:e0:94:52:f6:77:c6:9d:fb:20:c4:91:ee:72:48:39:35:07:
93:54:4f:cc:4d:72:3e:1e:b7:fd:1e:85:0a:20:99:ef:cb:30:
3a:61:0b:0b:b3:59:1a:11:0c:de:bc:b9:30:57:4b:4f:37:e6:
e8:b4:35:e9:68:e4:43:6e:34:3c:5b:6c:d8:c8:ad:9a:a0:9b:
d3:0e:19:77:dc:9f:47:b5:fe:2c:aa:02:7e:71:6d:ef:1a:75:
f8:9d:e2:44:20:c6:4d:cf:1b:d5:34:af:65:59:39:b4:e6:00:
c6:a0:ff:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0CfYgfGAV90lHZWFGlySMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlYjE0NTc1NjA4MGFmZjFiYjAwZjVmOTBmZDlmMmYyN2Nj
NTczMmEwHhcNMjYwNzI4MTMwMDQxWhcNMjYwNzI5MTMwMDQxWjAzMTEwLwYDVQQD
EygzZjgxYzM0OTRkZDczNWRjZGIzOGRmOGM4NjhiNmRiMWJlMWUxMjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSZlxf1l015p0sz1RZswnTRWyoz0
7IzrADDg83suOcgLucsW558VijkiUmJk0bmMM0+Uf/EUftZDRzQFsj25oIYtOV9k
NHaVyJ0fHpdtZeBaLBsLYXPcDOlgwBvB5tTNqjmMgjQLPhUqSC0nORY5/ShkV0/N
95xQ2f2jYWKoGOkYSv8wq4K7W617qOGoy0OjHltelHXwAFauOGv+pxfgvgCMgsfT
w3zoLn1rS7nA5CJEZvZSHnyhIqGyx4FC651Mq4YAjveFacy0KeEXzWqbWzMIQIIe
pDTp/n5/tX0eQc2Xp1iqzyfkXQwGf4So0FtUxFBclUAL78d897bo3VsogQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+Bw0lN1zXc2zjfjIaLbbG+HhJtMB8GA1UdIwQY
MBaAFN6xRXVggK/xuwD1+Q/Z8vJ8xXMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1Njgt
M2ZmOTY0NTUwM2U5LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9hNjVkMTQtOTM2NS00MGM5LWE1NjgtM2ZmOTY0NTUwM2U5
LzEvM3JGRmRXQ0FyX0c3QVBYNUQ5bnk4bnpGY3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUCkZ5TS
mUradHm7Vjvvahw9mmaZiUZEhsCzC347P3sOwRUI5Pdng/2gwIUqWnuOpR7arS7f
WTVpMWEiPB3GZeTTE0L4JOhKzU1amZ7I7DfTUkbE4sY5tXOw9wMiweQ/6bnX1CV7
cKc/KTdpxn4oiYxZg+qD0uqeRnEtDBvIswE4piPcBOMRYlG7ovk9VgBASOCUUvZ3
xp37IMSR7nJIOTUHk1RPzE1yPh63/R6FCiCZ78swOmELC7NZGhEM3ry5MFdLTzfm
6LQ16WjkQ240PFts2MitmqCb0w4Zd9yfR7X+LKoCfnFt7xp1+J3iRCDGTc8b1TSv
ZVk5tOYAxqD/aQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:12:35 2026 by rpki-client