Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: a9vCBJypXdbnG4/81d4P8wrFeV0sEvt4rm9mkFmqDoc=
Subject key identifier: C9:F0:9F:43:81:13:C5:CB:B1:48:08:52:BA:88:CA:F9:C7:F0:8E:99
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 019D9998EBA8CB638600AD94AB3E9346A041
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 1202
Signing time: Fri 17 Apr 2026 04:00:28 +0000
Manifest this update: Fri 17 Apr 2026 04:00:28 +0000
Manifest next update: Sat 18 Apr 2026 04:00:28 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: YzDsXaLsLzloRrIv/drf2q0x90hFUz57GuYecPtGBrM=)
2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:eb:a8:cb:63:86:00:ad:94:ab:3e:93:46:a0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Apr 17 04:00:28 2026 GMT
Not After : Apr 18 04:00:28 2026 GMT
Subject: CN=c9f09f438113c5cbb1480852ba88caf9c7f08e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c1:fb:7b:6a:00:2b:e0:97:42:2e:61:2c:0d:
64:32:6d:c4:f8:67:21:31:c8:27:07:2b:af:6c:d7:
b9:2e:8b:e3:44:83:39:82:e9:20:fd:41:76:6f:75:
97:9b:b5:38:fe:27:f3:75:0a:5a:48:80:fd:53:f4:
8f:5c:fd:a8:e4:a9:f0:77:c6:6a:05:e8:fb:21:a5:
52:1f:bd:da:0e:0b:6d:e2:1a:43:07:0b:8d:67:d4:
18:88:90:e4:ea:d9:a2:bd:55:83:a4:3c:36:19:66:
a9:52:22:24:7f:0e:2f:07:63:2c:f1:7e:42:11:1d:
d5:cf:9b:0d:8f:12:27:09:c7:13:f9:32:41:3f:92:
09:af:0d:23:f0:1e:67:71:04:71:87:ae:3e:94:2e:
77:01:6a:66:4a:a2:30:58:fd:7c:45:1b:27:ab:b7:
5a:a0:d6:f2:3b:b0:11:57:fc:21:b6:84:e8:c4:35:
5b:66:69:c7:bd:f5:ce:90:30:46:46:94:c0:d1:74:
ec:fd:72:e8:04:1c:d1:de:77:16:b4:5e:ee:42:e9:
8d:14:06:73:e4:06:d0:a8:2b:1a:0a:0f:fb:dd:3e:
56:01:52:54:72:4e:77:75:48:7f:80:c4:42:1e:9e:
6e:59:6f:2a:e3:be:1f:d8:bd:c0:b8:88:28:be:04:
07:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F0:9F:43:81:13:C5:CB:B1:48:08:52:BA:88:CA:F9:C7:F0:8E:99
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0d:5e:1f:32:15:d5:f1:e1:5a:70:88:94:b2:a4:71:f7:d7:
6c:62:b8:42:6b:ec:03:56:8b:4f:59:16:f3:ab:f6:91:65:ec:
c7:5c:19:9a:c5:f5:eb:ff:98:65:a6:05:9d:77:ff:29:e4:39:
d0:22:51:9e:a9:dd:87:64:f7:03:24:ac:94:cc:75:0d:10:e4:
3b:7a:05:69:8a:34:45:97:65:08:32:97:9b:75:28:c6:ef:87:
18:ea:ff:8e:c0:8a:75:8e:29:bb:4c:76:9e:4e:52:67:ff:5b:
33:cc:32:cd:23:13:35:62:97:f5:ba:20:61:30:c4:da:63:8e:
b5:98:e4:6c:4c:7b:de:8e:21:56:4d:f8:2e:44:a8:d6:6b:2c:
96:3b:6f:54:1f:66:1d:33:1e:f7:cf:8e:91:d6:db:ba:ec:f9:
31:52:41:8b:0c:f2:7a:34:e7:bf:9c:1b:66:14:8b:08:52:88:
0b:08:44:a5:48:e6:13:70:c8:4b:35:3a:f8:ee:ca:0c:a7:a9:
7b:1c:cc:d8:52:d3:be:b4:a6:83:f4:60:09:84:67:53:0c:45:
26:94:41:25:ba:b4:ae:92:0f:a6:7d:db:e7:8e:f0:60:1b:9b:
6f:9c:0e:03:7e:4d:70:22:1c:97:9a:92:d9:46:cd:6e:08:50:
01:a6:3b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:52 2026 by rpki-client