Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: Ww2/LRmcqNULlHayR2JHYYbo3drn239ICelgKwak8mI=
Subject key identifier: 76:C2:56:D3:5C:00:CE:F4:C5:93:6B:43:40:27:2D:F5:CC:DA:ED:8D
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 019EBF24123FE5B8F760EF2318DD371AC2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 129A
Signing time: Sat 13 Jun 2026 04:01:12 +0000
Manifest this update: Sat 13 Jun 2026 04:01:12 +0000
Manifest next update: Sun 14 Jun 2026 04:01:12 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: N8tifZcnl99tr2nBDPlpeRWVuiS92oByClbVafgXenY=)
2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:24:12:3f:e5:b8:f7:60:ef:23:18:dd:37:1a:c2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Jun 13 04:01:12 2026 GMT
Not After : Jun 14 04:01:12 2026 GMT
Subject: CN=76c256d35c00cef4c5936b4340272df5ccdaed8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0b:c2:0c:f7:9a:b9:b6:bc:58:ea:a3:52:46:
64:ab:11:ab:dc:dc:57:d3:ea:51:e2:df:27:41:4e:
e2:1b:60:cc:7c:bd:47:05:c6:b1:25:9a:57:ea:88:
50:dc:51:81:c7:eb:6f:f7:b5:c1:8c:4e:2b:4a:75:
bd:86:af:78:24:7f:f9:6d:6a:bb:df:1d:b1:3f:06:
7e:7f:82:01:9f:8f:75:1a:36:27:5b:5c:4e:f4:90:
1c:1f:d8:70:6b:88:db:7d:b6:68:4a:0f:cb:86:8d:
f3:9b:81:1e:c3:2c:b0:e9:81:47:2c:79:03:f4:3d:
2e:19:d7:16:18:27:ed:72:ce:ec:a1:ef:d1:01:c8:
39:8c:a1:af:1b:ad:56:cc:1d:01:bd:c8:e9:44:8a:
f0:dd:a8:91:36:1b:bb:01:db:bb:9f:8d:c4:53:eb:
41:b9:e1:08:c5:c0:f7:d3:9b:5b:2b:b8:8e:cf:bf:
ee:30:af:93:a9:69:1e:46:28:1f:1f:77:75:d9:2f:
60:d7:91:53:7c:d7:4e:23:3f:9a:e9:04:fd:77:ab:
47:66:e1:12:c3:70:6d:4c:d2:0d:b7:5c:2b:23:fd:
c4:53:85:ad:76:e8:4b:52:5a:a3:6b:38:1a:f7:ec:
9b:42:c7:91:5b:f0:1a:6a:76:9e:72:47:74:e3:37:
9a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C2:56:D3:5C:00:CE:F4:C5:93:6B:43:40:27:2D:F5:CC:DA:ED:8D
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:20:65:2a:4c:15:54:f8:58:90:c2:fe:33:0c:e1:a4:4b:e3:
12:0d:49:2a:05:a9:ea:b5:a5:ce:0e:f6:30:2e:bd:e5:e5:12:
26:b6:7a:37:70:92:f9:c9:a6:06:6e:3c:3d:35:9f:18:cd:48:
fa:7f:4e:b5:4f:7f:81:6c:a9:ef:70:c0:0e:5f:40:84:62:83:
38:6b:60:51:81:00:ba:05:0b:e1:f3:74:ac:51:5e:c3:e5:98:
ed:22:87:2e:30:02:3c:45:8f:53:93:05:66:02:97:64:2e:09:
43:28:d3:73:05:e4:a9:4e:5c:5c:ca:bd:3d:c4:1f:2c:37:19:
ad:32:12:a1:3f:dc:73:09:18:1d:50:b6:6e:86:60:12:63:70:
6e:34:b8:98:dd:1e:f6:90:ee:c2:b8:06:52:e5:b2:c7:dc:da:
13:1f:61:cf:f8:76:81:33:e5:31:b4:23:18:ac:ab:80:16:ab:
8d:cd:b4:f5:89:97:b7:75:1a:ca:e3:7b:ad:56:24:56:16:74:
93:26:eb:52:c7:13:96:4a:0c:ee:a7:39:3e:3c:4f:3c:4a:70:
c9:b7:fd:62:b5:cd:cf:f1:ef:69:c0:e2:de:36:89:31:34:8e:
a4:a2:ff:6c:ca:1a:29:cf:07:4f:6c:e3:ab:2f:cb:21:87:df:
9e:ae:53:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:36:14 2026 by rpki-client