Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
File: 3rFFdWCAr_G7APX5D9ny8nzFcyo.mft (raw, json)
Hash identifier: Z173EdZ6kcyAztju2kzF5m2k25QUn5H8CrlLJBP3Pk8=
Subject key identifier: 5D:0A:4E:D3:07:F0:78:1D:57:CE:41:19:44:BD:D8:AA:70:7D:D1:01
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 019EC1123059CD1259F78723A6DDE8D30879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
Manifest number: 129B
Signing time: Sat 13 Jun 2026 13:00:55 +0000
Manifest this update: Sat 13 Jun 2026 13:00:55 +0000
Manifest next update: Sun 14 Jun 2026 13:00:55 +0000
Files and hashes: 1: 3rFFdWCAr_G7APX5D9ny8nzFcyo.crl (hash: 2f47ZAILqwtOtb6aZXH/fbvGs1RdxvS2pAgA/WgyBN8=)
2: TLDEMG13z099E9PPUlaFNgJGWNU.roa (hash: BuMLwHcrQNiLmPqXzsk/lZgeQTDappKSAbyz8iHf5NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:30:59:cd:12:59:f7:87:23:a6:dd:e8:d3:08:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Jun 13 13:00:55 2026 GMT
Not After : Jun 14 13:00:55 2026 GMT
Subject: CN=5d0a4ed307f0781d57ce411944bdd8aa707dd101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:3f:dc:ad:ab:e4:04:63:eb:8d:29:52:91:
8c:70:61:c5:3d:63:50:e0:99:97:50:e6:7a:2c:e2:
cc:30:b9:3d:11:6f:17:cc:4f:9c:83:3e:b3:f6:ad:
20:fb:a4:39:8a:c1:47:42:d5:9c:27:ac:ec:1c:44:
09:8d:e8:e0:70:85:09:fe:ed:98:27:87:ca:b0:02:
af:93:e1:14:70:8f:a7:23:07:e0:ae:db:eb:da:2a:
45:0e:6d:0f:b4:11:60:d4:0d:8b:35:aa:62:ec:b7:
c8:55:3c:83:8b:db:68:70:ef:f6:29:e3:17:bb:47:
50:79:f2:7a:41:97:99:71:82:92:2c:12:4c:72:bf:
f1:d5:36:53:bd:3b:6b:c7:7e:01:9a:9a:a7:6b:2c:
23:a4:52:70:f4:db:d6:2c:93:c7:a3:e0:bf:04:05:
ac:ba:d9:22:fa:2d:97:f4:fa:05:f9:1f:42:5d:a9:
56:a7:51:2b:5f:ea:be:a0:5c:02:5c:22:d2:97:ff:
e2:3a:2e:a7:d4:3e:53:f2:88:2f:bd:b6:e4:bf:02:
4f:77:62:33:63:fe:11:67:a2:17:73:bf:34:7f:65:
66:a0:0d:94:74:55:5e:b4:e9:95:36:42:8d:53:0f:
16:88:95:61:95:d3:54:b9:9e:5c:7e:f7:fb:21:13:
64:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0A:4E:D3:07:F0:78:1D:57:CE:41:19:44:BD:D8:AA:70:7D:D1:01
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:ee:40:b1:d9:68:6a:f7:1c:97:69:61:42:b9:c0:f6:3d:2f:
f9:bd:d5:e3:96:ee:b1:14:3f:09:03:f3:dd:6e:ec:6b:32:e4:
87:84:95:79:6b:db:f9:77:c5:20:b0:b2:0e:52:2d:dd:60:b9:
c3:d0:17:c2:29:72:1b:ca:31:f5:e8:60:16:00:e5:f1:e2:58:
72:c6:9d:b9:17:19:80:21:7c:0e:a6:d5:a2:e8:67:85:5d:df:
80:5f:4f:bd:3c:a2:b3:d3:8d:eb:a0:b8:bc:6f:b3:2f:76:49:
43:35:fc:62:7e:66:de:f7:c5:78:59:0f:24:37:fe:7c:75:3f:
3a:11:57:25:ed:40:ed:8c:19:11:03:a2:43:bf:cd:b1:f6:03:
e6:0b:ef:65:78:52:4c:a8:90:52:94:da:61:3d:35:6c:07:74:
9f:66:0a:53:9b:b0:a3:53:7b:be:f6:7a:46:65:c6:1b:33:6d:
d5:6f:78:e8:82:b6:db:09:05:74:d3:4e:79:2a:99:d4:f8:d6:
38:06:59:75:5c:79:1a:aa:44:97:dd:94:c1:bf:90:c4:47:26:
16:49:ad:7c:ce:df:c3:3f:63:8e:1d:23:a5:e8:08:15:65:18:
c6:2f:d7:c0:c0:df:a4:39:99:b2:0d:ce:b1:e5:57:4d:c0:5f:
93:ac:fd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:34:29 2026 by rpki-client