Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: gI+sWMD1Dk2tsS+p0i91EtRP7uama3baAOOGq88j788=
Subject key identifier: EB:F3:4B:A1:B6:D2:5B:5D:1A:CE:47:A5:35:24:D0:49:96:55:B5:A1
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 01A0D0EE58C723A933E13301B0A1C816D756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 150D
Signing time: Thu 24 Sep 2026 01:01:16 +0000
Manifest this update: Thu 24 Sep 2026 01:01:16 +0000
Manifest next update: Fri 25 Sep 2026 01:01:16 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: 1YGJ3vTVS7T8QRo35wkWrSrU5m7uJ6INXu1h794bzW4=)
2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
8: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ee:58:c7:23:a9:33:e1:33:01:b0:a1:c8:16:d7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Sep 24 01:01:16 2026 GMT
Not After : Sep 25 01:01:16 2026 GMT
Subject: CN=ebf34ba1b6d25b5d1ace47a53524d0499655b5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b0:47:b0:b3:2a:8a:6a:53:7a:a0:95:b4:39:
90:6a:4a:23:c8:9e:9f:78:98:05:f5:ac:dd:c0:f2:
0c:a2:67:e8:92:df:a3:8c:3a:85:1a:1c:70:45:05:
37:00:a0:29:29:42:ae:90:df:ad:5d:67:c7:c7:ad:
11:b1:34:3f:9d:a8:2c:d5:8f:18:8b:35:34:f4:62:
c1:c2:71:57:8c:5d:f0:0f:43:13:4e:2a:02:4c:63:
39:7a:60:16:4f:c7:74:8d:ce:87:be:42:0a:b0:7b:
f1:93:e4:17:02:a5:24:51:a4:de:4b:63:76:d5:49:
04:78:55:9f:71:39:53:83:5e:0d:93:02:28:40:bf:
e8:54:83:be:96:90:5f:73:90:17:7c:76:56:e5:f8:
ef:9b:c2:ee:5f:9f:d9:9b:b8:e8:33:1c:8a:ed:ca:
60:2d:25:a3:ab:2e:d1:a4:e6:98:d6:bb:9a:83:86:
1e:a5:db:cb:79:37:19:a8:18:a4:50:bc:fe:1c:74:
b2:e2:5d:e8:06:71:57:4d:b7:e7:bc:cd:f9:9f:5a:
c3:a2:49:3c:2d:0d:38:f3:bb:ea:ea:47:e1:95:94:
1d:e5:69:0c:1d:72:68:fe:a8:41:05:4b:63:83:42:
65:85:a7:59:fe:c2:6e:59:cb:25:38:9f:95:7a:ba:
09:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F3:4B:A1:B6:D2:5B:5D:1A:CE:47:A5:35:24:D0:49:96:55:B5:A1
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:bb:f8:db:f9:fb:ab:8f:d6:44:17:f7:a2:9f:6a:ef:6f:7e:
0d:da:fd:b6:f9:e8:6f:28:01:4b:fc:07:21:3c:5b:29:3d:d9:
e0:97:47:d9:db:7a:c3:2d:43:66:11:bd:63:56:00:93:8d:c4:
d9:07:8c:fd:c2:ab:5d:7b:e8:68:f3:52:21:90:43:06:ce:5f:
ae:6e:bf:b4:b2:9a:a4:6e:e4:f1:a5:0a:2d:2d:69:51:c7:db:
bb:bf:96:c1:e4:de:8e:88:a4:6d:2b:7d:db:f3:ce:5e:21:82:
4b:74:94:c9:c8:10:93:0d:09:5a:f6:2f:56:71:71:14:87:8a:
40:26:d0:b1:ec:2a:64:d6:41:f6:5d:71:ab:7f:44:f6:a5:f8:
3f:95:a1:ac:73:1b:28:4c:d3:2c:c1:d6:39:df:0a:4c:65:90:
30:40:da:ac:10:b6:61:c6:b2:93:36:ff:26:94:d7:33:ff:14:
ea:ff:cd:bd:2a:d4:d9:35:7d:0f:20:4c:69:45:14:ed:3e:61:
5e:ad:45:c5:69:cf:f5:fc:c4:06:ed:8b:22:fd:05:45:67:c2:
29:d8:e4:a5:93:37:0a:4b:f9:cf:66:b3:05:35:64:67:13:6e:
c6:f8:1b:da:71:f6:41:2f:f9:32:30:b2:5a:da:bf:14:76:d0:
e9:2a:79:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:44:13 2026 by rpki-client