Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: 77QF8z8KdeLp5FEAENrvPpWKlX0APKWBoNSB0vU5mMs=
Subject key identifier: 19:15:8F:10:91:7D:97:D8:E5:1B:4B:FA:D8:27:FC:C3:88:46:1F:43
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019D2884C68C68AF19F1CFC39D615C63C770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 1328
Signing time: Thu 26 Mar 2026 05:01:23 +0000
Manifest this update: Thu 26 Mar 2026 05:01:23 +0000
Manifest next update: Fri 27 Mar 2026 05:01:23 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: TYsLs2YLSHkvAYbz/EoffvFJ9y++OMhrjrS0qe2BQBU=)
2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
8: uAj3CtbzCpXCLuuM_PucbGSgKxc.roa (hash: dHv8GawOTN4Q04OIxQpN0YyPcGSkeXeJgAk49vv4oMg=)
9: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c6:8c:68:af:19:f1:cf:c3:9d:61:5c:63:c7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Mar 26 05:01:23 2026 GMT
Not After : Mar 27 05:01:23 2026 GMT
Subject: CN=19158f10917d97d8e51b4bfad827fcc388461f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:11:03:8f:d1:87:3a:46:d5:58:18:8f:58:9b:
a5:95:71:2b:fb:ae:28:76:13:1b:31:49:7f:27:ec:
a3:a9:9e:a0:0e:9e:46:44:7e:2a:5d:20:68:6f:cb:
b4:75:4a:c3:20:5e:0d:45:04:fe:7a:8d:f6:d6:25:
0a:0d:42:df:31:6d:d2:a5:b1:a9:32:a9:8b:2e:59:
46:aa:c5:2d:9e:c9:61:6d:1d:db:af:56:5f:16:dd:
05:4b:18:1a:63:a0:b9:22:9b:46:0d:0a:d5:09:e4:
7d:41:05:53:e4:e0:4d:d8:51:5e:fd:d9:dc:a4:77:
c5:d8:3a:b5:f9:54:6b:9f:c1:b7:a4:61:5e:b5:e0:
a9:7a:d3:b5:20:fb:2c:26:f5:d0:62:60:31:b4:38:
8a:a1:7e:42:9e:e6:40:76:71:ed:34:37:47:0d:6a:
5e:52:82:51:2c:29:84:e9:6c:1e:5b:36:39:58:03:
87:0f:a0:1a:6d:bb:95:e9:86:55:78:0c:a2:e1:8b:
6f:ab:51:40:07:b1:59:a1:ea:7b:c8:d2:31:cc:df:
a3:85:89:05:94:b3:6c:d4:cd:bf:2d:34:c9:e9:2f:
58:c8:69:bd:a0:d5:f8:65:f7:7a:ae:87:89:5a:38:
8d:79:f4:ec:23:ae:b6:00:f0:12:51:c0:7c:94:47:
4a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:15:8F:10:91:7D:97:D8:E5:1B:4B:FA:D8:27:FC:C3:88:46:1F:43
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:08:4c:57:4a:ef:4c:e1:a9:da:f2:47:65:1a:6f:87:7f:44:
f6:60:32:7e:45:83:e7:de:0c:2f:2b:45:66:8d:09:7d:ae:a4:
19:bf:1a:db:71:5f:df:b4:05:8b:4e:59:76:3d:38:3e:c9:7d:
5f:ec:fb:a4:f0:f0:42:76:6c:b5:5c:d5:e1:0e:fc:c3:12:40:
b3:de:4c:88:44:9b:28:42:bc:5f:8a:ab:df:48:4b:c4:b9:38:
68:74:08:26:38:35:89:64:be:60:4f:9b:9c:f7:20:18:c8:c6:
77:c9:01:ba:9e:db:b6:72:73:aa:26:35:ac:d7:33:a7:05:1e:
eb:3f:97:ce:6d:44:67:df:97:8b:de:e4:ed:1f:33:dd:c7:fc:
27:23:2c:c5:38:a0:be:e8:35:83:54:1c:ff:f7:3f:32:b0:67:
61:f0:54:7b:de:ec:f1:36:f5:50:34:e9:e9:34:75:ef:f5:2c:
30:d1:58:87:73:2c:d7:c8:90:90:41:e0:8a:5b:6b:34:42:ab:
e1:60:84:b1:49:32:90:f0:19:a6:25:3f:6b:32:28:ae:e4:a3:
fe:bd:1f:fc:8d:d0:f5:8b:1a:5a:b8:f5:c1:56:71:94:63:ea:
60:00:d1:0c:bb:d6:f0:05:31:0a:e0:18:af:3a:21:fe:d6:e6:
48:85:6c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:53:21 2026 by rpki-client