Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: yywUpxPhox0tt32aP7ExklmNLADI6ZIybwuJp1qwkRM=
Subject key identifier: C5:A9:E8:5D:DF:C6:89:2C:8A:7A:55:5C:57:95:DD:03:2D:23:D3:D9
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 01A0DC84EBD16E8BE038B052CC9D17C200E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 1513
Signing time: Sat 26 Sep 2026 07:01:33 +0000
Manifest this update: Sat 26 Sep 2026 07:01:33 +0000
Manifest next update: Sun 27 Sep 2026 07:01:33 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: YkLjybL1qSC/2/c6k4AHRI95/F852O+ZFxzcWLfxEFg=)
2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
8: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:eb:d1:6e:8b:e0:38:b0:52:cc:9d:17:c2:00:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Sep 26 07:01:33 2026 GMT
Not After : Sep 27 07:01:33 2026 GMT
Subject: CN=c5a9e85ddfc6892c8a7a555c5795dd032d23d3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6a:67:8a:85:1a:8d:db:27:0b:00:ba:b5:a7:
13:38:a2:6f:10:10:02:08:19:a1:0e:03:93:65:6b:
aa:ef:e0:91:59:18:22:f7:0b:4f:e3:6b:d1:aa:66:
f2:9f:c3:dd:30:7b:66:a8:49:5d:c3:ea:48:ab:4b:
b4:ff:d5:8a:21:a1:f6:ad:49:6f:ad:48:46:5e:de:
8d:09:aa:fb:1b:e3:50:cc:29:a1:66:84:6c:66:81:
35:24:13:03:db:d5:8f:27:0f:6a:45:f6:29:cf:58:
f5:d1:12:99:af:b9:c5:da:40:ce:29:68:75:9f:01:
73:4f:ef:27:16:36:57:a2:38:c4:42:67:7f:86:98:
78:ab:eb:a1:8c:d8:5f:82:60:37:a1:4e:93:dc:df:
f5:1a:34:f8:c5:a8:b6:d4:62:f2:1f:66:dd:4e:b0:
cd:1f:4b:1b:c2:16:c7:44:bd:04:37:8e:86:41:61:
4b:42:e0:55:5a:1d:79:22:6c:48:31:a4:32:e1:1a:
79:df:bc:a1:5e:99:00:99:31:44:be:dc:45:76:93:
03:5b:74:17:86:50:2d:41:ce:9e:69:84:7c:b6:80:
19:42:4a:73:16:05:64:63:d9:1e:c1:b0:24:b8:c8:
c7:b4:84:b8:43:ba:26:e7:ed:4d:cb:dd:b3:89:bf:
23:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A9:E8:5D:DF:C6:89:2C:8A:7A:55:5C:57:95:DD:03:2D:23:D3:D9
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8b:5e:4f:03:c3:5a:f4:f0:12:a2:b8:d8:de:75:62:2f:fe:
51:00:52:5b:c9:99:b9:21:f0:61:6f:fb:06:97:9f:7a:4b:c1:
9d:49:0e:67:43:b6:4e:f4:10:0d:3a:b6:5f:04:e8:66:9f:41:
41:b7:da:bf:50:f9:27:a4:cc:04:28:89:d4:0f:ee:e9:76:8b:
86:fe:c0:da:e2:2a:50:9b:b1:4a:32:6a:e4:c6:ab:d3:b5:91:
f4:91:7c:0d:72:c6:3c:ca:a3:b3:4b:3e:50:f2:9f:54:ec:bb:
03:5d:cc:96:38:7c:c8:5d:fa:68:c2:99:02:0e:21:2f:11:51:
e1:62:15:38:96:ec:5c:2e:bc:ee:eb:e6:1e:45:da:61:77:60:
73:fe:b4:a3:ff:d0:4f:72:94:74:c7:78:41:5b:bc:e8:1f:88:
49:bb:56:e6:9d:82:8d:ea:c3:01:35:82:d8:84:a3:5a:8f:e7:
21:21:f7:3a:a6:67:c7:6d:f4:89:cc:1e:0b:a1:20:f7:31:e7:
54:a2:69:6e:de:4b:f0:b8:7b:5a:f2:f7:cc:30:9c:94:0d:f9:
cf:36:34:fa:dc:30:d5:66:98:71:eb:5d:cb:6f:63:6a:0f:3b:
fa:f7:d2:52:d4:01:42:72:0d:7c:42:99:29:ec:a0:5a:61:5d:
55:72:bb:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:43:14 2026 by rpki-client