Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: sjS07/eqdNa5Fx9MsiMucMAlCIVm+2/YdVdM+aZ2xUY=
Subject key identifier: 0C:AD:DA:E2:23:F6:86:03:11:98:08:98:D9:E5:53:C7:F0:8B:0F:65
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019D2A72828215742A52B77BD4257C88ABAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 1329
Signing time: Thu 26 Mar 2026 14:00:40 +0000
Manifest this update: Thu 26 Mar 2026 14:00:40 +0000
Manifest next update: Fri 27 Mar 2026 14:00:40 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: 1D18eCaALb+P3LKtsnpLc3/W6w8/g7yyMveP3XYxjJ8=)
2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
8: uAj3CtbzCpXCLuuM_PucbGSgKxc.roa (hash: dHv8GawOTN4Q04OIxQpN0YyPcGSkeXeJgAk49vv4oMg=)
9: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:82:82:15:74:2a:52:b7:7b:d4:25:7c:88:ab:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Mar 26 14:00:40 2026 GMT
Not After : Mar 27 14:00:40 2026 GMT
Subject: CN=0caddae223f6860311980898d9e553c7f08b0f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:55:83:4c:ff:11:a7:63:3c:d5:00:97:fd:
d2:35:25:e3:86:7d:47:64:4c:29:f4:dc:9f:23:32:
db:d1:84:27:12:a5:c1:27:a4:0a:bf:d5:cd:eb:f7:
fb:61:e8:50:24:76:bb:ca:79:07:28:36:d3:81:ca:
3b:7b:5b:45:bd:9b:3a:ff:91:45:00:8e:0a:7a:a1:
34:c0:d0:aa:97:0b:e0:23:0c:4d:6c:4a:da:9d:6f:
0b:7c:1f:3f:26:e0:7b:05:1e:bf:8b:4c:7c:65:ef:
24:ea:b7:10:09:b3:2d:38:31:79:80:1a:3e:2a:d8:
36:57:c6:25:0c:8c:f5:cc:6b:97:c2:f3:01:56:da:
a0:77:2d:c9:9e:eb:ae:43:ce:f5:e7:5a:f0:22:e7:
a8:8d:a7:4f:b4:24:0c:9d:06:0c:f5:60:bc:95:a1:
a4:2f:0f:87:83:2f:b6:ee:b4:48:31:e7:b4:47:ef:
b2:9e:e4:03:b0:7e:d3:c4:03:d2:15:8f:79:e0:78:
02:a1:65:74:9a:02:8b:da:ed:74:b0:01:cb:ff:f4:
8c:2a:bb:55:4d:fa:34:05:c2:0e:fa:ca:86:da:36:
cb:44:82:8b:2e:4b:4c:60:c7:23:59:d7:e0:98:e1:
2c:5a:8a:37:a4:e7:18:ad:8d:b1:11:b1:c7:ad:45:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AD:DA:E2:23:F6:86:03:11:98:08:98:D9:E5:53:C7:F0:8B:0F:65
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:05:77:92:b3:ca:94:e2:92:f8:57:72:0f:a2:bd:97:5a:6a:
9f:7a:7b:64:72:e2:49:1d:d0:2c:e5:b8:f8:e1:49:72:1d:e5:
de:4b:40:79:62:5b:59:55:d7:32:77:f4:2a:3e:7b:3f:8f:34:
6b:b9:d7:68:61:43:c3:f1:ad:09:f6:98:4b:36:ed:be:7f:15:
d1:07:a1:cc:16:99:ed:d4:a6:e3:eb:1f:7d:49:cd:70:c8:d7:
b0:01:fb:c4:db:1d:a2:38:62:ae:a7:8b:7f:15:d0:bc:30:a3:
33:25:31:0f:f5:46:5b:5b:18:5d:06:8f:d8:f2:28:2a:df:02:
0d:0c:3b:3b:a6:55:40:bc:62:71:9b:40:86:d5:a2:f3:23:80:
46:f4:8e:c2:2c:cd:63:20:f2:51:98:9c:bd:01:f9:46:9e:3f:
ab:9d:0d:32:0d:43:a7:b6:e3:f8:9d:f3:4f:7d:9d:bc:4f:c8:
97:fe:5f:6c:62:93:41:92:bb:41:86:7f:1e:42:db:af:3e:fd:
62:ab:77:19:c4:8f:82:9a:7f:b2:a4:6a:df:1d:4a:0e:e8:b4:
1b:51:df:ec:0e:e1:d0:ef:9f:a7:a9:dd:27:b5:48:f3:c6:84:
8a:aa:cd:e2:5d:02:be:45:60:91:6a:6e:df:35:4e:5c:a2:49:
80:9e:34:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:07:06 2026 by rpki-client