
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: /5cZV0zcYiVTmN1BqOLDsJ2e8Cy5hdocQik8BruT2wo=
Subject key identifier: 19:AA:04:17:B3:49:02:A8:F3:F1:FE:FA:36:26:0C:84:97:21:84:63
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019E91A6381668A7F766B55EFDE043542C2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 13E3
Signing time: Thu 04 Jun 2026 08:00:50 +0000
Manifest this update: Thu 04 Jun 2026 08:00:50 +0000
Manifest next update: Fri 05 Jun 2026 08:00:50 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: tb/tfOVK64V+h+gxf7VHlGet1eEM6EjvfhRqfLUOEAY=)
2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
8: uAj3CtbzCpXCLuuM_PucbGSgKxc.roa (hash: dHv8GawOTN4Q04OIxQpN0YyPcGSkeXeJgAk49vv4oMg=)
9: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:a6:38:16:68:a7:f7:66:b5:5e:fd:e0:43:54:2c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Jun 4 08:00:50 2026 GMT
Not After : Jun 5 08:00:50 2026 GMT
Subject: CN=19aa0417b34902a8f3f1fefa36260c8497218463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:85:84:93:e5:bb:2c:64:39:10:7c:9c:9d:e7:
2e:34:a6:c5:a1:60:4a:fc:5b:84:d0:67:82:e3:b6:
93:4c:01:98:01:33:d6:64:f6:f0:dd:d0:bc:50:ba:
72:5c:c3:9f:e6:a5:2c:ad:09:f9:9f:ec:0f:1d:68:
14:11:09:35:73:f2:64:89:9a:12:8c:60:88:50:3f:
75:0c:bd:68:5e:1d:e6:d0:36:ff:5a:02:cb:79:fd:
65:82:0a:85:74:b6:28:83:ee:09:a5:3f:36:19:d3:
c8:fa:7f:9e:d3:f6:df:cc:94:28:8d:2f:e1:0a:f5:
af:eb:59:a6:12:89:a0:88:0c:5e:e8:2d:59:24:42:
8b:b2:06:3d:60:72:b5:32:57:ee:8f:af:69:d8:34:
51:86:01:f8:0e:c7:a2:74:71:29:29:f9:ac:1a:b4:
82:32:05:01:04:c0:c7:2a:08:57:2a:cd:de:6f:45:
4c:7d:43:74:0f:09:2f:95:f9:64:84:a3:1d:74:e5:
d3:f8:17:56:fe:2b:10:f4:b5:cd:57:97:70:14:9c:
cb:01:68:df:0d:62:bb:f3:84:3b:cf:f8:92:81:a3:
cd:84:75:f5:16:d1:79:cc:a9:cf:10:4a:ea:23:11:
f6:91:9b:54:07:e7:6a:e1:0f:89:18:e1:f4:9d:55:
e1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:AA:04:17:B3:49:02:A8:F3:F1:FE:FA:36:26:0C:84:97:21:84:63
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f6:a7:f2:ac:78:3d:c7:12:2c:17:f1:dc:2d:cf:b9:a6:67:
16:a0:d6:21:1e:7c:ae:05:05:95:c8:d3:b8:d9:d0:54:fd:50:
f0:22:d9:1a:8e:ad:38:c0:5c:75:9f:7a:26:36:b0:8c:2d:42:
87:9c:92:ca:0b:1c:4f:65:88:ce:77:ac:b6:4a:e8:81:68:b6:
a1:7a:ae:95:05:06:fe:df:18:4f:83:e4:b2:d6:63:8a:be:cc:
01:2a:2a:34:ca:96:98:91:29:45:79:ea:99:74:d7:b1:73:a8:
e3:70:c7:7f:80:be:f7:5c:41:85:3e:05:3d:f0:37:e2:7c:3c:
d3:3c:b0:20:e2:13:f4:2d:62:d6:9a:c2:99:f0:9b:3b:03:e0:
6a:f7:78:94:92:50:9c:87:e4:25:a0:61:f6:b2:f8:2f:5f:dd:
53:a5:38:fb:0c:cd:5e:96:cb:e4:4c:37:2f:16:35:f6:81:af:
30:00:97:79:0d:34:fc:dd:a6:89:6a:08:62:79:c4:79:e6:21:
93:8b:4c:94:6f:bb:4e:d6:58:e0:cc:f3:00:56:34:0d:39:3d:
1a:e7:c3:c6:3f:59:cd:fb:03:67:36:3e:25:aa:27:4d:36:5a:
b5:30:55:bc:c1:3b:38:6f:a9:62:d1:40:db:fe:47:7b:bf:70:
3f:81:fb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:09:03 2026 by rpki-client