Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: +7LT2z1gKQCWLgTtKKIVbmi5qBSexIHrx36yBt5EYGI=
Subject key identifier: A8:76:FF:68:70:D1:F9:AD:BD:3B:31:AE:2E:0E:20:FB:6A:F1:28:CA
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019DA22EAE61514389D7C4EB952EF1C30D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 1367
Signing time: Sat 18 Apr 2026 20:01:01 +0000
Manifest this update: Sat 18 Apr 2026 20:01:01 +0000
Manifest next update: Sun 19 Apr 2026 20:01:01 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: vI1hHTHi+qEhpk3YU5eSDNHNaEFInzcpmyGqetVUoPU=)
2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
8: uAj3CtbzCpXCLuuM_PucbGSgKxc.roa (hash: dHv8GawOTN4Q04OIxQpN0YyPcGSkeXeJgAk49vv4oMg=)
9: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:2e:ae:61:51:43:89:d7:c4:eb:95:2e:f1:c3:0d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Apr 18 20:01:01 2026 GMT
Not After : Apr 19 20:01:01 2026 GMT
Subject: CN=a876ff6870d1f9adbd3b31ae2e0e20fb6af128ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:1c:de:ac:3d:27:04:22:36:b0:f4:8f:3e:
cc:3d:af:fa:54:01:b7:3a:e7:0b:e5:40:a3:70:e5:
57:58:75:80:35:44:31:48:45:46:49:8d:67:5f:6b:
39:cc:21:37:2d:80:2c:bd:7b:9b:c0:46:4c:3f:03:
5d:97:b3:93:de:e8:6f:31:06:01:fc:55:7b:29:ba:
37:3d:44:f6:78:8d:0d:83:27:3b:4b:9b:e8:29:89:
d3:a6:22:84:26:1c:2f:21:c6:1f:39:63:65:db:09:
40:af:69:70:eb:6e:a3:b8:e6:8b:b4:1a:98:c9:c5:
60:d5:a6:f0:3d:0f:90:ac:6c:b3:34:27:dd:d2:94:
a3:1e:c5:1f:c1:c6:e8:1a:63:48:71:f3:8f:c8:71:
d6:1c:b5:d2:5b:5c:a5:14:0a:bb:a0:a8:f3:c6:54:
3d:84:1a:4e:7e:ea:9b:e6:a2:f7:ac:c4:13:ac:d9:
29:91:fe:17:2f:19:5b:91:f2:f5:b6:f9:50:3a:b5:
1d:9e:33:74:eb:63:78:35:16:59:61:cc:3c:3c:ef:
64:84:78:34:9e:47:5e:c1:93:a1:77:33:ef:08:e1:
8e:1b:08:c9:43:f5:67:9c:e5:a3:1e:1e:e4:fd:30:
7b:e5:d8:ad:32:b5:d0:5c:53:c9:24:79:a1:31:2e:
c0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:76:FF:68:70:D1:F9:AD:BD:3B:31:AE:2E:0E:20:FB:6A:F1:28:CA
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:49:10:0d:a5:c5:3c:04:e3:a6:ae:bf:43:51:9b:c1:37:11:
d9:0f:1b:34:4a:2a:57:ae:8a:b7:83:7a:06:d6:d2:8d:66:fa:
1e:f8:bb:78:a0:96:14:85:0c:a0:fe:ce:07:2d:eb:ba:64:32:
d4:be:b5:34:02:83:d8:0c:7c:e1:1c:bc:cb:56:2a:61:19:c2:
ad:f0:6b:1b:f2:cb:7b:2d:c2:e6:aa:1c:f4:e0:9e:bf:4d:7b:
1d:75:a1:94:97:d1:72:41:40:19:0b:64:04:57:e2:42:94:d3:
9f:1c:44:d0:4d:ca:74:6c:fd:e4:fd:f2:2e:1c:1b:cb:43:5d:
19:00:17:ec:52:f6:0a:f1:36:09:cc:ed:5d:6c:ba:ea:3f:5d:
24:fc:75:91:a2:4d:38:9c:a3:33:b5:9d:98:69:36:ab:65:82:
27:a5:e6:ae:5b:2b:67:a9:ea:e6:fa:1a:9d:25:99:7d:f3:67:
8f:d2:6e:32:64:4b:05:dd:c0:86:58:2f:d9:33:be:ee:b4:32:
2a:78:70:1d:34:97:a9:07:46:de:bf:c8:bb:1e:8e:f0:8f:1a:
18:92:3c:76:14:ac:48:aa:3d:fd:f3:33:ec:2d:16:62:ca:56:
ac:72:a6:ec:a1:2d:b2:46:40:64:8b:bc:2a:18:07:8a:2d:2f:
7c:a8:16:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 23:45:10 2026 by rpki-client