Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: 0Sdin54USWMbFEcX9TeVsmG08r+bcTZdeLGj2uodlqo=
Subject key identifier: 7C:BA:05:99:FD:D8:78:6C:BC:E4:17:EF:90:58:2D:1B:91:40:E2:8E
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 01A06EA80F6E9BF0942D39E1359A7767D094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 14DA
Signing time: Fri 04 Sep 2026 23:01:42 +0000
Manifest this update: Fri 04 Sep 2026 23:01:42 +0000
Manifest next update: Sat 05 Sep 2026 23:01:42 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: JDNCUt6WRneCrJDtEkXz6yIPHjVllJIOT4V84H3Wucg=)
2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
8: uAj3CtbzCpXCLuuM_PucbGSgKxc.roa (hash: dHv8GawOTN4Q04OIxQpN0YyPcGSkeXeJgAk49vv4oMg=)
9: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a8:0f:6e:9b:f0:94:2d:39:e1:35:9a:77:67:d0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Sep 4 23:01:42 2026 GMT
Not After : Sep 5 23:01:42 2026 GMT
Subject: CN=7cba0599fdd8786cbce417ef90582d1b9140e28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:24:0b:1a:a7:7a:02:e1:3d:8c:7c:13:18:c7:
c2:c0:ad:42:f9:2f:52:47:3d:79:43:c1:70:fb:e1:
e1:a0:dc:a5:8e:94:e4:1f:e8:b2:77:53:3a:fe:6e:
a0:ab:60:34:d7:80:b1:63:3d:e9:c3:30:8a:c6:b3:
86:27:3f:22:1a:bd:15:c0:6f:da:05:dc:91:45:2a:
23:d4:81:2f:97:94:71:91:49:4c:fa:53:68:84:42:
ae:ff:de:29:ec:88:16:31:1e:27:91:b3:0b:45:26:
0e:35:18:2c:a4:21:7c:60:47:d1:a5:a9:bf:75:16:
2e:e8:6f:50:d4:28:ed:2f:53:4e:16:29:68:9c:9c:
b0:43:a7:62:a0:5c:63:5d:9c:a3:0a:c4:f9:5c:b8:
ac:b2:0e:ef:5e:c1:d6:f0:5e:2d:62:cd:c5:b9:3c:
71:b6:68:c5:e9:87:82:c1:d5:56:78:b4:a7:c6:c2:
78:58:2a:e8:11:8c:0d:59:0f:c5:2e:0e:0e:33:f0:
27:58:ee:19:73:31:d6:42:7f:2b:59:f7:45:6a:84:
25:87:91:f6:2a:5a:c3:e3:27:56:ad:6f:c2:ee:05:
38:27:11:24:98:df:6d:00:22:f3:82:5c:0d:18:22:
40:dc:44:d1:25:64:0c:49:92:6f:eb:c7:43:07:5b:
3d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BA:05:99:FD:D8:78:6C:BC:E4:17:EF:90:58:2D:1B:91:40:E2:8E
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5d:dd:6c:39:f3:b0:0b:54:11:a7:fc:a5:73:9a:a1:fd:e6:
3f:a1:31:f4:f1:d6:01:f8:84:e6:48:90:74:fe:4d:97:4c:4b:
cd:7e:18:9f:aa:3e:bf:08:9b:c0:65:2c:a5:aa:ce:af:5f:e3:
99:cb:af:e3:15:b6:9c:5c:c7:be:35:64:bf:a3:8e:d4:d8:3e:
6c:2d:64:a4:d8:45:ec:fb:95:23:0e:dd:99:bb:27:75:3e:5f:
6e:4c:f2:8f:78:4a:c8:76:8d:c9:c1:17:0d:53:9f:a2:76:fb:
49:21:8d:25:9a:74:1c:2c:da:e1:64:9c:5e:77:4a:be:3a:77:
64:1e:f7:45:29:79:86:3c:f8:83:3f:78:e5:a0:44:fa:23:2c:
e9:88:24:3c:f6:79:3c:e9:80:09:02:5a:ef:ff:ac:ac:6c:60:
41:eb:e7:25:da:ab:2d:65:ce:74:b6:05:da:bf:7a:06:e4:ef:
11:9a:6c:37:f6:ef:8e:98:ea:d3:48:f9:4b:79:b5:03:da:27:
04:8d:e3:a3:08:9f:9d:4d:2a:cc:b0:e7:89:89:87:33:bb:d1:
ef:9c:66:7d:0b:15:cf:db:f5:18:ea:0a:2e:29:81:fa:88:ee:
75:eb:0d:ac:e2:04:10:7c:4d:dc:a5:51:a5:01:ca:3d:46:39:
0a:ee:78:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:48:03 2026 by rpki-client