Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: uBWWGsRWvGEe6FOJPDLNl+v7GmWAVi7CZpt3B0Q0JZE=
Subject key identifier: 5A:C5:5B:1C:1E:BD:4F:37:17:8B:AA:A9:7B:43:6F:53:44:26:2A:85
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019CB881BF7490755CF7255D0589929984EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 12EE
Signing time: Wed 04 Mar 2026 11:00:36 +0000
Manifest this update: Wed 04 Mar 2026 11:00:36 +0000
Manifest next update: Thu 05 Mar 2026 11:00:36 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: 4pCsZTPaTd5h3V2Zkz/35uR1rk/O6p8c4aUYgfGA2do=)
2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
8: uAj3CtbzCpXCLuuM_PucbGSgKxc.roa (hash: dHv8GawOTN4Q04OIxQpN0YyPcGSkeXeJgAk49vv4oMg=)
9: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:81:bf:74:90:75:5c:f7:25:5d:05:89:92:99:84:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Mar 4 11:00:36 2026 GMT
Not After : Mar 5 11:00:36 2026 GMT
Subject: CN=5ac55b1c1ebd4f37178baaa97b436f5344262a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:5a:e4:31:39:55:3d:9c:37:3b:e3:9d:b7:
a6:0e:82:54:11:61:cf:89:14:ab:e3:88:50:93:70:
69:0b:42:74:e1:46:89:40:f2:57:67:48:fc:97:1f:
c7:df:01:c3:b4:6a:19:1f:9d:f3:7c:1a:32:e1:f3:
81:58:bd:d6:7e:67:e0:18:5d:8e:9a:63:3a:71:b9:
4b:27:fd:1a:d9:38:49:6e:02:e1:cb:b0:b8:a2:1e:
2b:d9:87:96:47:d1:71:2e:ba:24:40:58:01:a7:71:
6a:d2:f6:5c:00:ab:b4:5b:1a:62:39:a0:f2:3a:f0:
11:0a:3a:99:10:91:1a:ee:0d:c8:30:78:89:d3:9e:
59:bd:79:c8:46:18:cf:c7:c3:f5:ac:07:5d:76:62:
db:1f:1e:8e:d1:49:19:d9:7a:5d:f0:56:6b:2f:c1:
c3:3e:68:f7:ba:ef:ab:9d:d1:26:02:86:f7:15:ba:
61:76:42:ad:97:13:a3:73:3e:63:f5:ce:71:d7:1f:
f8:03:fc:0d:61:51:e0:5c:fa:f0:c1:2d:76:23:dd:
81:93:de:23:0b:30:70:a5:fd:7d:e3:e5:36:58:dc:
8d:73:1d:3c:96:d8:30:38:e5:fa:cb:a4:c8:46:83:
d3:8f:14:15:a0:35:08:82:69:51:ad:9c:d7:32:1d:
50:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C5:5B:1C:1E:BD:4F:37:17:8B:AA:A9:7B:43:6F:53:44:26:2A:85
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c6:06:5c:e9:2a:a5:db:fc:ee:4e:57:8d:6d:57:31:13:87:
b8:7a:fe:a2:59:82:45:b3:fc:b5:1c:00:49:ac:82:9d:ca:73:
b4:60:8a:e2:77:e1:36:f7:6f:8c:55:fe:41:02:e8:29:84:2b:
5f:6c:14:ae:bb:b3:db:0e:02:53:b2:d5:f4:19:08:11:6e:6b:
8b:90:49:17:2b:b8:bd:4e:43:0e:fa:4b:a1:9b:92:22:dc:5c:
25:a1:f8:1f:d8:76:8b:63:20:5a:e4:9c:92:52:4a:62:fe:4d:
a8:81:f9:25:53:08:c3:41:36:4f:5e:4c:63:09:8a:a2:f6:07:
e7:85:de:96:bf:3c:fc:f0:a0:f5:3c:99:cb:0c:8e:c4:99:08:
7c:b2:88:01:47:ca:f7:8f:7b:8a:59:e5:72:79:12:2a:cf:81:
8f:e8:31:10:d4:62:9f:85:3d:02:29:77:55:14:50:67:7e:1c:
c8:1b:7f:8c:e7:5f:bf:44:3d:c3:14:29:69:21:5a:af:33:aa:
2e:4c:ab:eb:3c:a6:ea:66:26:c2:cf:f7:41:5a:f5:a6:de:43:
0f:7a:ab:35:84:39:52:16:20:ce:74:d4:36:84:56:29:40:cd:
00:31:a4:58:c8:3a:4a:e9:6f:bc:1f:c4:65:e8:6e:35:27:92:
cd:b1:a6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:43:30 2026 by rpki-client