Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: Ev9ILcvpxv49rrKmgTKjGTUFd02MnRKfA4o9u9YZe5Q=
Subject key identifier: 38:3D:ED:A7:05:B2:A0:77:31:73:28:59:75:BE:8E:6E:0F:92:E8:C8
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 01A175147EA8CE31185840B7456C7B5AAEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 1562
Signing time: Sun 25 Oct 2026 22:00:39 +0000
Manifest this update: Sun 25 Oct 2026 22:00:39 +0000
Manifest next update: Mon 26 Oct 2026 22:00:39 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: x+fzNYBm8jtroBLVumhUuM2XtFmauybmFEBgoSLUNt4=)
2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
8: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:14:7e:a8:ce:31:18:58:40:b7:45:6c:7b:5a:ae:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Oct 25 22:00:39 2026 GMT
Not After : Oct 26 22:00:39 2026 GMT
Subject: CN=383deda705b2a0773173285975be8e6e0f92e8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2b:f0:b4:a1:9d:de:c6:52:cc:5c:0c:39:0d:
4d:15:39:7c:2b:d2:f5:b8:f1:d6:9f:ac:34:3e:69:
de:20:0d:b2:d1:c3:bf:fa:75:88:b3:5c:db:eb:3b:
a6:b7:ea:6f:4d:12:17:50:bf:9d:e4:19:a6:25:1d:
75:c2:0e:d4:8a:46:3c:fc:99:28:cf:14:80:a5:b4:
ab:9a:0a:0c:d5:14:8c:f9:c5:8d:37:88:c9:e3:92:
e7:5c:9d:d6:94:02:82:79:ff:44:57:52:70:fd:34:
ce:cd:72:fc:d4:dc:ba:02:7b:1f:8b:5f:d7:06:6d:
83:df:a3:55:ae:73:34:46:b9:b0:a7:48:b5:b8:cb:
ba:21:eb:dd:92:98:91:9d:9e:74:e0:b9:b1:22:5f:
43:7f:5a:f1:6f:96:17:27:88:36:38:61:8c:77:c9:
e7:f3:6c:b5:70:71:16:99:a0:e1:9d:36:83:3d:9e:
1a:90:cc:61:f8:6b:ae:52:4e:0f:d7:77:60:fd:e1:
38:23:53:df:fc:35:8f:51:a2:ed:5c:59:fb:de:b6:
bb:03:6b:9f:64:ab:99:08:e6:36:a9:1c:c0:eb:6d:
85:0c:c4:35:84:49:7b:67:be:e8:66:12:41:e2:8d:
90:5e:fd:fe:21:13:e2:4c:52:13:8c:11:19:94:d9:
98:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3D:ED:A7:05:B2:A0:77:31:73:28:59:75:BE:8E:6E:0F:92:E8:C8
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:44:65:90:82:2e:c7:fb:7d:68:4c:0c:17:fb:91:db:f2:f7:
48:ba:73:be:b4:ab:e7:53:5f:ce:71:d4:d4:b3:cb:e0:f0:bd:
db:e5:56:23:28:60:b1:88:50:c6:44:d6:19:2e:21:8d:69:40:
1a:a9:61:dc:71:76:a0:9a:38:d7:ce:2e:b3:bc:66:7c:ec:9b:
0d:28:76:ba:b8:4b:86:f8:07:48:33:43:d2:c1:d9:92:7f:9a:
88:33:55:fb:28:9d:ba:2c:63:15:d1:bf:7b:98:4f:0c:07:2f:
dc:78:cb:24:4c:d1:ef:5b:2a:12:b5:4e:0b:fa:fd:9c:dc:2f:
28:1e:87:c4:ce:b8:96:eb:6b:2a:94:11:2f:1f:7c:5b:fc:9c:
42:ac:51:58:d4:f4:71:75:3f:f6:eb:ba:88:aa:c9:76:53:0b:
03:e0:d9:eb:dc:c0:5f:39:5f:15:96:7b:ee:be:bf:4a:90:49:
8d:33:50:9f:a2:1c:9a:3a:d9:54:0d:2a:1f:1b:00:86:21:9f:
46:e1:e8:c8:15:e8:4c:51:e8:21:5f:e0:19:ab:db:d2:f6:06:
a3:ff:83:7e:40:3e:cc:74:2e:94:4b:49:49:3d:5b:3a:78:b7:
74:4b:16:f0:d7:c3:00:87:f8:86:c5:cd:e5:37:7a:21:4c:ae:
9b:59:83:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:51 2026 by rpki-client