Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: YmTEWhDVzb6F+eVbVD5os7PHyVFPoZIdoA1WtCzl7wE=
Subject key identifier: 7F:C5:64:EA:67:D3:C1:6F:6B:88:B4:72:BF:13:34:0B:DB:BD:93:6A
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019D988649B2CAAB0333429D966E497A8EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 1362
Signing time: Thu 16 Apr 2026 23:00:30 +0000
Manifest this update: Thu 16 Apr 2026 23:00:30 +0000
Manifest next update: Fri 17 Apr 2026 23:00:30 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: PUFIauQrGCcczvgiQ51tgvwFxi8l9zakbSmHb5Ehc7c=)
2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
8: uAj3CtbzCpXCLuuM_PucbGSgKxc.roa (hash: dHv8GawOTN4Q04OIxQpN0YyPcGSkeXeJgAk49vv4oMg=)
9: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:49:b2:ca:ab:03:33:42:9d:96:6e:49:7a:8e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Apr 16 23:00:30 2026 GMT
Not After : Apr 17 23:00:30 2026 GMT
Subject: CN=7fc564ea67d3c16f6b88b472bf13340bdbbd936a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a6:30:77:89:4a:ba:02:fe:40:fa:06:83:14:
11:51:fb:c2:bb:f5:7e:8f:c4:c2:9e:18:bf:f1:5c:
eb:19:95:e8:9f:df:61:d1:35:4b:06:a6:60:0a:41:
e0:8c:0f:83:8c:7d:06:ab:e5:23:b4:88:a9:97:95:
0b:7b:59:ef:f6:30:ef:f0:d9:31:ce:ef:14:73:a1:
b3:fc:4d:7f:70:c5:af:bf:76:ea:0a:ff:6f:fe:44:
2d:93:2b:36:05:28:ef:5a:88:59:04:b3:4a:ac:e8:
04:80:f0:8f:f8:2f:6f:66:3b:99:bb:d8:6e:95:06:
9a:74:48:29:d4:48:43:a3:d1:85:75:fa:6f:df:42:
59:ed:2e:28:8f:ea:ae:5f:4b:37:ab:b9:59:f1:56:
c5:5e:d8:74:38:7f:9b:4d:66:46:a5:d3:39:6a:08:
48:d5:93:53:5b:b1:5d:8c:5d:64:00:64:82:6f:58:
e9:3f:75:1c:99:19:31:1b:f8:4d:66:8b:52:36:20:
77:1c:40:dc:0e:99:65:39:37:a4:7e:e3:db:7c:39:
4f:3d:f4:fb:45:1c:89:82:15:ef:c7:1d:fb:2f:c3:
28:a8:98:17:6e:52:ec:df:0e:0a:1c:2e:a5:b3:18:
51:bd:38:2a:52:af:41:d0:ec:21:1c:92:ff:8e:26:
73:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C5:64:EA:67:D3:C1:6F:6B:88:B4:72:BF:13:34:0B:DB:BD:93:6A
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:60:97:46:0b:1c:5d:19:c4:95:4e:7b:86:b1:b1:8f:3b:ce:
95:28:06:44:2e:a2:5a:1e:dc:79:00:14:13:90:a9:48:36:cc:
a6:67:d6:94:ae:22:f6:d4:81:af:9d:e8:a8:c0:35:5a:19:8e:
9c:00:1f:c6:59:28:4a:cc:ad:b7:b3:c5:81:71:68:f1:3c:fa:
14:6c:d4:f9:45:45:44:16:63:9c:57:5a:ba:9a:d0:ea:91:6e:
fc:45:a5:36:dc:03:d1:7a:75:76:8b:06:95:78:d2:b4:df:42:
6e:db:cb:d5:2b:57:54:9d:b8:d0:ff:13:f1:0a:b2:7f:10:f4:
97:93:98:7c:1f:bb:1f:2c:0c:99:f3:df:d3:be:28:9c:6c:1f:
26:ba:08:b3:76:3b:ac:b9:8d:07:d3:b8:66:3d:aa:79:96:f8:
1a:82:83:aa:49:dc:c4:e7:fd:ab:7d:55:4a:6f:1c:64:83:17:
00:80:19:a6:bc:73:36:a6:a2:62:ed:7c:0f:27:e4:f8:95:d5:
b1:f6:0b:f3:65:ec:e8:f6:b7:41:c7:84:23:ac:2c:c5:de:a3:
de:22:75:53:21:3f:cd:9f:56:b8:bf:ed:3a:65:93:01:20:2c:
70:34:e9:27:43:4d:ad:47:d3:94:40:34:70:14:d6:2d:a3:b9:
fe:2d:29:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:24:18 2026 by rpki-client