Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: GPLsfB0HtfXGlFAm4DFXlzmFhriga2s99uVXazG4PLs=
Subject key identifier: 3B:B8:FA:1D:FD:7F:1C:6F:A7:23:34:AD:B8:F5:76:82:B5:0C:CF:57
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019CACEBAAFE58A27F5559E2A1781982CE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 12E8
Signing time: Mon 02 Mar 2026 05:00:51 +0000
Manifest this update: Mon 02 Mar 2026 05:00:51 +0000
Manifest next update: Tue 03 Mar 2026 05:00:51 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: aWcBE3i6jMma3GwYzZqfKeLxZ8Z5+RmZgyK+uyZA2No=)
2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
8: uAj3CtbzCpXCLuuM_PucbGSgKxc.roa (hash: dHv8GawOTN4Q04OIxQpN0YyPcGSkeXeJgAk49vv4oMg=)
9: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:aa:fe:58:a2:7f:55:59:e2:a1:78:19:82:ce:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Mar 2 05:00:51 2026 GMT
Not After : Mar 3 05:00:51 2026 GMT
Subject: CN=3bb8fa1dfd7f1c6fa72334adb8f57682b50ccf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:08:64:f7:8f:9c:e9:51:b8:b6:14:0e:13:69:
f1:8b:f6:e2:a6:d3:62:30:14:72:ba:cb:82:58:3c:
a2:2e:03:1b:b1:ee:f7:d3:7c:9d:84:88:cc:47:e1:
56:b4:c9:47:11:22:39:4e:63:36:72:a3:c2:ee:b3:
98:69:93:1e:31:fa:3f:47:c5:04:28:06:e5:6e:20:
78:cd:42:8c:9b:91:43:97:00:6a:54:fa:bc:d8:c1:
e9:4e:f3:f3:e8:aa:d7:34:0d:69:15:5d:c4:98:34:
52:80:6a:e8:14:90:ff:da:05:05:9a:f7:6c:32:db:
2b:42:4a:fa:36:63:74:05:6d:00:55:83:f0:ff:f4:
a8:f6:be:90:93:65:c8:0e:68:7e:a1:d1:84:e2:c1:
0e:c4:c3:3e:be:1e:0d:2a:49:ed:c4:b0:7a:53:fb:
79:c4:39:72:1b:38:06:a0:c4:aa:fb:df:9f:49:52:
a6:e0:0f:4d:a4:ce:86:b0:6e:b2:89:16:e7:a6:24:
6e:ee:3a:93:eb:76:9a:c8:ec:5b:ec:dd:5b:a6:51:
a7:b2:50:b2:5d:60:df:bc:a7:43:4a:e4:fd:4e:4a:
3c:de:40:57:be:7f:77:cc:80:d8:9c:46:87:93:3e:
07:4b:8f:6a:25:93:b7:71:be:46:b3:0e:96:e9:48:
46:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B8:FA:1D:FD:7F:1C:6F:A7:23:34:AD:B8:F5:76:82:B5:0C:CF:57
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:07:fb:97:d9:a8:62:67:2b:80:5d:fd:93:94:77:08:7d:16:
25:39:2a:a8:10:92:ca:25:b4:14:aa:3a:1b:65:99:50:37:77:
56:69:79:5d:66:08:bb:66:7c:59:51:85:92:05:82:aa:05:9d:
18:50:83:3f:3b:08:2e:12:4a:a2:f0:2e:37:cd:6d:f3:91:56:
7d:67:22:7f:d7:c9:3b:f3:1a:4e:3e:84:85:5e:c6:f5:22:ca:
e0:1c:a5:6f:04:6c:00:3d:8e:17:34:f0:87:a4:87:95:52:79:
57:f6:ca:08:80:ee:42:72:bc:28:37:73:db:b5:4e:b9:1b:03:
ea:8a:a7:f6:d3:57:f1:2a:b4:03:39:46:45:47:69:10:f3:9a:
c3:e8:b2:05:f3:2c:f7:20:17:84:b3:b3:26:28:bd:22:13:09:
7f:aa:55:24:a1:ad:1b:c7:ea:90:86:04:32:a6:9b:a9:69:c2:
1b:f3:a7:1b:2c:22:c3:9d:0b:13:83:e6:f0:81:eb:b1:1d:ed:
4e:d1:44:b1:5e:58:46:2f:ad:e1:6d:a4:0b:94:8c:e6:10:ff:
18:49:63:53:98:9e:3f:f5:9b:2a:8d:0c:a2:45:ed:e9:8a:e6:
22:da:20:45:f4:01:d2:9d:60:ee:2f:5d:29:89:b6:bb:44:b1:
43:da:12:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:19:58 2026 by rpki-client