Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: lt+cC32nj77ERtepKOWghEXN+7aAO5Dki60jJFg6ojE=
Subject key identifier: AB:CE:3D:49:F0:03:11:68:F6:FD:B8:F4:A5:E5:E7:B0:35:5C:E2:8F
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019CAAFCEC620220357644C7EC1416EE9FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 12E7
Signing time: Sun 01 Mar 2026 20:00:28 +0000
Manifest this update: Sun 01 Mar 2026 20:00:28 +0000
Manifest next update: Mon 02 Mar 2026 20:00:28 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: puVscOSyt787oGCyXoMQ+xe0U+xch+5Rd2Fe/6d+cns=)
2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
8: uAj3CtbzCpXCLuuM_PucbGSgKxc.roa (hash: dHv8GawOTN4Q04OIxQpN0YyPcGSkeXeJgAk49vv4oMg=)
9: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:ec:62:02:20:35:76:44:c7:ec:14:16:ee:9f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Mar 1 20:00:28 2026 GMT
Not After : Mar 2 20:00:28 2026 GMT
Subject: CN=abce3d49f0031168f6fdb8f4a5e5e7b0355ce28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0e:92:d7:02:3d:0b:59:56:45:3e:e4:56:23:
d9:98:e1:99:98:01:3f:70:02:a6:ff:50:5d:d7:37:
1b:15:cf:42:15:dd:c1:08:3f:1e:6f:03:ff:97:e7:
9f:90:4b:90:d4:23:41:19:fc:09:35:d0:1a:7d:8a:
e7:8a:6e:0d:bf:20:85:60:24:1f:3a:c9:ed:dd:0b:
b6:40:53:6d:dc:a0:8c:2a:5f:04:3d:a7:92:62:ba:
ae:1f:31:87:f6:07:44:06:9a:a3:31:8e:c0:7a:2f:
e3:74:40:b2:67:e6:a4:14:12:c1:1d:1b:57:13:ea:
6f:5f:f5:96:b2:d3:8c:25:37:48:e8:33:6a:37:50:
d5:dd:1b:2d:1f:ab:91:01:1d:9c:55:4b:2c:8a:2b:
de:a7:a1:e4:09:7d:e0:06:9a:00:cf:cb:ea:6a:00:
f3:17:b4:15:09:0e:67:10:f7:bf:9b:db:40:f5:26:
27:2d:35:8b:9f:67:9f:5a:8e:2f:14:77:5e:ad:05:
38:90:78:f4:ad:14:9a:6f:41:d1:65:39:0c:1e:af:
d3:11:3b:ac:a0:bd:c1:b9:00:f8:38:96:4e:3e:cf:
a9:dc:d3:c1:17:97:db:ab:4e:eb:95:4b:f6:b9:32:
1b:c5:f8:7c:07:d3:46:6b:9a:c3:1a:39:98:45:ca:
f8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CE:3D:49:F0:03:11:68:F6:FD:B8:F4:A5:E5:E7:B0:35:5C:E2:8F
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e0:60:96:e8:7b:14:74:ab:f4:49:70:c9:21:1e:02:60:7b:
7a:99:00:91:92:e8:03:fb:4a:6c:14:d5:6d:47:3b:1f:56:7c:
f1:c2:96:e9:9c:24:5f:84:8f:99:6d:87:e3:ab:0e:cb:53:e9:
47:fc:bb:79:9d:c0:17:ad:ce:d2:67:41:46:c1:2c:87:df:65:
3b:8b:9f:04:af:eb:21:3c:72:59:bf:98:76:49:a5:66:2c:eb:
41:46:82:d2:5e:ae:3c:df:44:6e:85:54:a3:8d:a2:57:ad:5a:
a9:c6:b8:ea:0e:83:bb:01:25:79:41:4b:6c:9a:12:8a:07:2d:
75:1a:fb:20:1d:99:97:8c:41:f8:be:dc:63:83:d8:f7:90:79:
64:d5:cc:7b:34:fe:51:ea:6e:fa:26:8a:40:b7:9f:b0:c7:11:
43:f8:49:a8:28:12:d7:75:2a:ce:e5:8e:77:6b:fa:a4:02:8b:
1a:5e:35:48:61:e6:00:0d:19:71:0c:21:55:03:1f:42:d3:29:
05:78:56:f5:e4:07:0f:c5:cb:c5:2c:67:2d:ff:1e:20:59:5a:
3a:19:58:ef:b3:37:89:8b:cb:95:2b:7f:69:e8:ee:96:d6:a7:
df:be:df:52:db:44:b6:f5:20:20:bb:9c:43:d7:ba:0b:c9:e0:
97:75:1c:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/OxiAiA1dkTH7BQW7p/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3
NGNjYjcwHhcNMjYwMzAxMjAwMDI4WhcNMjYwMzAyMjAwMDI4WjAzMTEwLwYDVQQD
EyhhYmNlM2Q0OWYwMDMxMTY4ZjZmZGI4ZjRhNWU1ZTdiMDM1NWNlMjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ6S1wI9C1lWRT7kViPZmOGZmAE/
cAKm/1Bd1zcbFc9CFd3BCD8ebwP/l+efkEuQ1CNBGfwJNdAafYrnim4NvyCFYCQf
Osnt3Qu2QFNt3KCMKl8EPaeSYrquHzGH9gdEBpqjMY7Aei/jdECyZ+akFBLBHRtX
E+pvX/WWstOMJTdI6DNqN1DV3RstH6uRAR2cVUssiivep6HkCX3gBpoAz8vqagDz
F7QVCQ5nEPe/m9tA9SYnLTWLn2efWo4vFHderQU4kHj0rRSab0HRZTkMHq/TETus
oL3BuQD4OJZOPs+p3NPBF5fbq07rlUv2uTIbxfh8B9NGa5rDGjmYRcr4yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvOPUnwAxFo9v249KXl57A1XOKPMB8GA1UdIwQY
MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt
NmJhYTNiNTQ4ZDIzLzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz
LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+Bgluh7
FHSr9ElwySEeAmB7epkAkZLoA/tKbBTVbUc7H1Z88cKW6ZwkX4SPmW2H46sOy1Pp
R/y7eZ3AF63O0mdBRsEsh99lO4ufBK/rITxyWb+YdkmlZizrQUaC0l6uPN9EboVU
o42iV61aqca46g6DuwEleUFLbJoSigctdRr7IB2Zl4xB+L7cY4PY95B5ZNXMezT+
Uepu+iaKQLefsMcRQ/hJqCgS13UqzuWOd2v6pAKLGl41SGHmAA0ZcQwhVQMfQtMp
BXhW9eQHD8XLxSxnLf8eIFlaOhlY77M3iYvLlSt/aejultan377fUttEtvUgILuc
Q9e6C8ngl3UcCQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:28:31 2026 by rpki-client