Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: FU0bK44DYZ62zTpljvEqICsfgwKUkVrjBy8J0SEvVeA=
Subject key identifier: 6B:79:30:C8:A7:34:1A:A3:9A:D6:72:DB:E2:B8:6D:7C:09:3F:38:14
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 01A0CEFF94F117A2F557DE58CC8B2747F23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 150C
Signing time: Wed 23 Sep 2026 16:00:51 +0000
Manifest this update: Wed 23 Sep 2026 16:00:51 +0000
Manifest next update: Thu 24 Sep 2026 16:00:51 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: szt74T4U5Y60edi7XWUbSFeKmlBxlcG2aSBHrOaoY4M=)
2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
8: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:94:f1:17:a2:f5:57:de:58:cc:8b:27:47:f2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Sep 23 16:00:51 2026 GMT
Not After : Sep 24 16:00:51 2026 GMT
Subject: CN=6b7930c8a7341aa39ad672dbe2b86d7c093f3814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:be:2f:61:23:a3:92:e4:ed:1a:cd:93:a5:
1c:fe:2d:57:e0:6e:1e:87:8b:b2:e8:d2:3d:a0:03:
e4:cb:05:db:a3:63:d0:9f:ec:59:0e:97:7e:f3:af:
96:55:64:25:5f:f0:d3:b6:3a:c9:b5:a8:46:88:3c:
d0:ce:19:45:53:ab:76:ef:f1:6e:47:95:12:2e:9b:
34:22:40:b4:84:2c:69:73:34:10:bb:d6:52:fb:36:
92:b2:5f:e7:35:6f:6f:39:0e:3d:c9:77:f6:a9:38:
f8:b6:db:58:b4:59:4c:62:27:fb:b2:8b:af:fe:64:
92:37:5a:7c:3a:68:97:d9:1d:16:af:c0:0a:18:04:
12:c7:5d:ed:1f:6f:a8:4c:05:ca:7d:c8:59:7e:5d:
8b:52:d5:81:ac:98:79:b1:38:90:6b:ae:7b:c4:10:
bd:c9:ed:4a:15:5a:a0:d5:f1:dc:54:c7:7f:13:3c:
61:14:5c:ce:ca:b7:06:f2:db:ab:b3:c3:b1:e1:01:
65:c7:62:3e:5b:3b:72:33:51:73:fc:9f:0f:c1:46:
74:69:b8:d7:81:a5:f5:fa:47:50:c5:c4:6b:a2:b9:
14:23:b5:16:7a:b5:dc:ae:bb:82:cb:1e:55:62:e0:
11:80:fc:a1:2c:65:54:8c:13:0e:fa:2e:59:2f:a4:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:79:30:C8:A7:34:1A:A3:9A:D6:72:DB:E2:B8:6D:7C:09:3F:38:14
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5a:54:aa:fc:9e:60:cc:45:18:1a:76:16:56:36:8b:16:2e:
01:1b:ba:e8:a8:d5:f2:24:79:3f:8d:03:38:4d:7a:1f:c0:ee:
4b:56:49:fb:f1:38:59:80:35:00:f1:b2:bb:94:45:33:ef:4d:
9d:be:ca:26:c6:87:f7:41:a8:7b:1d:fe:df:79:35:b9:eb:dd:
6c:2e:c4:e7:b2:bc:cd:9b:42:18:fd:49:3b:54:36:3b:b5:81:
bc:91:64:69:d0:52:2b:04:39:93:97:60:df:6c:3b:20:54:2c:
31:bf:33:fb:fe:e9:10:5b:d5:74:b4:72:4b:60:53:df:20:aa:
b2:c5:2c:3c:70:96:ac:5b:a1:12:b2:b7:9d:d3:51:1f:e3:30:
c1:e6:12:79:f7:9d:2f:82:06:25:a2:88:95:76:0c:05:82:e7:
91:cd:57:6e:cc:f0:ab:50:dd:06:fb:43:47:1a:16:65:c0:b8:
ce:b3:87:19:9b:d6:b5:05:b1:10:ed:a3:a4:4b:58:f4:d9:f1:
d1:86:ec:4c:4b:dd:19:8a:03:7f:7f:4f:e3:fc:80:07:95:38:
ca:05:7a:17:35:df:fe:1f:4d:33:42:5e:28:d0:43:78:a6:a7:
40:7f:3d:df:81:7e:21:fc:7c:bd:ac:dc:61:fe:c3:79:87:86:
b3:45:ed:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:44:52 2026 by rpki-client