Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: mc3KFq5bzyP2orhmc+ngwJLsgQJdblYdT9XUyWXYVMo=
Subject key identifier: E7:0A:47:1C:55:47:6A:AB:77:52:70:22:73:7B:00:AD:1A:2A:06:E5
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 01A0C7468E20D78E08053E1219AB8A8602CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 1508
Signing time: Tue 22 Sep 2026 04:01:24 +0000
Manifest this update: Tue 22 Sep 2026 04:01:24 +0000
Manifest next update: Wed 23 Sep 2026 04:01:24 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: S71w7dZx9C5zf05zagkJeuqoXAe9679zLV4geJAZ42A=)
2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
8: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:8e:20:d7:8e:08:05:3e:12:19:ab:8a:86:02:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Sep 22 04:01:24 2026 GMT
Not After : Sep 23 04:01:24 2026 GMT
Subject: CN=e70a471c55476aab77527022737b00ad1a2a06e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:78:17:2b:04:1a:f2:8d:0d:f3:17:a5:46:bb:
77:bc:80:eb:7d:8d:a6:7b:2b:1b:4a:f4:44:bb:e2:
3a:2c:84:45:00:00:67:8a:05:45:98:60:24:5f:62:
1d:af:67:f6:71:71:13:39:73:c8:a4:58:92:40:0c:
4e:88:28:d3:af:80:67:b0:93:e3:52:7a:ed:36:f5:
b0:4e:18:b5:96:a6:3e:37:71:66:5f:bf:47:85:8d:
18:1a:8f:34:79:ae:d6:86:1e:29:00:1a:ca:2b:aa:
9d:04:83:35:1f:e8:03:1c:6e:ca:e5:96:ff:c3:49:
07:bd:81:14:6d:79:c2:10:2f:10:86:35:bc:55:b1:
25:17:01:6a:aa:07:19:e8:1e:dc:fc:fc:75:c6:19:
ac:99:a2:68:5c:cb:e9:2e:5a:c9:83:1d:99:14:f9:
25:c5:31:fe:da:f0:c7:e4:6c:58:fa:3f:c7:c7:10:
33:1f:ab:0a:e1:9f:ac:f7:9d:f6:38:d8:df:5e:4c:
0d:36:92:71:04:d7:88:e7:b3:40:c2:b9:b8:b8:ff:
f1:ff:04:e3:8f:12:56:ed:06:6b:09:22:57:b6:82:
f1:97:41:d4:81:25:e9:ac:84:11:fd:ad:43:38:b0:
21:b1:d3:5f:fd:9e:2c:13:2a:b3:65:2a:18:ed:67:
02:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0A:47:1C:55:47:6A:AB:77:52:70:22:73:7B:00:AD:1A:2A:06:E5
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3c:9d:9c:10:a1:01:a5:2c:ee:7c:36:f6:0d:21:42:ca:48:
ab:35:74:a8:99:fa:0d:b6:08:a4:2e:f2:43:39:e7:45:53:94:
26:44:3b:8e:13:af:f1:c8:1b:fc:e1:25:71:b7:c5:96:3e:a2:
7b:c3:76:c2:3b:c8:f4:7c:31:87:0f:b2:7d:c7:e9:c2:19:fb:
df:7a:f5:b5:b8:d1:b5:2b:fe:ef:4c:bd:cf:6b:32:17:42:7e:
25:45:bd:c0:f5:12:f6:b5:f3:92:a3:dc:00:35:b1:19:ab:0a:
0e:ee:b3:87:86:8e:be:47:52:9c:77:a5:21:25:61:28:1e:3d:
b0:ff:7d:af:95:11:34:cc:e3:ad:db:98:b4:4b:d7:b3:bb:36:
4a:5a:bc:81:49:cb:31:65:b1:a0:bb:f1:71:6d:90:c5:f9:9e:
6a:14:ab:61:56:84:a3:80:bc:65:66:2f:f6:4c:00:08:05:67:
05:9d:4c:86:f4:e3:18:2e:95:80:b4:7e:8e:af:ca:b6:50:73:
4c:3c:6e:80:ef:2b:df:0d:1c:ea:37:09:3b:4a:86:d4:21:83:
f7:45:21:b5:a7:75:5d:8f:b2:62:a5:bc:f1:d6:0d:6e:e5:a7:
11:b6:3e:22:8d:6e:18:f1:b7:8a:a0:e7:5c:9d:8f:8c:1b:ba:
9b:43:27:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:01:08 2026 by rpki-client