Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: ghf7XI4b8oBfRPizgZ/nI2tCHHEbVUEKUUc/WfMR21A=
Subject key identifier: 1F:BF:2B:71:9D:3D:85:94:43:89:1F:27:58:11:E1:AB:0A:98:5C:D4
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019FA9ABDC4003AEB523A51BA05360296CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 1474
Signing time: Tue 28 Jul 2026 17:00:40 +0000
Manifest this update: Tue 28 Jul 2026 17:00:40 +0000
Manifest next update: Wed 29 Jul 2026 17:00:40 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: fg/3mYoT7O8gpM2F3GAuFV5T8Yi17YlPIexZpTaVdPw=)
2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
8: uAj3CtbzCpXCLuuM_PucbGSgKxc.roa (hash: dHv8GawOTN4Q04OIxQpN0YyPcGSkeXeJgAk49vv4oMg=)
9: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:dc:40:03:ae:b5:23:a5:1b:a0:53:60:29:6c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Jul 28 17:00:40 2026 GMT
Not After : Jul 29 17:00:40 2026 GMT
Subject: CN=1fbf2b719d3d859443891f275811e1ab0a985cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e5:02:3a:74:30:5a:ac:11:a4:35:fc:1e:43:
6a:81:f8:1d:2b:c4:21:2d:6f:ce:93:88:1b:e0:d0:
ac:2c:02:c8:1a:10:0f:cc:91:73:20:6b:ba:a1:da:
79:9c:55:d6:36:ac:60:0a:74:f3:4f:a9:81:20:5c:
fe:53:1c:6f:93:cc:f9:5e:df:a8:9c:08:8c:7c:5f:
61:1f:51:5f:a5:73:b7:4b:10:37:7c:e8:f4:08:40:
be:86:d6:ba:cc:70:cc:59:1a:50:d6:21:03:fc:0e:
94:a8:d2:9b:69:0e:82:67:60:ed:96:45:b9:b6:66:
59:56:96:86:6a:81:34:ec:c2:07:ea:e1:79:46:56:
47:85:95:28:c7:5c:3f:fd:ee:c7:7c:ff:af:64:31:
69:f7:4e:a0:e3:3f:85:9f:7a:5f:b2:59:c9:49:db:
8a:45:55:1c:a3:c6:a5:9f:99:c8:37:21:a9:97:51:
2b:4f:42:08:4e:82:f5:6e:c7:ee:54:93:2f:74:c9:
4b:ac:4c:09:1d:b4:c7:22:1d:98:86:da:65:67:29:
c9:1a:18:80:6c:ad:5e:34:ce:6a:d3:f9:8b:39:30:
70:73:29:fa:b3:7a:8d:c5:15:3e:99:bf:01:40:19:
47:80:5c:bc:60:f0:08:a4:89:4c:ba:76:40:10:3c:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BF:2B:71:9D:3D:85:94:43:89:1F:27:58:11:E1:AB:0A:98:5C:D4
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:83:e1:31:61:fe:1b:1d:86:d7:d3:13:34:fe:c5:76:aa:0f:
c9:4a:ed:f7:a8:1a:7a:38:aa:34:25:d2:bf:41:b0:a2:10:c5:
65:57:0b:10:21:90:af:0b:b4:69:61:80:41:e5:c8:7b:78:f6:
4b:23:c0:81:5a:e4:22:bc:5b:3d:bf:28:90:df:ee:17:09:43:
42:1c:d7:9b:5f:c9:d4:e9:bf:7c:3b:61:09:f0:94:7d:7b:9a:
d0:24:f7:54:d3:22:cc:f9:a3:18:15:c9:3f:23:6b:33:14:90:
c2:37:95:1a:3c:4f:a3:b4:03:a2:9d:bf:5f:5b:c3:17:c5:74:
48:87:15:29:59:29:13:2f:7a:63:5b:ef:74:db:61:c1:04:fc:
3b:11:b8:88:b0:09:49:bd:1c:c1:f9:c7:df:a5:5f:a3:96:bd:
fc:52:ae:09:76:05:3e:2c:c6:0a:48:b2:59:2d:a6:ef:1e:2e:
af:a1:b9:c8:80:d2:87:13:c5:f9:43:3b:59:58:42:3d:54:7c:
9c:3e:76:ab:69:47:23:67:d3:83:ad:02:65:c0:05:a5:f8:af:
e0:4e:21:61:a3:a8:98:e2:5f:2c:72:b3:47:2a:0f:c4:fc:e9:
aa:1f:b7:7c:6a:94:c7:d1:53:53:de:76:69:f3:8f:af:80:28:
7b:af:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:08 2026 by rpki-client