Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
File: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft (raw, json)
Hash identifier: xuKl0LCq7FFH/o4DHpQLXrloU//Eyfacs4k60HE8nNc=
Subject key identifier: A5:2F:A9:AF:AF:1C:71:60:D6:D3:50:1D:90:1B:7B:F7:63:8E:36:53
Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Certificate serial: 019EBFFEF679197B18C062F8B783D1CA7735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
Manifest number: 13FB
Signing time: Sat 13 Jun 2026 08:00:17 +0000
Manifest this update: Sat 13 Jun 2026 08:00:17 +0000
Manifest next update: Sun 14 Jun 2026 08:00:17 +0000
Files and hashes: 1: 3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl (hash: 1m1rTyt791tPfT8f1f9/GCf7gSpwmJlNP1Fw/5mof1w=)
2: S5sg_JlC0ToZAwD4YEM_73rgGFY.roa (hash: YmhZo0md3pLhwBYxjKpd51EeewgehxjWh98S7qLqhTU=)
3: XGnz7Ansag-6tn1Ax5AEIWjkH0k.roa (hash: P+lUqqOncUwG4igPlcuG3jcNQkp5+vWR8T8xxSGsXtg=)
4: jO4uGdd9-tiCdqz3wQJyr1ZLSQ0.roa (hash: vTyq8JseauvWsZCZMcTy6WeJTS1UZJLc7jmu8Zih6vk=)
5: m58fVmftPtpehXrDeg0VZld7Fjc.roa (hash: P5jHj3qDDQBwS1YKqDjpVsnHwhp5v7H62jx6Jxq9ack=)
6: pRq-mBjJwdF2cbP9BZmw1hU12mE.roa (hash: KY6SE7Y9++J/NYToQlEPgzCa3AZOXftv28D93orT5Jc=)
7: t0APLAezC2-JJ39E7QcTC5DxFWk.roa (hash: q32HsFk8dVR1t8xud3ll6yR/zRlQi++9gPr7gE99dRk=)
8: uAj3CtbzCpXCLuuM_PucbGSgKxc.roa (hash: dHv8GawOTN4Q04OIxQpN0YyPcGSkeXeJgAk49vv4oMg=)
9: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (hash: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:fe:f6:79:19:7b:18:c0:62:f8:b7:83:d1:ca:77:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7
Validity
Not Before: Jun 13 08:00:17 2026 GMT
Not After : Jun 14 08:00:17 2026 GMT
Subject: CN=a52fa9afaf1c7160d6d3501d901b7bf7638e3653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a8:2d:c1:fa:d1:5e:a0:f6:c5:0c:ba:ee:ce:
55:3b:b4:1f:67:ce:4e:5d:20:ea:bd:3f:16:99:4b:
38:61:5d:48:06:2b:a1:d0:61:d9:5a:15:74:2a:43:
57:b9:98:32:1f:67:43:da:62:7d:7c:76:fd:b0:2d:
41:cd:9a:e6:03:c3:c4:42:12:06:65:2f:fa:f5:b2:
cf:34:ab:54:e5:eb:fc:3c:8c:b7:b3:26:57:1f:b4:
68:c8:c9:f3:c5:09:37:6c:f2:11:04:0a:6e:e4:ba:
41:1c:3f:b6:d1:31:47:53:46:8f:2b:0f:4c:c1:21:
d6:38:61:09:bd:49:c7:51:74:7f:7b:0f:52:ce:62:
e0:e0:6f:e8:05:dd:b6:44:64:82:bc:0f:15:bd:14:
d7:4f:6d:0d:31:87:5b:cb:a4:1f:20:cf:85:70:62:
dc:9c:8e:19:80:0f:14:cd:74:80:5f:9f:b4:a4:18:
d2:84:38:f4:34:16:48:bf:c3:ff:81:82:75:39:97:
6b:47:6c:58:72:2b:8c:9c:45:90:19:5e:cb:85:8b:
92:39:07:1e:ac:96:66:bb:5e:da:c6:b4:13:3e:c1:
5e:b8:b0:7c:58:6e:1f:c8:01:24:d4:39:ac:99:61:
7a:dd:62:85:af:18:8e:a4:11:73:5f:52:7a:37:92:
4e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2F:A9:AF:AF:1C:71:60:D6:D3:50:1D:90:1B:7B:F7:63:8E:36:53
X509v3 Authority Key Identifier:
keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a5:1a:6e:20:42:0e:c6:0c:1e:19:73:75:8d:27:10:b8:53:
71:26:f5:59:bc:61:4c:02:31:2c:88:27:88:2e:c6:05:76:80:
21:fa:ab:48:f3:19:b1:a5:7b:5a:23:35:3c:b4:75:bd:15:23:
7a:29:5b:37:bc:49:26:e8:45:14:da:19:83:bb:6e:e2:8f:18:
ba:4a:90:1c:fb:ef:3c:5a:ab:c2:dc:a0:3e:cf:0f:44:ac:24:
71:16:59:95:9b:61:29:14:68:2a:19:19:ba:28:30:f3:ea:2f:
06:84:7f:eb:30:85:20:f1:50:02:00:47:5f:a6:c5:2c:81:0a:
14:8e:81:63:c4:41:42:86:10:b2:4b:f0:a4:f3:9d:a0:36:ad:
27:14:57:63:64:d9:53:e4:e2:f1:cc:a7:77:8a:a8:36:2b:15:
26:f4:f1:78:77:6c:31:3e:72:37:56:b1:2b:b0:8c:0a:84:a5:
f5:46:9c:8c:97:38:01:79:67:b7:67:b0:33:71:5e:73:46:30:
fe:6d:6c:04:bc:eb:b5:92:ce:21:33:2b:59:87:c0:db:b1:32:
72:9e:a5:49:2e:e1:59:a0:34:ea:54:f0:82:08:0e:ea:af:c4:
06:62:de:7e:5d:97:80:26:73:e8:80:58:55:a7:23:c6:d0:93:
b3:1f:d5:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6//vZ5GXsYwGL4t4PRync1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3
NGNjYjcwHhcNMjYwNjEzMDgwMDE3WhcNMjYwNjE0MDgwMDE3WjAzMTEwLwYDVQQD
EyhhNTJmYTlhZmFmMWM3MTYwZDZkMzUwMWQ5MDFiN2JmNzYzOGUzNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqgtwfrRXqD2xQy67s5VO7QfZ85O
XSDqvT8WmUs4YV1IBiuh0GHZWhV0KkNXuZgyH2dD2mJ9fHb9sC1BzZrmA8PEQhIG
ZS/69bLPNKtU5ev8PIy3syZXH7RoyMnzxQk3bPIRBApu5LpBHD+20TFHU0aPKw9M
wSHWOGEJvUnHUXR/ew9SzmLg4G/oBd22RGSCvA8VvRTXT20NMYdby6QfIM+FcGLc
nI4ZgA8UzXSAX5+0pBjShDj0NBZIv8P/gYJ1OZdrR2xYciuMnEWQGV7LhYuSOQce
rJZmu17axrQTPsFeuLB8WG4fyAEk1DmsmWF63WKFrxiOpBFzX1J6N5JOxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKUvqa+vHHFg1tNQHZAbe/djjjZTMB8GA1UdIwQY
MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt
NmJhYTNiNTQ4ZDIzLzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz
LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6UabiBC
DsYMHhlzdY0nELhTcSb1WbxhTAIxLIgniC7GBXaAIfqrSPMZsaV7WiM1PLR1vRUj
eilbN7xJJuhFFNoZg7tu4o8YukqQHPvvPFqrwtygPs8PRKwkcRZZlZthKRRoKhkZ
uigw8+ovBoR/6zCFIPFQAgBHX6bFLIEKFI6BY8RBQoYQskvwpPOdoDatJxRXY2TZ
U+Ti8cynd4qoNisVJvTxeHdsMT5yN1axK7CMCoSl9UacjJc4AXlnt2ewM3Fec0Yw
/m1sBLzrtZLOITMrWYfA27Eycp6lSS7hWaA06lTwgggO6q/EBmLefl2XgCZz6IBY
VacjxtCTsx/Vxw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:24:06 2026 by rpki-client