Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: XoQQP8uXn/GxnxmvCYcmTpIiH9kMewwDF5DYHb5qoCE=
Subject key identifier: EC:43:56:12:87:AE:4C:1C:88:DC:BA:83:F5:3B:59:D5:04:B8:90:F5
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 019D39AF77B2A3676F268C830D9948FD37F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 12A6
Signing time: Sun 29 Mar 2026 13:01:33 +0000
Manifest this update: Sun 29 Mar 2026 13:01:33 +0000
Manifest next update: Mon 30 Mar 2026 13:01:33 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: OrmQRNlxGKDbZeajeOc+OQPzDLFev5HCyipMh8TKGhE=)
2: Y0tk_Sz2HsUVZBHhG38K63AXXoI.roa (hash: cuxsa3EYw8MedZ66NKK/P6ufrEIddCWT2hYIuyPu+h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:77:b2:a3:67:6f:26:8c:83:0d:99:48:fd:37:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Mar 29 13:01:33 2026 GMT
Not After : Mar 30 13:01:33 2026 GMT
Subject: CN=ec43561287ae4c1c88dcba83f53b59d504b890f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:37:a4:f6:f7:c4:4c:b5:90:58:91:e6:20:da:
5e:55:10:22:4f:55:a5:98:72:77:b0:05:44:70:c6:
3a:81:48:51:20:c5:5e:1e:2b:b7:df:1a:8c:a4:72:
78:18:33:2d:cb:42:83:7c:d4:86:54:f7:fe:72:31:
06:7c:37:94:b0:25:ef:79:7c:6c:27:24:fe:aa:d6:
e0:67:8e:6f:dd:fd:43:7c:33:98:8e:81:99:b8:5f:
95:d4:6d:7b:9f:48:af:34:8e:ae:ff:29:9f:1f:7d:
dc:e9:fa:65:b2:9f:3a:5c:f3:5d:d4:e7:1e:a8:49:
78:ce:1a:43:15:af:d9:72:57:16:ed:0b:47:81:4f:
e9:d1:56:1c:ea:31:de:a9:5d:d6:4a:29:a3:58:06:
46:f3:73:cb:9d:96:4c:1b:0a:b6:75:ac:7f:7e:d0:
86:d9:4d:3c:9a:70:51:ec:5b:9d:78:12:f8:b3:dd:
87:0f:17:7e:12:e9:fc:47:74:75:db:8c:8a:ba:87:
9f:0d:1c:79:09:23:72:79:fe:97:dc:ee:8c:c5:0b:
41:7a:a0:fc:61:b8:56:7f:f1:16:4b:a0:d6:9c:fe:
eb:55:3f:a4:43:47:d9:1e:f5:56:bd:e2:1a:36:e2:
b5:5c:55:c1:8b:04:92:90:52:19:bf:d1:76:b4:e9:
a8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:43:56:12:87:AE:4C:1C:88:DC:BA:83:F5:3B:59:D5:04:B8:90:F5
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:01:43:5b:1a:ec:de:e4:8d:c5:54:8e:e7:91:5e:31:58:87:
22:da:4f:de:ad:6b:88:21:cf:da:4a:f1:c4:cd:9a:05:3f:3b:
d4:68:34:dc:84:6d:29:cd:07:a7:a4:10:d5:e0:6b:b3:ee:e3:
81:18:ff:01:17:c4:8f:5c:fe:40:80:3c:39:3b:39:08:10:35:
e0:bd:82:67:d8:9d:60:c5:b4:3e:2b:b5:47:f6:ab:79:5e:cc:
8e:d0:66:9a:48:62:58:96:27:26:02:41:43:c6:bd:73:35:a9:
07:25:48:eb:ce:5c:66:34:30:a9:93:b5:62:5e:49:30:5e:44:
5f:49:04:d1:b7:e4:0b:1e:e9:cb:ab:62:bb:cb:f6:d0:9c:41:
ba:59:60:7b:3a:67:11:0a:4b:6e:f7:58:4a:91:78:5a:17:f9:
20:6a:52:90:dd:81:d9:57:e0:0f:b7:4f:0e:c2:25:c3:6e:f9:
2b:6d:bb:b4:88:ee:11:6c:6d:f6:63:fa:4e:54:b0:0a:f3:b5:
f9:f0:0a:0f:3f:2d:05:ab:46:4b:39:1f:60:5e:97:18:60:11:
54:28:71:40:8a:24:71:db:41:42:2d:f8:9c:49:93:40:4e:16:
b0:bc:bc:ca:c1:9f:66:61:f2:71:1b:d9:b4:da:b0:60:c5:b3:
6e:82:ea:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:49:21 2026 by rpki-client