Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: SEJ4n3cgdwba1hqLrJklJoTXwukg6nfmEeV1lUngviQ=
Subject key identifier: 1E:89:30:36:74:5F:10:DF:5D:F5:64:7B:82:87:74:62:5A:E0:46:40
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 01A13DEEE4B9CB15B32F8A35BD07404FC964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 14BC
Signing time: Thu 15 Oct 2026 05:00:28 +0000
Manifest this update: Thu 15 Oct 2026 05:00:28 +0000
Manifest next update: Fri 16 Oct 2026 05:00:28 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: wvbDGUTwNBAcVe3DWEBw+z4b1qL7xcukq3hcjmPSZos=)
2: EsP0TnwcIR_tp36lre6DQ7jc9Lc.roa (hash: Pj/MNI9vX2PM78P8r4xx/BcMGeXmStJFcOh545nj9ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:e4:b9:cb:15:b3:2f:8a:35:bd:07:40:4f:c9:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Oct 15 05:00:28 2026 GMT
Not After : Oct 16 05:00:28 2026 GMT
Subject: CN=1e893036745f10df5df5647b828774625ae04640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:55:7a:bc:41:64:bd:be:d2:6b:dd:bc:29:
d9:3e:01:92:7c:fb:39:46:39:83:86:04:26:db:3d:
9d:6c:48:c9:00:ca:df:92:0f:83:6d:7a:e8:0d:5e:
98:dc:a7:cf:cd:09:42:e6:23:01:a3:3c:6a:44:d3:
1d:d4:c1:19:3e:4a:51:20:d3:d1:47:c3:48:a1:34:
e1:38:54:1e:b4:f9:b3:2a:a2:1b:cf:da:4f:60:5a:
63:68:4f:39:d0:4e:21:a4:80:62:20:0f:16:1c:b0:
bb:08:ec:20:0d:c0:49:9c:64:6a:3c:1e:71:60:5b:
dd:52:79:4b:39:f7:4f:7b:2d:ed:b8:3c:0e:16:a8:
b4:b8:cb:42:3b:dc:eb:b8:f0:a2:46:70:6d:e3:cb:
8b:6a:e5:20:92:d2:ff:40:79:a5:fd:10:d1:0b:30:
33:a7:5c:62:ba:c2:6c:81:c6:d1:dc:4f:fa:f3:b5:
18:31:27:dc:ba:97:f9:78:cf:27:0c:9e:42:e9:5a:
63:6c:21:08:9f:8f:69:ce:d7:68:81:f6:a1:6e:b4:
9e:4c:42:4c:10:68:23:6f:a6:1f:cf:87:f5:d3:97:
2f:55:ff:3b:88:6b:90:4f:8c:45:02:74:bb:c0:ff:
7e:45:62:0b:f3:91:00:ed:f5:6c:d8:5e:fd:1e:1b:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:89:30:36:74:5F:10:DF:5D:F5:64:7B:82:87:74:62:5A:E0:46:40
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c6:d4:73:24:48:19:35:6e:75:0f:9a:ef:b9:08:ad:10:94:
be:56:01:c8:1d:ad:75:61:76:13:7e:c7:ed:f2:d4:1d:2b:1e:
0a:35:66:0e:1f:09:82:07:fe:26:1f:e0:83:22:ec:b6:f3:d2:
8c:20:09:63:2b:69:b8:c5:a1:2d:34:cd:fd:0e:19:84:28:04:
c0:1c:db:fa:d1:8f:53:fe:c7:01:dd:cc:45:e7:ac:dd:2c:a4:
3a:94:be:8d:d8:20:0f:31:23:f8:f8:75:84:81:10:b4:99:c7:
3c:22:dc:65:f1:e6:ff:eb:d6:47:40:6a:af:03:cf:2b:6d:c3:
8e:f6:da:f3:c7:54:80:5c:96:ff:99:dc:1e:bf:38:34:4f:fa:
c8:6c:53:e5:93:dd:56:cc:16:74:c8:7e:f0:56:c7:14:46:2c:
0d:ba:5e:f5:05:62:b7:f7:95:0d:0e:8d:e3:07:0e:44:30:d7:
ac:37:8e:5e:b8:be:10:bc:88:da:62:f8:05:aa:ce:4f:ba:80:
fb:12:5b:b7:40:50:a7:90:db:84:c0:57:51:48:03:14:ac:23:
47:b3:be:7f:67:e6:24:0f:ad:81:a3:2c:a4:51:34:a6:eb:64:
df:55:14:49:43:cf:d3:d1:cc:06:22:4a:01:8d:f4:fb:21:e2:
27:85:c9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:28 2026 by rpki-client