Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier: CpE8Ba6iCuaTDIz6TdAuyzFTokRJ+xhx+DM4Fn7WIXY=
Subject key identifier: E8:DC:68:64:7F:66:50:A2:B3:35:B6:D2:08:2B:B5:41:D7:61:E9:7E
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 019D37F7805FA77A72358E1F880CB54DB02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number: 1406
Signing time: Sun 29 Mar 2026 05:01:00 +0000
Manifest this update: Sun 29 Mar 2026 05:01:00 +0000
Manifest next update: Mon 30 Mar 2026 05:01:00 +0000
Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: uUVBYvQ/1B0wStq5Cq6QQE23agr+1TD/ri3DadOVDtg=)
2: fy5Vxpj8Cp8uUIkOIqYsyPIJp9o.roa (hash: dPwdrijrUmXn5KvoJ9i354gs58IETiu1sAxzaL3DK6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:80:5f:a7:7a:72:35:8e:1f:88:0c:b5:4d:b0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Mar 29 05:01:00 2026 GMT
Not After : Mar 30 05:01:00 2026 GMT
Subject: CN=e8dc68647f6650a2b335b6d2082bb541d761e97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:67:c5:94:7e:78:b4:60:f1:15:31:61:5a:20:
87:58:d4:aa:95:bf:08:15:b2:ec:f6:dc:96:54:72:
58:c2:a0:8e:f2:a7:3e:a5:9a:de:92:49:0b:99:a4:
92:1b:87:6b:04:8e:f8:ae:9e:2e:43:a1:a8:59:6e:
d1:53:81:53:b1:02:74:ab:e5:9b:2c:02:47:a7:af:
5d:b6:85:6c:56:a3:cd:c1:6f:52:8c:59:71:61:ec:
8c:f6:0c:52:3a:3c:eb:bf:b4:53:42:27:c3:0c:55:
11:d9:89:e2:a5:55:24:e5:58:5c:72:a8:6b:21:40:
4b:fd:bd:cb:c0:ff:58:8b:75:28:bb:39:b8:c8:0a:
38:8d:85:08:0c:ad:09:2e:bd:1f:bb:bc:2b:e2:de:
8b:4c:91:8a:a5:50:fd:5b:4c:9a:5a:ea:f2:64:6f:
62:ff:53:25:64:94:39:ca:2e:ef:b3:58:19:0c:a6:
47:84:45:2a:ca:e1:d1:35:4b:b8:b5:15:6d:19:a3:
de:a7:58:b4:bf:22:54:dc:22:7a:ea:09:5c:98:59:
cc:50:4a:9a:0a:a0:bb:1c:7a:48:55:49:d2:82:ac:
14:10:8c:e7:88:2e:71:6b:de:f2:70:63:95:f9:69:
50:4e:e7:99:d6:6c:86:bc:9b:e0:96:c0:c4:5c:e3:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:DC:68:64:7F:66:50:A2:B3:35:B6:D2:08:2B:B5:41:D7:61:E9:7E
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bf:75:9f:ca:55:af:cc:6f:4b:1f:69:b7:17:fc:3b:78:49:
13:ca:1b:f4:16:9d:8e:86:8a:a3:40:d4:f7:da:39:37:12:fe:
06:25:86:c9:f1:6a:43:e8:07:78:f7:1a:3e:92:c4:1f:41:1d:
4e:3f:04:38:6f:0a:ca:02:86:38:97:31:6a:07:ca:d2:bc:1f:
de:1f:38:5c:a9:89:82:26:68:d5:70:73:79:87:24:54:d8:3c:
62:07:e2:01:36:03:39:a8:61:63:14:94:d9:b7:b8:48:8a:d3:
7c:5b:60:30:cb:8a:9e:15:e9:30:e8:dd:78:42:b0:bf:13:df:
b4:1e:e5:48:63:e4:6d:ac:33:db:33:85:8a:e4:de:24:71:f5:
c2:b0:1f:c6:55:87:4b:5a:37:ed:de:f5:1f:de:ae:9f:a4:0b:
f9:39:93:57:a3:3b:25:b1:32:b0:31:a1:cf:7a:bb:a2:55:aa:
3d:dc:23:01:da:3c:09:b0:9f:5b:a6:11:b1:0f:d1:23:b2:c5:
7e:83:e6:81:2b:20:c5:a3:84:0f:7a:f8:ea:01:8a:c6:89:9b:
8e:59:36:13:8a:c4:fc:09:f9:fe:ff:3d:d6:73:fb:9d:ca:41:
5f:f4:ac:bb:60:6a:7a:fa:a9:61:fd:11:ab:43:ed:0e:6c:61:
96:74:91:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:10 2026 by rpki-client