
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: snEU8G6WXhMzE70Y+/Gu5TY+kEapcXgWvUmsF0EBYfc=
Subject key identifier: CB:A5:AA:0C:1F:D8:AB:58:BE:7E:63:C8:A2:E7:F7:A3:8E:D3:45:14
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 019EBFC8FD95416EC390696A9D4BAED19C25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 1370
Signing time: Sat 13 Jun 2026 07:01:20 +0000
Manifest this update: Sat 13 Jun 2026 07:01:20 +0000
Manifest next update: Sun 14 Jun 2026 07:01:20 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: j7ypTXk8//TMdZdxof8dvxIS/Y8g8xI9WKlg8S7Ehy4=)
2: Y0tk_Sz2HsUVZBHhG38K63AXXoI.roa (hash: cuxsa3EYw8MedZ66NKK/P6ufrEIddCWT2hYIuyPu+h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:fd:95:41:6e:c3:90:69:6a:9d:4b:ae:d1:9c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Jun 13 07:01:20 2026 GMT
Not After : Jun 14 07:01:20 2026 GMT
Subject: CN=cba5aa0c1fd8ab58be7e63c8a2e7f7a38ed34514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:06:3d:67:9f:c5:27:d6:03:c7:e2:8e:66:ee:
5b:3a:40:1f:09:1c:a6:cc:4a:6d:d3:67:f4:3f:c9:
4e:8a:20:e0:e7:db:d3:6e:f2:30:c9:22:4d:af:1c:
be:e4:9d:88:c6:ec:43:32:57:e5:ca:45:0b:ef:d9:
62:a2:7e:8b:24:de:29:f2:98:2f:91:cb:2c:5b:c3:
70:8e:5e:1e:fd:bb:d3:c2:5b:44:74:52:63:2d:c1:
ef:14:fd:a1:41:dd:e8:4a:05:9b:64:19:31:da:c1:
4f:81:45:04:d4:76:12:2f:6a:62:e4:3c:a6:cd:af:
21:5a:cc:2b:7a:df:97:39:6e:06:ce:4f:d5:0c:16:
e9:7b:e1:6f:78:ce:14:4d:3d:9a:12:27:99:3c:04:
bb:b6:e7:99:7d:02:47:9a:9f:27:db:a8:40:44:38:
b8:e0:35:62:66:88:57:52:e1:50:ec:89:8e:68:d4:
6d:27:33:57:54:77:d0:ea:07:9f:af:ea:d1:18:f6:
05:b5:09:fe:d5:e8:3d:2c:be:8b:23:6e:bc:31:5a:
59:d3:70:74:43:66:41:7f:fc:b6:35:c9:7d:8e:1f:
5d:23:bb:01:8e:f4:4d:cc:bc:63:70:01:7a:cf:65:
fa:39:40:8d:31:92:95:92:0b:1d:cf:c8:d2:33:40:
52:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A5:AA:0C:1F:D8:AB:58:BE:7E:63:C8:A2:E7:F7:A3:8E:D3:45:14
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a4:3e:26:79:7c:d6:cd:fc:ef:46:6c:e9:b3:ff:04:7b:e9:
60:9d:ea:5d:7a:3a:d3:9a:c4:41:c6:65:57:9f:5f:d3:dd:26:
d9:95:a1:63:44:c9:88:4f:95:df:85:b9:44:fa:5b:2d:7c:d3:
22:dd:01:d1:c2:4b:08:82:22:1b:20:e0:ba:3b:3f:97:a7:cc:
5a:98:a5:d4:7a:59:df:d3:87:bc:0a:fe:44:42:cb:72:71:88:
a4:61:da:37:89:a6:0d:06:dc:34:2b:2d:8c:b2:1a:b9:08:fb:
f7:05:a2:bc:4d:95:4a:ab:5e:a6:66:83:62:65:72:56:59:dd:
e8:99:20:cd:af:04:34:6d:23:19:ad:52:af:ab:53:d2:c0:28:
4d:a7:a9:de:e2:fe:53:a0:06:71:47:f8:b8:2a:cf:98:88:8b:
4e:8a:d8:60:f9:42:7f:78:e1:48:a0:62:ac:42:73:42:07:33:
6a:94:8d:78:bb:af:89:f9:49:87:84:f7:3c:f2:6a:62:46:4c:
ed:7b:83:09:97:6a:3c:7c:69:c0:31:55:71:43:cf:93:ef:5e:
22:30:9a:fd:fc:3e:2f:f1:f8:58:c1:69:bf:31:ef:21:3a:f3:
c2:7e:dc:39:7f:de:0d:56:ad:25:10:20:3f:72:6d:15:bc:93:
ff:94:c0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:54:32 2026 by rpki-client