Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: wy/2c2scMIsAnhC9Sw+X0nUh/qScgS79WNZjtucr7og=
Subject key identifier: 79:3C:8C:7A:CE:40:08:92:53:B1:30:02:58:CE:B5:13:A3:63:F8:17
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 019FA974C45A6C8317A80205254521E451CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 13E9
Signing time: Tue 28 Jul 2026 16:00:29 +0000
Manifest this update: Tue 28 Jul 2026 16:00:29 +0000
Manifest next update: Wed 29 Jul 2026 16:00:29 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: X8djSqzsbp5QgNzuB3IHkvbZNZP5SMWzpT+guA10GUY=)
2: Y0tk_Sz2HsUVZBHhG38K63AXXoI.roa (hash: cuxsa3EYw8MedZ66NKK/P6ufrEIddCWT2hYIuyPu+h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:c4:5a:6c:83:17:a8:02:05:25:45:21:e4:51:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Jul 28 16:00:29 2026 GMT
Not After : Jul 29 16:00:29 2026 GMT
Subject: CN=793c8c7ace40089253b1300258ceb513a363f817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7e:2c:c2:b3:83:27:70:c4:5f:ab:ea:2d:77:
3f:68:48:0e:8f:98:bf:8a:b0:02:ef:a5:fc:69:e1:
6a:40:65:92:03:fb:22:91:0b:99:82:51:99:86:e0:
85:7e:4a:ad:1f:f7:bf:0c:d7:9a:02:75:2f:ff:86:
ac:a1:2a:a6:8f:87:c0:39:32:c7:bf:f2:ec:15:7a:
b2:39:c9:34:aa:89:60:3b:d2:95:07:79:a3:f6:9f:
e0:34:ed:dd:48:9a:80:fa:ef:95:57:50:9e:f0:95:
28:96:93:88:42:d8:1b:ca:c0:fd:f7:c8:fe:f7:6f:
15:68:25:ba:42:12:92:f5:4a:e0:2c:9d:64:12:98:
e8:cf:ab:13:eb:91:c9:86:8b:01:bd:01:e1:26:00:
6b:9a:13:c8:20:71:64:f4:98:9f:de:19:38:73:6b:
87:2b:73:ca:79:c2:a8:86:ce:eb:89:ea:9e:d9:a7:
ea:0b:3e:64:7d:a9:77:70:3a:e7:c8:6b:77:a9:8b:
c8:06:7d:4e:ab:ad:a2:43:92:d0:02:77:d1:4a:bf:
3a:90:94:6f:05:0f:88:6c:ea:96:de:77:08:70:c1:
c0:7c:63:59:7e:0d:57:cf:22:83:b6:fa:f0:c4:7e:
4d:ef:c9:13:e2:ca:e3:30:7b:b0:c4:52:01:e7:15:
a4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3C:8C:7A:CE:40:08:92:53:B1:30:02:58:CE:B5:13:A3:63:F8:17
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b1:b5:b0:af:a7:71:67:d5:fb:14:51:44:d1:03:87:bd:0a:
05:78:89:f2:de:b0:4f:c1:33:6e:9e:fe:6e:72:8b:fd:ec:b3:
cd:c1:b6:17:0a:8e:c9:c0:f5:de:0f:2a:41:f5:ee:b3:59:a5:
27:fa:2d:8d:a0:50:6b:cf:a9:8a:99:f8:1b:dd:00:c5:d0:6a:
d1:66:f5:83:0b:db:a2:38:63:21:b8:8f:08:b8:95:f6:b4:5e:
07:d2:60:47:39:ee:33:95:a7:45:36:b5:11:29:ed:e9:a4:7b:
63:00:80:f7:d5:e1:2b:39:0e:d2:38:db:d9:c0:a4:16:01:22:
39:8c:c4:58:6e:aa:8f:90:39:a5:f0:0f:38:db:8c:d3:bb:73:
d2:77:35:97:12:53:af:23:bb:67:6e:4a:f2:04:86:1a:d4:a9:
51:9d:0c:72:a3:5e:d6:46:90:09:80:55:22:e8:77:ce:31:d0:
f0:cb:68:3e:9a:0a:79:a1:ef:4e:18:c6:74:86:b0:a4:32:41:
12:52:58:3f:24:2f:8a:c0:26:fc:75:0b:0c:47:71:cb:6f:82:
6e:11:ad:8b:ed:36:c7:0a:42:12:9f:b7:c6:4f:8d:5e:e2:7b:
d7:d4:a6:c5:6c:c8:91:ae:4e:56:66:1a:8e:ab:f7:08:7c:2e:
b0:1f:81:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:57 2026 by rpki-client