Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: eF+IUU7tdtGHeHbdkv78siYc/qAOEinfECtETC4gK2A=
Subject key identifier: 65:31:55:04:20:DA:A9:0C:A4:E7:57:41:9C:70:0A:7F:89:44:FA:5B
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 019DA3E653BFCF4840CDFEF5D53D6A7BB320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 12DD
Signing time: Sun 19 Apr 2026 04:01:13 +0000
Manifest this update: Sun 19 Apr 2026 04:01:13 +0000
Manifest next update: Mon 20 Apr 2026 04:01:13 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: r5tlY5yxPjjz6LhnhWdnyL9wvv4T/Fr8NpRr+al032E=)
2: Y0tk_Sz2HsUVZBHhG38K63AXXoI.roa (hash: cuxsa3EYw8MedZ66NKK/P6ufrEIddCWT2hYIuyPu+h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:53:bf:cf:48:40:cd:fe:f5:d5:3d:6a:7b:b3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Apr 19 04:01:13 2026 GMT
Not After : Apr 20 04:01:13 2026 GMT
Subject: CN=6531550420daa90ca4e757419c700a7f8944fa5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:aa:21:99:d2:45:06:ae:2b:67:69:78:d2:
db:41:2d:b9:b2:ef:ba:0f:84:bd:45:1d:f1:f7:54:
08:2a:d6:6a:d7:bf:89:bd:05:02:ed:06:53:4a:88:
c1:7e:19:1c:dd:5b:57:6e:bd:a3:94:8b:96:af:29:
1c:34:f9:c5:82:df:d0:af:8e:8a:0c:e7:d6:e3:6d:
77:63:f6:68:28:7b:b6:81:c8:d8:c3:9a:77:2d:ca:
62:d4:a4:d0:9d:8b:f1:ff:dc:2a:f6:64:80:af:d2:
07:3f:0b:9c:67:77:23:10:55:ea:ff:35:1c:a5:b5:
6f:b8:5b:de:bb:34:0f:cc:51:83:55:e4:a3:58:25:
fa:e0:be:c2:07:fe:a8:02:c7:a2:be:0e:e7:8b:27:
10:35:ba:d8:e1:67:dd:18:70:2a:5c:79:0e:93:83:
53:d7:97:10:c7:6d:5f:f6:5b:c7:81:ed:fa:8b:10:
00:fa:80:02:ad:61:59:11:d5:16:fa:c7:63:15:36:
69:c8:9c:4d:7a:af:12:f1:cf:d8:5c:c9:aa:83:b6:
b3:31:8f:da:15:f5:0f:0e:9e:d0:9e:52:2d:39:0e:
3c:0f:94:98:42:f3:7a:4b:61:34:79:fa:d7:b7:29:
91:58:82:6a:42:b5:c7:cd:74:45:f4:23:d6:40:de:
05:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:31:55:04:20:DA:A9:0C:A4:E7:57:41:9C:70:0A:7F:89:44:FA:5B
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d2:b1:e3:3a:d0:c8:01:18:22:76:7c:23:e0:a9:01:87:47:
58:f8:58:96:f6:d4:81:25:12:c8:13:1a:69:bf:c9:cc:4c:a2:
b3:c8:40:7b:87:a5:a2:6d:19:c8:0e:70:2b:41:73:4d:c0:2c:
64:fa:00:15:96:8c:a7:30:f9:78:52:b8:ba:31:85:d7:46:db:
37:6c:f1:20:d7:f6:a1:14:ad:bc:0d:48:a3:37:d8:16:a4:7f:
d3:6e:70:85:c8:32:b1:ee:fb:17:fb:83:a3:9b:02:d6:fb:65:
c7:f9:5e:c7:29:34:95:7d:9d:9d:2f:cf:5e:9e:0d:7b:8a:3b:
54:b3:04:12:56:81:32:0b:f6:a4:fa:b1:b4:63:e4:00:a3:4d:
8f:af:f9:4f:71:22:fa:4b:a8:08:16:5d:f8:19:b2:44:e2:a5:
e4:8d:d3:52:31:bd:b4:88:db:39:68:6b:b2:f9:c6:89:0f:21:
f4:5b:69:d7:fd:1f:5c:12:a2:bb:87:a6:7a:1e:54:67:28:26:
ac:ed:24:d0:e4:2b:35:81:eb:84:ea:42:d1:01:fd:fe:bc:3b:
d0:44:34:09:22:b4:23:a1:ee:55:c1:2b:22:3e:cb:62:02:65:
b0:a2:b8:39:6f:2b:39:91:68:1b:ee:15:1d:41:c6:e6:f6:8b:
9e:93:f2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:33 2026 by rpki-client