Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: 9jDX9buyBssOcC69P1eKOWkI7rWEezcP87341NBLcJE=
Subject key identifier: 90:91:9B:DC:6C:B4:29:DD:D1:96:94:9B:AB:03:42:94:53:DA:22:99
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 019CAAC6EAAAF53D58BB345386E3FCF4C074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 125C
Signing time: Sun 01 Mar 2026 19:01:28 +0000
Manifest this update: Sun 01 Mar 2026 19:01:28 +0000
Manifest next update: Mon 02 Mar 2026 19:01:28 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: YSv9EGDeCrv2uFsXwGefAl/xCiGzlQS5GBHwxQxsahA=)
2: Y0tk_Sz2HsUVZBHhG38K63AXXoI.roa (hash: cuxsa3EYw8MedZ66NKK/P6ufrEIddCWT2hYIuyPu+h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ea:aa:f5:3d:58:bb:34:53:86:e3:fc:f4:c0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Mar 1 19:01:28 2026 GMT
Not After : Mar 2 19:01:28 2026 GMT
Subject: CN=90919bdc6cb429ddd196949bab03429453da2299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:0f:8e:89:a7:8a:dc:4b:2f:87:34:ed:ec:
6d:03:dc:27:38:98:bb:32:ed:f0:0b:40:d3:1b:68:
cb:02:a9:e8:ed:de:bf:e0:e1:de:4c:f7:f0:6a:ce:
1e:c6:03:08:34:c2:18:b2:cd:48:d5:62:9b:a0:e5:
9a:92:43:b3:b5:ea:86:5f:5a:63:92:ee:b0:10:04:
38:75:63:88:26:10:45:ab:b7:ed:d2:ba:c2:16:3c:
7e:fd:f9:7e:ba:fa:00:89:80:a0:c1:13:3f:d3:93:
6b:f4:0f:27:8b:fa:c5:6b:af:26:fc:26:d8:cf:af:
a4:1d:14:e2:38:4c:9d:3a:4f:d8:fb:98:74:32:2c:
cb:b6:f4:6f:77:68:16:db:04:3d:7b:65:f2:b5:4d:
f8:69:b3:e7:4d:05:c0:f7:19:8b:b1:7c:24:3c:0e:
15:2f:dd:46:0b:61:f3:cd:26:4d:af:16:bc:4f:6e:
cb:b3:8b:b3:f0:7e:b7:47:6f:0e:39:72:a3:77:a2:
9c:57:bd:2b:c0:45:89:75:87:64:5e:e0:cd:bd:a4:
1a:f2:69:b4:00:df:3d:cd:93:ce:c9:3e:2e:2a:63:
6d:ed:35:0e:01:92:12:44:09:31:44:d5:99:07:1f:
b3:bd:da:66:5f:33:ac:65:bd:34:29:5f:78:72:c7:
67:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:91:9B:DC:6C:B4:29:DD:D1:96:94:9B:AB:03:42:94:53:DA:22:99
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3e:69:49:06:6e:af:bb:b8:ef:02:da:3a:1b:e1:cf:4d:78:
90:75:05:b9:8a:99:f8:63:0c:2d:7c:4b:95:20:98:b3:d2:8e:
5d:71:2b:b7:6e:e0:3c:a7:34:e4:99:9a:cf:05:2b:6e:90:dd:
d2:b2:74:b1:5c:15:bd:17:c6:4b:a0:5f:54:2b:6f:b6:79:b4:
36:5c:c3:47:24:d9:e0:a4:0e:8f:ed:57:16:ac:e5:da:ec:09:
87:6b:ad:cf:d7:a2:fd:5f:ac:19:c1:5e:c5:50:3e:0a:ae:6a:
ad:5a:ae:ea:4a:b7:4c:77:f0:fd:e5:5d:21:85:72:ba:4e:e5:
76:90:59:3a:50:78:2f:94:e8:c2:cb:ed:8d:e6:a6:12:c4:dd:
98:32:78:f9:cc:cd:92:a1:89:96:09:da:6a:61:39:55:20:af:
cb:87:5f:dc:77:32:c9:d1:e6:be:d3:98:fb:ce:f5:77:89:6e:
f3:37:23:88:23:3f:e5:c1:21:aa:96:21:58:10:f9:93:69:58:
64:1e:ac:4f:8f:ad:34:a1:37:bb:6b:92:aa:9b:9b:ab:ea:ef:
58:41:08:07:5d:1f:6c:30:ef:4a:91:0e:4c:7b:21:e3:e8:a9:
1f:28:7b:e4:e5:92:d9:fc:ee:92:f6:08:33:e9:50:11:5d:6b:
d2:34:17:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxuqq9T1YuzRThuP89MB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkM2Q0MDExMTc1ZTVkZjdhM2Y1N2QzOGU3ODE1MGEyYzA1
ZmRkMWQwHhcNMjYwMzAxMTkwMTI4WhcNMjYwMzAyMTkwMTI4WjAzMTEwLwYDVQQD
Eyg5MDkxOWJkYzZjYjQyOWRkZDE5Njk0OWJhYjAzNDI5NDUzZGEyMjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfIPjomnitxLL4c07extA9wnOJi7
Mu3wC0DTG2jLAqno7d6/4OHeTPfwas4exgMINMIYss1I1WKboOWakkOzteqGX1pj
ku6wEAQ4dWOIJhBFq7ft0rrCFjx+/fl+uvoAiYCgwRM/05Nr9A8ni/rFa68m/CbY
z6+kHRTiOEydOk/Y+5h0MizLtvRvd2gW2wQ9e2XytU34abPnTQXA9xmLsXwkPA4V
L91GC2HzzSZNrxa8T27Ls4uz8H63R28OOXKjd6KcV70rwEWJdYdkXuDNvaQa8mm0
AN89zZPOyT4uKmNt7TUOAZISRAkxRNWZBx+zvdpmXzOsZb00KV94csdnbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCRm9xstCnd0ZaUm6sDQpRT2iKZMB8GA1UdIwQY
MBaAFN09QBEXXl33o/V9OOeBUKLAX90dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zMDg1ODktOTJmZS00NTkzLTkzZTQt
MmQwYTc4YmU4OTJkLzEvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zMDg1ODktOTJmZS00NTkzLTkzZTQtMmQwYTc4YmU4OTJk
LzEvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAND5pSQZu
r7u47wLaOhvhz014kHUFuYqZ+GMMLXxLlSCYs9KOXXErt27gPKc05JmazwUrbpDd
0rJ0sVwVvRfGS6BfVCtvtnm0NlzDRyTZ4KQOj+1XFqzl2uwJh2utz9ei/V+sGcFe
xVA+Cq5qrVqu6kq3THfw/eVdIYVyuk7ldpBZOlB4L5TowsvtjeamEsTdmDJ4+czN
kqGJlgnaamE5VSCvy4df3HcyydHmvtOY+871d4lu8zcjiCM/5cEhqpYhWBD5k2lY
ZB6sT4+tNKE3u2uSqpubq+rvWEEIB10fbDDvSpEOTHsh4+ipHyh75OWS2fzukvYI
M+lQEV1r0jQXHg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:49 2026 by rpki-client