Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: W3Lbqjq/vEV3HorZMXUKOfaVDmO4lNCRr4d68FgJrbI=
Subject key identifier: 80:10:30:10:E2:62:04:EE:B2:68:B2:3D:55:17:FB:D1:0A:AB:7E:72
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 01A0D1C9751F40B929BAA05B63A403FB11C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 1484
Signing time: Thu 24 Sep 2026 05:00:35 +0000
Manifest this update: Thu 24 Sep 2026 05:00:35 +0000
Manifest next update: Fri 25 Sep 2026 05:00:35 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: ovztPhPhx7WvT/ExLgRsE4sGShUf+ndf1/WcXk2Zc7E=)
2: EsP0TnwcIR_tp36lre6DQ7jc9Lc.roa (hash: Pj/MNI9vX2PM78P8r4xx/BcMGeXmStJFcOh545nj9ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:75:1f:40:b9:29:ba:a0:5b:63:a4:03:fb:11:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Sep 24 05:00:35 2026 GMT
Not After : Sep 25 05:00:35 2026 GMT
Subject: CN=80103010e26204eeb268b23d5517fbd10aab7e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:86:03:87:f0:c5:46:27:6a:ab:2f:97:9e:89:
fd:72:9f:c0:b1:d5:cd:9c:63:0e:c0:13:fc:78:ca:
a1:22:0d:b4:5c:2d:cc:ab:a1:f6:3f:34:44:70:de:
e4:80:ec:9f:28:42:8a:3b:e6:82:cb:45:76:3a:cf:
5a:84:73:62:26:e6:a9:47:53:05:56:e7:93:ad:ee:
d7:a7:46:c4:d7:de:f5:ac:ec:aa:dc:04:f6:03:c4:
7c:7d:25:17:44:b1:35:6c:58:68:d9:6c:73:9a:bf:
7a:4d:75:56:35:d7:88:22:dd:65:dc:de:52:b7:50:
97:1b:39:12:f1:02:c6:7a:d2:87:c1:13:08:2c:9f:
c6:c0:48:d2:4a:30:d2:4c:bb:30:4f:b0:b5:7d:5a:
96:3d:9e:40:86:db:cf:86:b0:31:77:99:72:5a:2c:
f3:8a:64:06:2e:b9:c6:4f:00:ba:e5:87:73:e3:b1:
a9:57:28:97:57:0f:97:1d:5a:54:c3:16:b7:a4:c3:
1c:88:50:3c:c3:3a:35:46:d0:9c:49:85:38:44:35:
ac:55:20:49:fa:80:9f:af:21:f1:8a:56:56:ee:f6:
a8:d1:2a:19:dd:8a:57:92:72:6a:70:2b:81:18:2f:
71:57:d8:19:fa:c8:d7:03:26:51:39:4b:ee:9d:f6:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:10:30:10:E2:62:04:EE:B2:68:B2:3D:55:17:FB:D1:0A:AB:7E:72
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:07:88:8d:1a:52:ff:8b:90:95:8d:57:98:43:9e:4a:10:ab:
de:69:a0:9c:75:0f:65:7b:36:4b:92:d0:24:76:ee:fd:89:0f:
31:74:bf:d1:62:55:e9:65:9f:c4:1a:b4:b2:42:28:1a:d9:10:
bc:35:79:94:4e:43:82:6a:ba:06:c1:c0:92:f7:41:47:cc:dd:
77:3b:a4:20:0b:29:75:87:3f:9d:2c:a3:7f:b3:a4:19:ea:1a:
f6:dc:4c:eb:dd:80:4f:9c:f1:1b:82:70:16:69:ee:5f:3a:08:
c7:73:73:cb:a4:86:22:38:5c:42:54:44:62:de:ea:60:f9:0f:
79:3e:a1:cf:85:3e:9f:0b:a4:05:25:a5:aa:46:55:75:a7:a1:
0d:48:5c:d8:75:4d:6c:89:74:28:eb:c8:e3:74:7f:5a:e4:19:
a4:04:ca:8f:c1:bf:7c:76:e6:0e:07:66:29:75:da:52:e8:d6:
b3:b7:2e:b1:56:3c:3e:e7:1a:0e:83:5a:e6:e6:3e:85:88:7a:
3c:5c:09:e8:4b:7d:11:02:38:c9:27:8c:bd:1c:ff:e8:23:ad:
af:5f:a0:6d:64:45:43:49:74:ac:a9:1b:6c:fe:a9:7d:5e:85:
e6:a7:1c:26:18:5d:48:f6:70:34:b6:e7:0f:ce:32:96:c1:09:
f3:67:86:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:39:06 2026 by rpki-client