Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
File: 3T1AERdeXfej9X0454FQosBf3R0.mft (raw, json)
Hash identifier: 6/iPwjGbJHriOCGec3YvDYcNdTIWQhtb8Z6qEQGg/UQ=
Subject key identifier: 29:39:9E:90:E0:AE:F2:EB:64:15:8B:D3:42:4D:2E:4D:41:DC:9D:C5
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 019D265F680DFDDDCA2BBB78F8C5087648C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
Manifest number: 129C
Signing time: Wed 25 Mar 2026 19:01:19 +0000
Manifest this update: Wed 25 Mar 2026 19:01:19 +0000
Manifest next update: Thu 26 Mar 2026 19:01:19 +0000
Files and hashes: 1: 3T1AERdeXfej9X0454FQosBf3R0.crl (hash: UXlNAXejAYYAW87BBDOTq3EJbv9dmE+MvZ8FEHl+Dcg=)
2: Y0tk_Sz2HsUVZBHhG38K63AXXoI.roa (hash: cuxsa3EYw8MedZ66NKK/P6ufrEIddCWT2hYIuyPu+h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:68:0d:fd:dd:ca:2b:bb:78:f8:c5:08:76:48:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Mar 25 19:01:19 2026 GMT
Not After : Mar 26 19:01:19 2026 GMT
Subject: CN=29399e90e0aef2eb64158bd3424d2e4d41dc9dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:88:bb:c7:cc:d0:87:f3:a2:1f:ec:7e:a9:
ba:65:20:71:02:85:fb:0b:dd:1d:4c:0a:da:63:7b:
25:d0:8e:e5:86:c5:49:37:f6:65:0d:91:b9:08:64:
94:08:3c:89:6b:22:b4:8d:eb:24:e6:f5:c1:74:30:
fa:73:a0:a3:4d:6c:ba:28:73:a5:05:02:94:54:3d:
13:7c:1d:7e:74:c4:93:2a:df:e1:40:e1:97:16:5f:
89:07:67:12:c2:e3:96:64:cd:6b:a0:b3:00:b3:22:
61:9e:15:a6:e9:95:8c:ff:76:6d:e4:07:73:90:dc:
e4:1e:e4:cf:e3:3a:29:7e:7b:d7:2f:93:85:f7:38:
40:b9:69:8f:d6:c7:be:03:19:0d:38:ee:8a:d7:45:
cc:11:71:62:69:b6:62:aa:b2:bc:78:4d:f4:03:07:
d5:2d:c7:f0:5c:55:43:1b:40:57:b8:56:81:ee:e2:
94:f6:ec:f0:63:ae:9b:cd:3a:f6:65:c2:2a:28:d4:
9f:89:ca:72:7a:3d:8f:45:fd:e2:3c:a8:6f:7f:ed:
ea:52:3b:46:54:56:ed:63:42:0f:d7:54:03:fa:6e:
ab:c3:60:34:00:fe:80:e5:86:8e:0e:9e:1b:bd:ca:
b2:6f:38:13:f2:13:d5:f3:0c:02:a6:5e:14:9e:c9:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:39:9E:90:E0:AE:F2:EB:64:15:8B:D3:42:4D:2E:4D:41:DC:9D:C5
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ad:38:d1:b6:18:b9:93:2d:d2:ff:bd:56:86:dd:b0:16:46:
96:b8:6b:fa:c9:15:cd:14:58:6b:85:d5:c9:0c:31:03:39:a1:
5d:23:54:4b:f3:b5:42:76:65:cb:06:81:6f:97:36:86:ff:39:
7c:18:db:0f:b4:cb:91:f6:25:bd:82:3c:ff:a5:40:43:42:ff:
7a:f9:63:5f:33:5f:bd:2d:18:50:89:26:7e:20:7e:32:ca:66:
d6:70:64:b9:af:91:5b:8c:62:d1:53:2f:2d:85:03:5a:49:d0:
ec:7a:94:d1:02:a7:49:2e:3e:f1:9c:f9:65:08:e8:f8:ad:27:
2b:1f:8e:ed:fe:68:cd:25:e0:ef:b3:ab:88:43:6c:a8:60:81:
e6:2b:3d:83:9b:88:cc:23:94:fc:7d:68:46:9e:eb:2a:12:b6:
8f:b5:93:81:ab:78:ce:99:0c:59:c4:2c:0b:2d:40:30:52:17:
42:57:5a:06:89:4f:b1:2a:ab:0a:54:51:71:f5:a8:e5:c5:82:
cd:1d:32:b8:e6:02:5b:97:c2:d8:ce:f9:42:48:83:8e:bb:ec:
92:a1:af:e3:33:f9:ae:56:55:67:0e:96:2c:7f:84:7d:29:3e:
bc:5c:a0:fa:41:bf:44:2e:eb:0c:9e:40:3c:2f:98:4c:d9:60:
2c:42:42:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX2gN/d3KK7t4+MUIdkjEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkM2Q0MDExMTc1ZTVkZjdhM2Y1N2QzOGU3ODE1MGEyYzA1
ZmRkMWQwHhcNMjYwMzI1MTkwMTE5WhcNMjYwMzI2MTkwMTE5WjAzMTEwLwYDVQQD
EygyOTM5OWU5MGUwYWVmMmViNjQxNThiZDM0MjRkMmU0ZDQxZGM5ZGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqeIu8fM0Ifzoh/sfqm6ZSBxAoX7
C90dTAraY3sl0I7lhsVJN/ZlDZG5CGSUCDyJayK0jesk5vXBdDD6c6CjTWy6KHOl
BQKUVD0TfB1+dMSTKt/hQOGXFl+JB2cSwuOWZM1roLMAsyJhnhWm6ZWM/3Zt5Adz
kNzkHuTP4zopfnvXL5OF9zhAuWmP1se+AxkNOO6K10XMEXFiabZiqrK8eE30AwfV
LcfwXFVDG0BXuFaB7uKU9uzwY66bzTr2ZcIqKNSficpyej2PRf3iPKhvf+3qUjtG
VFbtY0IP11QD+m6rw2A0AP6A5YaODp4bvcqybzgT8hPV8wwCpl4UnsmxCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCk5npDgrvLrZBWL00JNLk1B3J3FMB8GA1UdIwQY
MBaAFN09QBEXXl33o/V9OOeBUKLAX90dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zMDg1ODktOTJmZS00NTkzLTkzZTQt
MmQwYTc4YmU4OTJkLzEvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zMDg1ODktOTJmZS00NTkzLTkzZTQtMmQwYTc4YmU4OTJk
LzEvM1QxQUVSZGVYZmVqOVgwNDU0RlFvc0JmM1IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEa040bYY
uZMt0v+9VobdsBZGlrhr+skVzRRYa4XVyQwxAzmhXSNUS/O1QnZlywaBb5c2hv85
fBjbD7TLkfYlvYI8/6VAQ0L/evljXzNfvS0YUIkmfiB+Mspm1nBkua+RW4xi0VMv
LYUDWknQ7HqU0QKnSS4+8Zz5ZQjo+K0nKx+O7f5ozSXg77OriENsqGCB5is9g5uI
zCOU/H1oRp7rKhK2j7WTgat4zpkMWcQsCy1AMFIXQldaBolPsSqrClRRcfWo5cWC
zR0yuOYCW5fC2M75QkiDjrvskqGv4zP5rlZVZw6WLH+EfSk+vFyg+kG/RC7rDJ5A
PC+YTNlgLEJCzw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:40 2026 by rpki-client