Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
File: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft (raw, json)
Hash identifier: Uy1L4NGuyxlKOXAvf4Q/88m5bIgCY7z4eSGoCqjDTr0=
Subject key identifier: 5F:13:23:D1:57:BD:84:B8:85:5C:FB:13:A8:55:91:C2:A9:17:CE:65
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial: 019E1D59B6A949D072257E34295661E16DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
Manifest number: 172D
Signing time: Tue 12 May 2026 18:01:19 +0000
Manifest this update: Tue 12 May 2026 18:01:19 +0000
Manifest next update: Wed 13 May 2026 18:01:19 +0000
Files and hashes: 1: 1Y2BW47fxdx1RbWgL8Falt34cXQ.roa (hash: nJAC+P1h/7iKIKT4M2hovaBFdxaaC+Nnqj5ylSsQ8zc=)
2: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl (hash: FBvuJ+dMAqaciVUr3PV/zaB5Qn/2GHWnyKDP/4qZGGc=)
3: 9Zo27dHF-vw_0K466CifKnlKYa0.roa (hash: mQvlsq1h1CY3hlUWwc5QZHG7R4dpxOgO9TKLwqyOFcE=)
4: NOlO128QAjjmRe6Qnn3gOA1oSVE.roa (hash: 67bJFnELYE8fKPufA6ehqlhNoFQm0l5AN/KQyh1V7KY=)
5: VyC5ga2bg4Oqw1COKzuApAyCRbY.roa (hash: cPQeMVKNm+nMLNl7idhMlZp1zZDFBQqXG2JeEbtx2/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:b6:a9:49:d0:72:25:7e:34:29:56:61:e1:6d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
Validity
Not Before: May 12 18:01:19 2026 GMT
Not After : May 13 18:01:19 2026 GMT
Subject: CN=5f1323d157bd84b8855cfb13a85591c2a917ce65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:42:88:65:db:72:a1:1c:82:f3:dc:2f:31:
8e:53:93:15:4b:16:c8:b4:6d:41:a8:87:02:c3:b1:
31:b3:20:d9:56:35:10:bd:6d:f2:65:05:26:5f:d4:
1d:ff:58:df:c7:3b:e2:3a:aa:0b:12:fe:75:0f:f0:
f3:1d:ad:e0:7a:01:25:0d:b5:80:e3:07:97:c1:71:
5f:70:ef:98:35:72:ee:9c:cd:f0:be:ab:e3:b0:15:
de:b3:f2:74:0e:c8:22:61:4a:2a:61:a9:aa:0b:eb:
f6:ba:1c:cd:37:5f:57:8a:71:df:d3:88:00:0f:54:
58:ab:ca:1a:bc:11:f8:03:87:98:23:0f:60:76:b2:
c3:97:cf:e1:09:a6:b6:bf:a3:48:2c:c0:6d:27:e3:
fa:15:20:cb:7b:c5:67:31:fc:81:92:e0:1f:1c:f6:
22:0b:58:8c:c8:b3:b7:39:f9:fc:2e:5f:1e:61:f4:
6c:45:de:94:ef:a2:48:39:1c:87:04:b1:23:bf:b4:
8f:ff:d6:5e:6d:d2:97:28:41:9e:24:f9:22:9e:d4:
19:66:06:b0:2c:0c:4c:a4:dd:16:84:47:9c:ae:3c:
d5:2c:12:9e:0c:97:88:1f:44:e8:da:58:82:a9:fb:
1f:51:7b:0a:7b:f5:91:17:09:98:70:13:b2:a7:57:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:13:23:D1:57:BD:84:B8:85:5C:FB:13:A8:55:91:C2:A9:17:CE:65
X509v3 Authority Key Identifier:
keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:8e:6c:52:63:10:d2:bd:71:ad:41:d5:9e:19:bc:89:fb:51:
0b:dd:5e:ab:bf:9e:5e:e8:02:04:f7:f5:16:6e:3e:8f:43:55:
08:f1:f3:ee:97:77:f2:7d:69:3d:04:91:56:8a:9d:c2:42:82:
db:ed:41:46:ff:79:5a:45:c7:c4:ff:d7:45:85:e4:e2:72:c0:
c3:71:28:a1:20:90:f1:a9:f3:08:2e:59:e0:84:61:46:16:b2:
09:c5:11:4a:77:a6:de:69:30:09:12:5d:58:46:87:5d:62:e7:
8a:0c:02:dc:74:84:62:04:4f:39:24:26:3e:09:60:2b:46:72:
54:e5:de:82:7c:45:35:70:09:9e:bb:f7:ad:37:28:75:ca:e9:
0c:4d:ef:d7:5a:a9:24:56:cb:fa:4f:c7:39:0f:94:58:83:3b:
3c:ae:9f:f8:af:e1:63:43:de:7d:8b:e6:e1:86:cb:e5:6f:9a:
38:af:54:d3:be:04:8a:dd:5e:e1:25:93:da:9a:e3:29:0e:13:
98:08:d4:d5:d8:ab:c0:a8:46:db:40:8e:99:42:5d:e3:33:b7:
b8:ad:52:a0:2e:e0:2f:f9:b0:3e:ac:ce:0f:a5:52:25:8e:e0:
c1:e8:87:1b:3f:2c:8a:b3:56:b4:2e:8f:56:e0:a0:c5:84:ff:
c3:31:68:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:00:12 2026 by rpki-client