Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
File: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft (raw, json)
Hash identifier: mkPC/JTZb4mcIq8VdwpbMdMka2FnZvPP5r9/hdOqQKE=
Subject key identifier: 11:A6:FB:80:7E:04:00:16:73:E8:28:CE:CE:A6:7E:7D:18:56:43:B5
Authority key identifier: DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
Certificate issuer: /CN=ded353e2f5d318c348772a8ff105aa70719e4135
Certificate serial: 019D2816513D9AFEFD745CECD038959DC607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
Manifest number: 16AE
Signing time: Thu 26 Mar 2026 03:00:44 +0000
Manifest this update: Thu 26 Mar 2026 03:00:44 +0000
Manifest next update: Fri 27 Mar 2026 03:00:44 +0000
Files and hashes: 1: 1Y2BW47fxdx1RbWgL8Falt34cXQ.roa (hash: nJAC+P1h/7iKIKT4M2hovaBFdxaaC+Nnqj5ylSsQ8zc=)
2: 3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl (hash: WlWexyjPtKzOOQk6WBL3+1sTvxxjbjsEdEVvf1iFiIM=)
3: 9Zo27dHF-vw_0K466CifKnlKYa0.roa (hash: mQvlsq1h1CY3hlUWwc5QZHG7R4dpxOgO9TKLwqyOFcE=)
4: NOlO128QAjjmRe6Qnn3gOA1oSVE.roa (hash: 67bJFnELYE8fKPufA6ehqlhNoFQm0l5AN/KQyh1V7KY=)
5: VyC5ga2bg4Oqw1COKzuApAyCRbY.roa (hash: cPQeMVKNm+nMLNl7idhMlZp1zZDFBQqXG2JeEbtx2/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:51:3d:9a:fe:fd:74:5c:ec:d0:38:95:9d:c6:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded353e2f5d318c348772a8ff105aa70719e4135
Validity
Not Before: Mar 26 03:00:44 2026 GMT
Not After : Mar 27 03:00:44 2026 GMT
Subject: CN=11a6fb807e04001673e828cecea67e7d185643b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d2:db:36:5e:15:ca:ab:3f:e9:b6:6e:11:a2:
7b:c5:1e:7b:2c:7f:d1:84:c3:9d:c8:32:ff:d7:8c:
1c:5e:f9:d2:38:1a:63:46:23:57:6b:1c:f7:93:0c:
2c:c7:c4:59:05:32:14:bc:dc:1f:b1:ca:e5:20:11:
0a:cb:bc:df:63:81:fd:c0:0d:71:9e:01:95:d8:f8:
23:1c:59:8a:d5:ac:df:0c:e0:59:51:91:42:8d:1f:
be:b0:41:39:df:65:d5:24:30:ea:84:8b:c0:5c:5b:
e2:04:ca:92:54:62:d4:97:76:60:c8:56:7b:66:e5:
bc:1c:92:27:4a:97:28:c9:d7:8e:31:d1:bf:6e:55:
48:f8:26:87:24:64:ac:54:06:d2:9b:3d:13:f7:cd:
18:2b:ff:de:9f:ac:e7:c3:7b:53:50:7e:59:08:f5:
18:b6:30:8d:6c:a9:63:56:e6:3a:10:7d:42:28:0a:
c0:ee:f4:0c:65:0c:7d:46:4d:00:ff:35:c9:4c:97:
38:1d:8d:9f:53:a0:97:92:0d:27:4b:95:84:35:89:
47:9e:5d:b9:71:ec:9c:66:fb:81:55:35:5c:57:71:
cf:58:48:83:ec:21:39:18:0b:e9:f0:fd:2d:83:83:
a3:80:5a:2d:4d:97:c0:f1:c9:b7:20:b0:95:3f:3a:
34:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A6:FB:80:7E:04:00:16:73:E8:28:CE:CE:A6:7E:7D:18:56:43:B5
X509v3 Authority Key Identifier:
keyid:DE:D3:53:E2:F5:D3:18:C3:48:77:2A:8F:F1:05:AA:70:71:9E:41:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tNT4vXTGMNIdyqP8QWqcHGeQTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/cbacce-efbf-4f32-8d88-4e85dabd6474/1/3tNT4vXTGMNIdyqP8QWqcHGeQTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:85:5f:a9:09:33:81:47:f6:70:7e:f4:63:98:f4:3c:c8:88:
7e:a2:1b:23:81:d8:bc:a4:05:06:b9:cc:d6:52:85:c8:06:77:
9a:3d:fd:ca:70:36:10:90:f8:73:07:74:17:0e:e1:c4:cb:17:
7f:93:69:87:60:df:14:dc:54:2f:30:15:a6:6f:e7:36:f4:f8:
5a:50:80:1f:10:c7:95:07:18:c8:b6:c3:7a:6f:f9:ce:2f:c9:
46:7d:9c:d2:bb:d9:d7:ce:e0:93:3c:f1:ca:ac:55:d9:24:40:
9c:64:60:e1:85:fd:e0:3a:8b:ab:05:68:37:a3:18:ec:02:4a:
4b:ac:80:a8:41:d6:2d:69:b8:13:ff:b9:c2:a7:f4:31:b6:fc:
61:51:75:d7:f9:d7:83:b4:0d:0b:e6:b7:ae:aa:58:59:ef:a0:
39:05:d1:0b:3b:87:a4:2e:4e:c1:10:ad:52:d4:b1:e5:c0:3c:
00:4a:49:48:66:ff:21:47:12:71:b1:9d:52:95:98:29:e0:3b:
2b:fe:a7:5c:61:35:eb:b4:db:01:f6:f3:b8:64:18:af:72:5c:
4e:b2:5f:eb:c9:11:4f:65:96:0b:d2:cc:3e:f5:2a:fc:f9:c9:
a8:4a:5d:21:af:7e:e3:c5:1b:f7:3d:83:fd:9e:03:81:b0:26:
36:5e:a4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:02 2026 by rpki-client