Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier: w1ai6IGASYkj2Y7CvKdXyYlkeVGFXynXY/afwolWsyA=
Subject key identifier: 53:18:47:95:2D:86:AE:D8:CB:72:7B:C2:37:2F:FE:2A:F1:22:04:E2
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 01A1D9B80EFE740066F6660950F69CBD0C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number: 166C
Signing time: Sat 14 Nov 2026 11:01:20 +0000
Manifest this update: Sat 14 Nov 2026 11:01:20 +0000
Manifest next update: Sun 15 Nov 2026 11:01:20 +0000
Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: hRAbh5Vef2jOcoANiDsxsr9ERZ+LKiZ5QGtd7vDVC+U=)
2: fy5Vxpj8Cp8uUIkOIqYsyPIJp9o.roa (hash: dPwdrijrUmXn5KvoJ9i354gs58IETiu1sAxzaL3DK6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:b8:0e:fe:74:00:66:f6:66:09:50:f6:9c:bd:0c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Nov 14 11:01:20 2026 GMT
Not After : Nov 15 11:01:20 2026 GMT
Subject: CN=531847952d86aed8cb727bc2372ffe2af12204e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a1:9c:c6:32:9c:3b:a6:80:96:ab:7c:40:59:
36:3b:a0:5e:c4:74:14:49:a7:09:03:7c:94:a6:99:
41:6f:d0:36:f0:1a:86:bb:2d:e1:08:3c:f3:71:f0:
8d:75:5e:f6:9b:3a:f7:21:2d:1f:5e:50:a3:b3:dd:
8e:47:58:68:e6:34:83:00:7b:76:5b:76:a6:1f:3d:
63:07:10:f8:53:c9:91:0e:22:70:c6:f7:ab:08:c2:
5a:d9:68:d5:c5:6a:2b:87:04:1a:b3:07:2c:7e:bb:
0e:e8:84:50:5b:cf:63:89:b9:eb:1e:85:bc:0e:3b:
4d:1f:2d:02:9c:51:f6:40:a4:6c:ad:37:38:17:1f:
1a:7b:79:c5:5b:6b:32:25:18:14:68:d9:2d:39:67:
00:18:32:e8:d9:39:ce:7d:73:86:99:ab:27:65:59:
23:21:7e:70:1e:57:ff:e7:1f:3a:cb:51:d8:d4:9b:
c4:79:b2:c7:3f:45:27:6f:b5:59:bb:ce:29:f0:f3:
8a:25:32:0b:56:ec:e1:89:1e:83:9f:7f:46:44:1a:
9d:3e:f3:ff:8f:04:31:60:9c:67:91:5e:1c:33:22:
fb:6e:99:8c:0b:45:5f:13:ac:42:97:70:b8:71:9a:
c1:90:ea:bd:be:83:6e:b4:26:90:55:64:c7:03:59:
90:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:18:47:95:2D:86:AE:D8:CB:72:7B:C2:37:2F:FE:2A:F1:22:04:E2
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:df:6d:8d:8a:4a:a4:86:90:23:95:04:a8:98:f6:f8:a1:52:
9d:76:bc:e4:bc:7b:cb:98:64:e1:79:73:cf:59:bb:f5:cc:44:
3d:ad:7d:0e:b9:72:26:6f:96:55:09:88:b8:83:75:5b:b4:86:
71:d6:51:8d:32:44:54:67:9a:bb:f6:29:7a:1b:ef:15:f5:c5:
f5:ad:5a:df:25:18:e5:d7:95:c8:4b:00:d0:47:9a:b3:b5:48:
73:27:15:fd:3d:f8:5a:b2:65:50:9d:27:d0:c5:d3:c3:8b:cf:
5a:a6:f9:ad:89:ea:bf:b7:b6:09:85:19:fe:d6:7a:5a:05:dd:
9c:16:90:bb:54:c7:36:b3:45:c1:3c:e4:56:5b:1e:7e:54:e4:
a0:e3:57:a1:f1:df:5d:84:3c:f3:ad:5c:e6:e4:1b:23:ed:cf:
67:79:1e:96:1d:20:e2:45:a8:8d:63:df:2b:35:f8:78:ad:50:
4b:e1:00:7f:4f:4f:b4:20:49:83:c7:19:39:5a:b6:be:63:ce:
3c:db:5b:cb:8a:7d:6b:be:0f:39:fc:63:fe:2c:da:11:34:61:
e8:2f:70:ff:01:c0:58:83:5d:1a:7a:ab:14:12:ee:a6:e2:c2:
01:da:12:39:ce:88:00:8b:0f:cc:a5:c0:af:32:af:30:62:b2:
e7:9a:6c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:46:05 2026 by rpki-client