Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier: hBEhYSVphQk2s0JqVI4MfeHx7m1tMWyHRogeC6XN33Y=
Subject key identifier: 25:6F:60:04:3F:1F:57:C3:8D:80:DC:65:3A:E3:28:3A:24:39:42:92
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 019F90910CB5B4855278DF3EEB3637C75D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number: 153D
Signing time: Thu 23 Jul 2026 20:00:52 +0000
Manifest this update: Thu 23 Jul 2026 20:00:52 +0000
Manifest next update: Fri 24 Jul 2026 20:00:52 +0000
Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: /UMtJ47cSLCgmaQ4yWbl4lSmO9lhxsmt4feKl1+SB38=)
2: fy5Vxpj8Cp8uUIkOIqYsyPIJp9o.roa (hash: dPwdrijrUmXn5KvoJ9i354gs58IETiu1sAxzaL3DK6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:0c:b5:b4:85:52:78:df:3e:eb:36:37:c7:5d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Jul 23 20:00:52 2026 GMT
Not After : Jul 24 20:00:52 2026 GMT
Subject: CN=256f60043f1f57c38d80dc653ae3283a24394292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f6:35:66:9e:ae:bd:9a:a2:e2:e0:0d:44:f1:
36:71:c2:7e:8a:3f:79:b6:14:db:16:d0:a7:7e:e3:
8f:f8:53:59:2a:98:42:b7:d5:f6:a9:1d:d0:f8:d7:
d7:14:28:ae:ab:d4:f1:00:62:78:35:54:48:19:6e:
fb:7b:58:4f:59:07:08:4b:fa:07:ca:77:4e:4e:be:
c6:ab:18:7b:9b:1e:98:d9:68:1a:27:ae:bc:35:b2:
e6:92:bf:5d:b5:f5:f2:27:14:73:58:43:28:ea:76:
49:be:35:cb:61:20:88:ef:33:8e:66:fd:42:09:94:
a9:c0:52:cb:e9:9c:7f:75:d6:e3:ba:3a:71:a4:6c:
3d:52:d7:e9:97:7d:73:d9:26:93:49:0e:5c:ef:b4:
6b:fd:ff:76:55:e1:fc:30:07:39:3c:5e:33:80:20:
38:69:ce:22:1d:2d:54:8e:f0:b7:75:84:25:18:4f:
ba:5e:8e:27:bf:7e:db:23:90:45:74:0f:f1:ec:5d:
14:2c:97:f9:08:88:74:55:e9:5c:65:d3:a7:f4:a5:
d4:7e:67:52:19:ef:4c:1e:40:ee:c4:08:c1:d3:a4:
a6:2f:e4:bf:79:6e:5d:af:31:a0:37:4a:24:f7:f4:
ac:dd:a5:a4:d5:fb:57:82:d9:84:76:d4:8a:a4:1e:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6F:60:04:3F:1F:57:C3:8D:80:DC:65:3A:E3:28:3A:24:39:42:92
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a2:d2:95:c8:b1:50:01:fd:0b:19:cd:b5:f8:e0:7f:86:a5:
8a:cf:a1:98:ca:dd:b2:07:d3:af:a8:6d:d7:cf:1b:35:d7:2c:
77:1d:b6:6a:ce:21:53:21:8d:a6:1b:82:54:9c:58:64:95:09:
a7:ab:cd:78:19:8d:c3:7c:99:f2:f7:dd:27:3a:4e:0a:fd:d3:
33:4f:66:c5:cd:ee:ac:ed:a4:6a:03:7f:85:8e:2e:16:16:9a:
da:3b:15:a0:28:ba:b0:73:5c:35:6d:9b:10:ed:18:5d:2a:83:
5a:5c:66:33:06:81:15:37:4a:96:8a:6c:23:06:c7:5e:00:51:
31:97:85:41:4b:84:3a:51:a4:05:e9:7e:9c:2e:fa:f3:84:6e:
a3:98:9c:30:db:66:f3:2a:19:5f:ce:5d:49:dc:64:5e:41:b6:
e8:8f:63:77:52:78:9d:db:c7:0e:f7:6d:8c:a0:9b:82:9b:0c:
7a:1d:c6:51:b4:1a:93:13:78:fb:1e:6e:54:60:87:77:bc:bb:
01:cb:83:c0:89:c6:66:0e:6d:8e:62:80:95:41:22:72:80:63:
24:d1:ac:60:ce:f1:19:61:8e:8b:8d:64:9b:bb:5b:5e:e1:13:
79:0e:d4:da:ae:99:9d:50:d7:67:99:79:26:f4:9f:ce:05:03:
b1:4b:0d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:50:09 2026 by rpki-client