Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
File: 3t-aZxvPF4nBtaw2MMdBvlYNraA.mft (raw, json)
Hash identifier: k9eumPlEka3nnbCBjQnu+D2g5QbCltGtx8yZcUr1FqU=
Subject key identifier: 13:5E:1F:6E:9C:3A:BE:45:F5:60:C0:63:D5:DC:35:FC:75:20:CB:80
Authority key identifier: DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
Certificate issuer: /CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Certificate serial: 019D2884BBB8409BE1F2739D167E3F96BED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
Manifest number: 13FE
Signing time: Thu 26 Mar 2026 05:01:20 +0000
Manifest this update: Thu 26 Mar 2026 05:01:20 +0000
Manifest next update: Fri 27 Mar 2026 05:01:20 +0000
Files and hashes: 1: 3t-aZxvPF4nBtaw2MMdBvlYNraA.crl (hash: u90571uMiaQrdyCZakI99Mh9C3uf6y+1CkVU3oN/7/w=)
2: fy5Vxpj8Cp8uUIkOIqYsyPIJp9o.roa (hash: dPwdrijrUmXn5KvoJ9i354gs58IETiu1sAxzaL3DK6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:bb:b8:40:9b:e1:f2:73:9d:16:7e:3f:96:be:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dedf9a671bcf1789c1b5ac3630c741be560dada0
Validity
Not Before: Mar 26 05:01:20 2026 GMT
Not After : Mar 27 05:01:20 2026 GMT
Subject: CN=135e1f6e9c3abe45f560c063d5dc35fc7520cb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:08:bf:26:51:ac:6b:bf:1b:68:6b:79:43:
8a:3a:8d:d9:52:8b:1f:92:40:68:2e:a9:ac:0a:5b:
1f:37:e8:20:0a:56:6d:6f:42:41:0f:ce:ad:fe:1d:
15:fb:b9:14:21:47:bc:2b:98:49:dc:1e:71:c9:c9:
d2:d7:11:35:75:17:21:0f:ac:02:6c:19:83:1b:1b:
7c:17:96:6d:53:81:d1:4f:38:5c:eb:84:29:8b:79:
a7:55:70:d4:7b:e4:16:25:d0:83:af:b9:7e:67:3d:
db:2c:5a:3d:a4:10:16:fe:33:72:46:b9:4b:e7:99:
8d:f5:1f:92:ae:7f:36:91:79:a9:6b:a0:c1:eb:99:
bd:b4:80:44:fd:60:90:89:7b:68:af:32:43:76:ba:
70:8f:f9:c1:7c:fb:e1:83:86:56:ea:4f:13:ae:de:
79:96:e8:41:48:dd:81:0b:c3:57:a4:14:af:21:85:
ce:22:4c:95:40:c3:10:d3:c8:1e:80:3d:8b:fe:28:
d5:8d:5d:50:6e:54:2c:df:25:96:dc:8b:4e:8f:c6:
0e:63:f0:1f:18:d7:da:bd:26:a5:8d:4c:8f:ea:fc:
c4:90:13:b4:42:9a:43:33:24:16:d8:81:d7:34:7f:
30:dc:6b:55:bc:d0:52:6a:b4:14:81:42:da:cb:73:
d8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5E:1F:6E:9C:3A:BE:45:F5:60:C0:63:D5:DC:35:FC:75:20:CB:80
X509v3 Authority Key Identifier:
keyid:DE:DF:9A:67:1B:CF:17:89:C1:B5:AC:36:30:C7:41:BE:56:0D:AD:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t-aZxvPF4nBtaw2MMdBvlYNraA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/bb1396-9c05-4e17-bbc5-77660501c478/1/3t-aZxvPF4nBtaw2MMdBvlYNraA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:07:5a:3f:1c:63:a8:fd:fc:14:ea:56:a3:fc:02:e3:64:15:
83:19:b8:2f:1a:35:6e:97:98:49:39:ed:64:8b:b3:f3:3d:fb:
49:6c:fb:3f:1c:4d:1f:ef:03:2c:d8:22:6b:4d:23:4f:c4:56:
d8:ba:93:a8:78:d4:46:2d:b4:bc:9f:60:94:ca:ce:75:e0:72:
44:9d:f4:40:b9:f2:67:58:c7:49:21:e2:b2:73:53:03:e1:47:
95:03:3f:79:f6:f4:91:16:bd:84:d7:0b:5b:4a:e8:18:82:83:
31:73:2a:95:e7:d5:0f:74:2b:2e:2a:b5:97:62:92:69:7d:bc:
b8:45:70:5a:59:e3:60:46:d1:6b:04:4c:bd:97:d5:b2:b3:3c:
c6:c5:00:35:7f:de:d4:b6:f9:f7:8c:29:16:49:57:79:b5:96:
b1:6e:13:74:fb:b7:3e:3a:65:e5:cd:80:f8:66:e5:c0:e8:a4:
09:8d:fd:df:10:88:c1:7b:76:dc:13:37:a6:90:7d:68:6e:9a:
15:98:0f:15:9e:9a:a0:41:67:9e:ea:b4:21:b9:87:05:4a:fe:
31:9d:1b:b6:b8:3d:05:18:e4:52:f4:55:72:b0:60:fe:b5:5f:
4e:b9:3a:ae:5d:78:c1:78:ea:2f:3b:91:f1:e6:e7:f9:20:05:
2b:80:34:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:09:10 2026 by rpki-client