Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: 6gKSVgd025RLatveP0vAFs+4pc/CwvexZRAf3azMzv4=
Subject key identifier: 1E:10:A7:5E:9E:B2:0A:F7:3B:2D:E8:16:05:5E:15:E4:7A:DF:4F:4B
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 019DCE991B02FE07B153BFF1F7E970609FB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 03B7
Signing time: Mon 27 Apr 2026 11:00:33 +0000
Manifest this update: Mon 27 Apr 2026 11:00:33 +0000
Manifest next update: Tue 28 Apr 2026 11:00:33 +0000
Files and hashes: 1: 9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa (hash: +HQk05zntNehbdvu8V8NKlpGF7j4PZhXHS02uV6BN8A=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: kt1ghp2+R/zdYg+s8buAHdPKe4mNVurqMhrgPoNZUT8=)
3: oMePamcSuXSxfmF39ynMXweabv4.roa (hash: rGoYrQCZs2IM8glBNFHp5PUVvbo0qB19ajmf0wK0f8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:1b:02:fe:07:b1:53:bf:f1:f7:e9:70:60:9f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: Apr 27 11:00:33 2026 GMT
Not After : Apr 28 11:00:33 2026 GMT
Subject: CN=1e10a75e9eb20af73b2de816055e15e47adf4f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:08:78:03:b4:4b:ab:d0:60:41:6d:3f:a4:
90:e2:be:36:6f:6d:c2:2e:25:f1:5e:3a:08:26:9e:
30:a9:35:79:f0:7c:0f:91:ca:9e:f6:bf:55:da:37:
47:d2:ed:0d:13:79:65:33:6c:58:95:ed:7c:a9:32:
24:c0:b6:12:cb:c7:dd:fe:fa:64:89:41:fe:1c:5e:
13:5d:a1:d3:7c:79:44:11:f9:b2:55:e9:90:3b:e5:
1d:2b:b6:6e:47:3c:b0:b6:31:27:4b:1d:0d:d8:21:
81:51:65:a6:90:d8:20:7b:8a:a8:d6:84:fc:81:68:
01:eb:9c:08:39:13:d9:91:ef:1c:c2:aa:86:3a:4b:
3b:14:d2:da:69:2b:cb:01:43:60:31:77:d6:ed:93:
b5:38:0c:f4:82:86:93:1c:0f:bc:40:72:27:3c:80:
11:d0:cd:b3:69:23:ba:4b:ad:b8:a5:19:fa:76:f1:
22:ee:6e:51:4d:34:0e:e1:af:61:8b:91:41:b8:7b:
a0:4d:da:b6:a4:5e:22:18:40:b8:b0:8c:72:04:d4:
ed:1a:a1:c4:7d:c4:e2:1e:c3:11:b9:81:82:61:63:
3c:b2:70:62:34:22:58:6a:dd:c8:e4:90:3d:24:52:
5a:9c:16:71:95:30:62:83:89:50:66:d4:53:e9:1e:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:10:A7:5E:9E:B2:0A:F7:3B:2D:E8:16:05:5E:15:E4:7A:DF:4F:4B
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d3:a2:a0:bb:d6:d4:91:4b:91:25:79:a9:f9:26:3b:f7:27:
ea:52:cb:a3:eb:3d:33:94:f7:8d:d8:e6:5c:6d:12:8c:46:7c:
83:8e:9b:9d:16:80:ed:cd:99:03:60:83:53:ce:28:7d:ae:b5:
2a:8c:89:3d:03:4d:73:6b:c8:80:ac:83:68:b4:e4:7a:cc:e9:
ee:7e:b9:6f:59:e7:d3:b3:37:c5:f3:cf:e5:7c:3b:fb:59:3b:
66:00:3b:79:13:e9:55:3b:91:ff:12:f0:17:d1:45:c6:f1:b0:
65:47:34:db:75:01:78:44:dd:de:c3:db:17:40:9e:f6:25:85:
7f:d7:ce:70:ce:ef:90:3f:9e:39:a0:4d:8e:99:a8:1d:ed:1b:
89:70:32:6e:39:85:71:a4:aa:58:ae:f3:be:f5:7e:07:08:95:
72:67:e7:1b:85:57:4c:e5:43:59:9d:5e:90:19:1b:69:28:f0:
7e:8b:17:1f:e9:3d:52:65:45:67:24:5c:4f:c8:9b:25:0b:55:
31:f6:fe:c9:ff:ee:7b:e1:40:54:05:6a:1c:17:81:34:97:65:
4e:72:73:9a:da:0c:4a:7e:64:d2:27:89:2a:49:ba:3f:2a:65:
2f:c7:a5:e7:4e:7e:04:4f:02:2b:35:20:ef:7a:79:ad:3d:77:
45:1e:16:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:35:23 2026 by rpki-client