Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: S4uVfoB+5E2vVjy5waTDExdq3UMdJAYeEa2sT1/zpf8=
Subject key identifier: 3B:D9:AC:01:64:69:34:13:FF:15:87:A5:BF:C1:F7:7E:CB:E2:D6:2C
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 019EB845A4B5D6A498721C6018F48F4D7797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 0430
Signing time: Thu 11 Jun 2026 20:00:32 +0000
Manifest this update: Thu 11 Jun 2026 20:00:32 +0000
Manifest next update: Fri 12 Jun 2026 20:00:32 +0000
Files and hashes: 1: 9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa (hash: +HQk05zntNehbdvu8V8NKlpGF7j4PZhXHS02uV6BN8A=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: pSErjA/P1Bm9NS/0BMRQP4lYCvJAZ+WlguAalur1TpM=)
3: oMePamcSuXSxfmF39ynMXweabv4.roa (hash: rGoYrQCZs2IM8glBNFHp5PUVvbo0qB19ajmf0wK0f8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:a4:b5:d6:a4:98:72:1c:60:18:f4:8f:4d:77:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: Jun 11 20:00:32 2026 GMT
Not After : Jun 12 20:00:32 2026 GMT
Subject: CN=3bd9ac0164693413ff1587a5bfc1f77ecbe2d62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:73:86:7c:4e:57:ff:50:f6:ea:40:2d:88:
cf:3f:5c:f7:d4:18:ae:d2:2c:10:b7:9a:62:89:88:
b4:99:d2:fb:8b:f6:44:32:46:75:dd:ce:8f:94:9a:
3a:44:d8:80:83:7d:0a:8e:77:c4:e3:fb:fa:58:d8:
73:23:55:b9:5b:15:0d:26:11:b7:5a:8a:12:a7:79:
d0:37:4e:26:49:c2:a8:2e:05:7e:36:13:fd:ad:73:
4c:10:12:98:a3:f4:1f:b1:09:46:5a:86:4b:9d:8d:
4f:eb:7a:cc:fc:ed:4e:ae:e7:04:b4:b7:a1:79:22:
59:3d:bb:50:be:d7:96:68:ab:2d:8a:46:6c:01:52:
c3:20:c8:0a:53:be:18:25:56:e2:a1:1f:d2:c6:5e:
cd:91:66:ef:86:8d:c5:6d:91:83:a8:b9:74:55:97:
77:ee:49:61:ba:61:42:92:2f:75:9b:58:1e:ed:d7:
5f:c3:bf:fa:b4:4b:14:bf:c1:87:bf:13:4a:a1:4e:
44:ba:8d:64:be:3a:71:f5:7b:ae:5a:a5:3d:89:81:
1d:4a:31:d7:87:ec:78:5b:3d:e8:c9:7c:9e:48:fe:
b5:1d:2f:91:40:2c:55:43:f0:32:41:31:5d:29:45:
33:c1:d0:89:16:82:72:e7:94:4b:3a:c1:68:5f:f6:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D9:AC:01:64:69:34:13:FF:15:87:A5:BF:C1:F7:7E:CB:E2:D6:2C
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ad:cd:b7:31:25:24:16:2a:58:da:65:a5:44:d2:79:1e:64:
a7:c3:ad:7c:49:18:48:0b:16:fa:04:07:d3:b8:31:7c:be:a1:
3b:a3:16:81:41:22:2e:e1:f5:a6:89:eb:fd:9d:e5:f4:e3:6d:
47:8e:ea:6b:a0:32:c3:41:43:8a:7e:88:43:7e:90:a9:1f:cc:
5b:19:3b:84:da:74:ad:c0:97:d5:60:2e:59:3f:e0:d8:bd:fd:
18:49:ff:51:b7:01:25:ef:f1:54:36:1a:43:c9:bf:c8:11:1a:
60:3a:c1:f8:17:d9:ec:74:d3:ba:fd:f2:9d:65:3d:85:0f:f5:
a0:a8:d3:4c:01:5a:1a:f5:3a:1c:e4:b5:fa:a4:22:0c:14:6d:
37:21:35:bf:fd:5f:94:31:8b:f7:bb:30:5b:9a:27:1e:94:82:
1c:8f:eb:c9:b2:5c:5d:4d:a3:81:41:0c:a8:3f:db:6e:18:5d:
98:0e:2b:37:40:41:ee:2c:75:47:11:8c:05:6f:d2:7e:be:79:
1d:ba:f4:d1:2f:0e:16:19:62:23:49:91:c0:e6:5e:f9:9b:77:
ea:a8:9a:22:e9:b4:9b:9e:f2:99:75:29:cb:fc:32:fe:db:57:
59:89:47:1f:5e:ed:67:e5:1d:fa:6c:6d:c3:54:d1:39:b1:63:
86:88:e9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:55:34 2026 by rpki-client