Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: MLO+Yyp5fQrZxzAiBvn+LnT6zQqjobQ5e/8qjiV7JsI=
Subject key identifier: 9D:12:65:21:D4:EC:10:F9:E9:6F:04:BA:CF:77:83:BE:86:92:F2:72
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 01A184BF030F88C7191EBB83EA2C1F230740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 05A3
Signing time: Wed 28 Oct 2026 23:01:12 +0000
Manifest this update: Wed 28 Oct 2026 23:01:12 +0000
Manifest next update: Thu 29 Oct 2026 23:01:12 +0000
Files and hashes: 1: 9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa (hash: +HQk05zntNehbdvu8V8NKlpGF7j4PZhXHS02uV6BN8A=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: SUynoXvs5YuY6IQ6BCztPCgkTFyohw/yXuAWU83pgDw=)
3: oMePamcSuXSxfmF39ynMXweabv4.roa (hash: rGoYrQCZs2IM8glBNFHp5PUVvbo0qB19ajmf0wK0f8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:bf:03:0f:88:c7:19:1e:bb:83:ea:2c:1f:23:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: Oct 28 23:01:12 2026 GMT
Not After : Oct 29 23:01:12 2026 GMT
Subject: CN=9d126521d4ec10f9e96f04bacf7783be8692f272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:d4:cf:f1:93:63:a6:5d:54:d1:13:08:b3:
81:cf:ee:f7:e0:98:eb:64:6c:fb:f9:b9:65:03:ad:
03:f9:40:5e:69:ac:14:d0:7a:bb:92:71:d7:18:d8:
27:e5:49:d7:52:d2:8e:cb:d7:4c:19:89:fe:3c:0b:
ea:c1:6a:98:b4:1f:f7:ad:64:02:4d:19:36:17:d5:
8a:2f:9b:9c:3e:b6:24:3e:69:34:88:36:20:25:fa:
dc:e1:19:6c:1b:52:0a:38:22:14:1d:db:69:ed:fc:
d3:a5:ed:93:4f:c9:33:24:10:00:ca:da:a9:9f:80:
10:6a:9f:c0:3e:c4:5d:fe:17:a5:62:93:6c:4a:5e:
64:91:f0:ab:d0:6e:b3:ed:96:c7:95:a7:21:2a:5d:
5c:78:e0:c6:49:d6:27:51:6d:a9:f1:d9:1a:02:f1:
22:74:19:49:1f:33:07:db:37:3e:4c:fa:65:e6:bd:
b9:97:ba:3c:63:7a:b2:bc:e2:28:80:c4:65:89:d3:
55:b6:2d:6c:40:0a:d3:c8:0a:50:b8:e5:0c:e4:c4:
73:47:a2:d8:ba:fa:34:55:0e:7e:88:0e:76:48:1a:
c9:3f:9e:e4:bf:2b:54:4c:2c:da:e5:80:a4:c4:15:
98:fe:f3:4d:ce:6c:3a:d4:49:fa:6f:98:fc:40:bd:
0e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:12:65:21:D4:EC:10:F9:E9:6F:04:BA:CF:77:83:BE:86:92:F2:72
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:5e:76:1e:c7:82:6a:2c:2d:01:c8:df:d9:54:de:92:58:9f:
d0:b7:ac:89:56:32:af:bc:af:91:2b:94:44:13:2a:98:7c:08:
68:a8:38:62:80:82:47:07:7b:95:10:e4:96:a5:8e:0f:f2:fe:
54:ae:6c:b2:ea:73:47:d7:47:ae:b0:16:ee:1e:ee:46:06:63:
f7:1f:01:2e:9c:ea:d3:3b:ce:51:30:40:0f:92:4a:77:29:30:
c6:77:15:90:70:a7:b3:d9:92:31:e0:ca:ac:5b:44:2e:12:d5:
27:bc:83:56:69:e2:1d:00:46:5d:81:81:9a:ed:c7:1e:a9:d3:
04:61:bb:8e:ac:f6:a4:52:21:b4:60:d4:72:b7:67:15:ed:1d:
46:e0:17:41:c1:30:3a:7d:1d:38:86:6e:79:6a:74:ff:9d:fa:
e2:7e:55:15:2b:5c:63:2c:1c:32:bb:49:22:a2:9f:14:ea:e1:
e6:5c:d2:e7:63:ff:bf:e4:b2:71:0b:66:45:6b:23:1b:41:a3:
85:66:3a:a2:5a:b9:39:91:d1:a2:55:d7:74:57:4a:cc:6d:17:
ea:14:6c:47:79:d5:62:72:f1:b6:cf:0d:f3:2f:7a:8c:cd:89:
6f:37:b1:b1:f7:4d:bd:07:0a:e5:f8:c9:06:b8:78:e7:af:ad:
88:0d:d9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:48:21 2026 by rpki-client