Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: UpJA6DlJw4QFsK5WpD7luNPpb10VKxjA/a+wSvzw8AE=
Subject key identifier: 5E:95:56:EE:A3:6A:09:D4:A9:32:12:A1:9C:DE:0B:02:37:70:EF:95
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 019CE4EC8C6A5820AFC4542402D9218AF0BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 033E
Signing time: Fri 13 Mar 2026 02:00:33 +0000
Manifest this update: Fri 13 Mar 2026 02:00:33 +0000
Manifest next update: Sat 14 Mar 2026 02:00:33 +0000
Files and hashes: 1: 9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa (hash: +HQk05zntNehbdvu8V8NKlpGF7j4PZhXHS02uV6BN8A=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: 8vA4oWArOhFbvObMDqe0vfrJPa8ceV9Gs9sg2hkPduo=)
3: oMePamcSuXSxfmF39ynMXweabv4.roa (hash: rGoYrQCZs2IM8glBNFHp5PUVvbo0qB19ajmf0wK0f8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:8c:6a:58:20:af:c4:54:24:02:d9:21:8a:f0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: Mar 13 02:00:33 2026 GMT
Not After : Mar 14 02:00:33 2026 GMT
Subject: CN=5e9556eea36a09d4a93212a19cde0b023770ef95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:ea:27:3d:27:d3:33:3f:ee:99:f5:f4:51:
89:a3:ff:9c:9b:98:f4:2b:0e:28:df:cd:27:74:fe:
5c:f0:ed:79:28:ac:05:94:d8:0a:eb:50:b5:3e:75:
d2:4e:1a:7c:2d:82:42:0b:49:4d:6d:5e:57:50:c2:
e5:cd:8c:a5:53:5a:b5:19:4e:86:1c:b1:9f:6e:31:
6a:69:66:32:0c:a4:1e:41:cf:69:3e:40:e7:0a:1b:
47:b3:63:5e:02:a6:cf:57:7b:1c:92:84:31:fc:b3:
8a:16:b9:23:d4:40:30:f6:79:94:52:8c:11:75:cd:
c9:76:d5:ad:3e:01:f2:16:af:aa:8b:b2:6a:21:d2:
bb:24:5e:2f:36:70:e3:5b:80:a3:9c:a2:14:7f:0c:
f1:1b:6b:92:66:b3:26:ec:13:a6:5d:0f:80:f9:2e:
24:55:ef:84:92:e7:06:5b:fb:81:75:8e:6e:6a:ac:
5d:63:fc:f7:c2:14:68:09:e6:a7:76:d5:f5:5d:98:
5b:4c:0f:63:78:40:03:30:65:bf:92:63:39:7b:9e:
e9:85:47:91:8b:b9:de:e7:25:66:6b:a2:42:25:15:
3e:55:34:26:fa:f6:bc:72:87:3e:08:f8:26:c7:aa:
71:cf:0c:13:35:07:71:57:12:90:13:ec:f4:0b:ea:
aa:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:95:56:EE:A3:6A:09:D4:A9:32:12:A1:9C:DE:0B:02:37:70:EF:95
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:34:5e:05:1d:db:9d:1c:8e:9e:c1:59:0e:7a:dd:7d:c1:94:
7e:2a:87:fe:a4:41:45:47:c7:d6:38:e5:3a:56:3d:9e:50:de:
86:82:85:cb:bf:e6:fc:41:a9:19:b2:3a:0e:cc:7b:c8:95:54:
3d:46:f8:51:06:aa:1a:a6:4b:e6:81:39:12:3d:28:9d:4d:3b:
12:29:c9:e9:4e:11:cb:25:7c:73:21:05:39:89:45:1c:20:a9:
f3:03:08:54:a9:d0:9d:ef:6f:b9:5c:cd:a4:2a:31:5c:0f:ec:
8f:57:af:2d:39:dc:41:4d:a9:57:cb:27:cb:81:d3:cf:f9:f1:
86:2c:26:48:19:a0:9d:81:71:eb:b3:fc:bd:ad:80:28:c5:d8:
51:54:02:2f:c7:a9:7a:f3:a4:0a:9c:6d:cf:f8:5a:56:9a:34:
74:fa:a4:f3:ba:8c:e4:51:9b:a2:8b:b1:c3:e3:22:ae:1b:8e:
25:5b:fc:b9:e5:c7:43:03:fd:96:3f:6a:aa:44:79:8b:ef:ad:
76:eb:12:0d:37:b8:86:f7:1c:36:f1:f6:d2:a8:ef:3f:2c:f8:
41:6f:3c:2e:95:af:b2:ad:7c:36:09:62:9d:9e:c2:b3:5a:76:
80:cd:b6:1a:1e:18:25:ef:ae:1a:b8:e8:32:9c:4b:9c:51:f4:
2b:18:49:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:27:44 2026 by rpki-client