Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: WwVudKErdaQLe1DtB5PAl0kq/0WnUvYOHvuuM/Joaxg=
Subject key identifier: 71:57:D7:A8:E7:3E:85:12:A2:44:A4:32:B9:5E:D1:46:6D:C9:02:DC
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 019FA1F2A4BF41373DE3E62BE75CE9098B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 04A9
Signing time: Mon 27 Jul 2026 05:01:01 +0000
Manifest this update: Mon 27 Jul 2026 05:01:01 +0000
Manifest next update: Tue 28 Jul 2026 05:01:01 +0000
Files and hashes: 1: 9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa (hash: +HQk05zntNehbdvu8V8NKlpGF7j4PZhXHS02uV6BN8A=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: bnKcqejkR97H8SZEj2ykbEez2i/24TD3a1csQ3/DVh0=)
3: oMePamcSuXSxfmF39ynMXweabv4.roa (hash: rGoYrQCZs2IM8glBNFHp5PUVvbo0qB19ajmf0wK0f8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:a4:bf:41:37:3d:e3:e6:2b:e7:5c:e9:09:8b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: Jul 27 05:01:01 2026 GMT
Not After : Jul 28 05:01:01 2026 GMT
Subject: CN=7157d7a8e73e8512a244a432b95ed1466dc902dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8b:ce:ed:4b:92:2c:b4:fe:4f:b8:e3:da:61:
5b:6b:c1:ed:84:c8:5f:c7:2f:3f:23:24:af:65:06:
78:c9:a4:29:76:fb:da:7d:45:e1:5c:8a:19:f8:3b:
32:b8:af:e7:5e:25:93:13:ff:30:a9:7a:a6:c8:4e:
fb:ac:31:14:7d:3e:92:b4:10:6f:bd:82:74:63:95:
12:ff:8b:65:98:bd:6b:80:cd:37:ba:c2:82:1e:ed:
41:75:57:dc:c8:53:75:c9:e8:71:89:3e:4a:34:bf:
58:c6:a4:65:0a:e2:e0:44:33:0e:d2:b3:bc:af:3c:
40:72:39:35:4a:cf:3b:34:6b:e0:c2:53:6d:ae:b6:
f9:a3:bf:5a:eb:88:01:b9:c9:4c:b0:22:84:33:0c:
6e:50:15:8e:73:08:b5:51:d7:90:8d:7b:7f:79:40:
38:28:35:55:56:57:fa:30:3b:8c:19:35:d4:1a:88:
b2:d8:02:46:df:f0:5c:3c:9f:11:57:ba:d5:50:69:
05:ab:b6:19:47:58:ff:1a:15:a8:b3:f9:f0:1e:d0:
74:68:b2:4a:08:1a:40:9a:75:12:a0:07:db:83:49:
e9:79:38:b3:27:06:43:44:24:c4:1a:34:2f:ef:f6:
74:9a:53:be:81:fc:4b:07:92:0b:13:b0:dc:15:ab:
44:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:57:D7:A8:E7:3E:85:12:A2:44:A4:32:B9:5E:D1:46:6D:C9:02:DC
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6e:ad:c3:bc:9c:7f:52:15:a5:56:c5:2d:20:c2:2c:99:e8:
e8:9a:fd:ba:01:9a:2e:a5:72:85:fb:7f:d4:a4:15:32:a7:d3:
60:7f:9f:2c:d4:cd:98:ac:b6:ab:4d:46:5c:e7:07:ef:29:4c:
5b:f5:82:f4:c8:d6:d7:c7:6c:9f:5a:84:6a:56:e4:48:38:91:
bd:26:7f:43:20:da:c6:f6:03:c6:ba:8c:1c:3d:58:7f:a7:15:
c4:25:82:51:19:d2:46:55:d3:a2:90:32:ed:06:de:4a:2a:a0:
d0:37:c7:cc:4d:6b:32:78:17:d1:9c:a0:1f:ab:8e:fb:12:02:
81:50:d1:e0:e0:e4:08:dc:bd:5f:a7:c8:aa:f1:ff:5e:3e:be:
0b:c1:09:ec:c1:05:14:eb:44:08:86:da:6c:6a:e3:21:08:02:
03:cf:40:11:84:3d:9d:b8:25:0e:85:e2:da:10:ca:c2:28:0a:
e5:d3:bf:f6:95:85:16:c7:57:ac:1f:23:fe:78:4d:93:1e:b9:
27:37:40:5b:00:cb:06:53:73:73:c1:7b:73:51:a0:05:5f:f4:
59:d6:8b:9c:7b:61:3d:0f:00:0e:ed:99:c2:00:70:21:a9:13:
21:73:1e:29:56:9a:eb:bc:53:13:0d:4c:af:b1:76:2c:3a:36:
15:8e:60:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:50:51 2026 by rpki-client