Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: wUncGBOecJMu4M/LuY0nLtybStfPPMN50S2uWaERKxU=
Subject key identifier: 23:0C:16:8A:65:EB:18:22:D6:F0:89:D5:0E:CF:90:0C:4F:C0:C3:7A
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 01A08D8D93E815B38210FD1DDEA97EB3E6CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 0523
Signing time: Thu 10 Sep 2026 23:01:00 +0000
Manifest this update: Thu 10 Sep 2026 23:01:00 +0000
Manifest next update: Fri 11 Sep 2026 23:01:00 +0000
Files and hashes: 1: 9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa (hash: +HQk05zntNehbdvu8V8NKlpGF7j4PZhXHS02uV6BN8A=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: dY/oKBBAXClflmULFvp06VI/Tklh1kYBT7ONytKfYAo=)
3: oMePamcSuXSxfmF39ynMXweabv4.roa (hash: rGoYrQCZs2IM8glBNFHp5PUVvbo0qB19ajmf0wK0f8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:8d:93:e8:15:b3:82:10:fd:1d:de:a9:7e:b3:e6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: Sep 10 23:01:00 2026 GMT
Not After : Sep 11 23:01:00 2026 GMT
Subject: CN=230c168a65eb1822d6f089d50ecf900c4fc0c37a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:2b:8b:fa:78:19:20:cd:ed:a8:76:3a:08:
03:22:2c:f2:75:8b:20:46:bf:6f:3a:a2:58:52:1d:
3c:75:5f:94:ed:cc:e1:39:69:6b:25:a3:85:03:d7:
17:8e:2b:66:6e:f4:04:20:60:b0:60:de:55:69:90:
e1:1c:48:0a:4c:a9:75:9d:78:36:85:47:ac:ee:42:
47:0b:da:95:7d:5d:72:8d:91:25:09:fb:01:6a:21:
77:ad:51:03:0b:ab:a0:1c:7e:a3:53:a9:e9:97:ba:
02:44:b6:56:13:e1:01:ae:71:aa:54:78:f6:f6:8e:
a0:5a:65:e4:2f:5d:f2:b9:31:b9:82:07:e8:39:a6:
3c:9d:8c:c3:6f:80:91:ba:17:28:74:6e:2f:08:47:
d8:c0:7b:14:7f:e4:61:54:65:3a:55:34:31:86:48:
98:d8:fe:6b:5f:49:eb:3d:c8:25:87:77:d5:fd:dc:
a3:59:af:0d:35:c1:2a:32:32:bd:fe:db:6b:96:5f:
6e:12:fe:56:7a:90:c5:49:ae:e5:63:4a:ba:04:c4:
e8:b6:e8:cb:f8:dd:9f:62:36:d3:40:92:d2:90:8a:
89:7c:9b:b0:9f:18:7f:4e:e0:b7:2f:da:ef:0b:d2:
0f:f4:fb:ff:34:09:2c:17:9f:3a:40:1c:c2:0a:da:
68:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0C:16:8A:65:EB:18:22:D6:F0:89:D5:0E:CF:90:0C:4F:C0:C3:7A
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ba:b7:04:97:2a:e4:3d:22:43:4e:3c:26:f4:17:b1:88:0e:
c7:e6:10:d7:64:54:6c:c0:46:58:62:65:e1:d9:3c:78:6f:91:
12:d7:b0:cc:b1:b7:4f:b5:79:97:9a:41:0c:b2:59:3e:5d:20:
be:98:3d:7e:e2:a3:37:e3:5f:36:aa:e0:af:40:fe:c7:f1:bf:
e3:ee:2e:ad:d0:a9:14:26:aa:58:94:06:23:01:c9:aa:5b:46:
37:31:2a:5c:68:08:5b:6e:5c:02:88:8d:fb:5c:88:f4:5b:a2:
ef:32:59:34:aa:65:e8:a9:6f:d9:63:b0:d5:42:8d:b9:3f:2e:
ff:ae:f9:55:cc:6e:ae:50:c0:94:cb:86:68:37:34:dc:ec:7c:
dd:dc:c1:f9:32:bd:12:51:61:18:53:33:b1:2a:35:78:6e:48:
ce:3a:91:1f:c3:1f:a9:0a:46:aa:60:0a:7d:3c:55:f3:ae:95:
8c:b7:21:8f:fc:6c:4b:30:3b:43:d1:c3:68:89:06:bd:ad:dc:
9d:a7:9e:fb:19:4f:f5:7a:ed:49:08:f7:f8:7e:7d:ca:e6:46:
37:77:0b:b6:d7:fd:df:d1:79:68:6e:7c:5e:89:4e:57:cd:8a:
9f:1c:37:30:80:f4:e5:5d:10:00:44:c7:7e:81:34:c7:48:4e:
a4:87:a6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:11 2026 by rpki-client