Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: ssVRoRzycekjVBd2UaopzGP/siPiqGZz5ZJ5oydnq6M=
Subject key identifier: 73:EE:22:8F:27:F0:51:99:A9:32:4D:C8:5F:3A:AC:25:1B:C9:52:99
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 019F927EFA5B5FB704F52402277727320EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 04A1
Signing time: Fri 24 Jul 2026 05:00:22 +0000
Manifest this update: Fri 24 Jul 2026 05:00:22 +0000
Manifest next update: Sat 25 Jul 2026 05:00:22 +0000
Files and hashes: 1: 9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa (hash: +HQk05zntNehbdvu8V8NKlpGF7j4PZhXHS02uV6BN8A=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: SJkm7h95IDZM5vDI1S/1FNKuB4Q+oJAUs2Yu1fTSOqY=)
3: oMePamcSuXSxfmF39ynMXweabv4.roa (hash: rGoYrQCZs2IM8glBNFHp5PUVvbo0qB19ajmf0wK0f8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:fa:5b:5f:b7:04:f5:24:02:27:77:27:32:0e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: Jul 24 05:00:22 2026 GMT
Not After : Jul 25 05:00:22 2026 GMT
Subject: CN=73ee228f27f05199a9324dc85f3aac251bc95299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:96:d8:a0:30:75:d1:fb:63:06:40:f9:b0:06:
fd:d9:5e:6d:a6:c2:d6:4f:8f:0a:81:b6:e7:98:09:
41:53:ce:50:89:8d:90:c7:b9:62:a7:ef:b8:4c:0d:
98:19:ea:4f:76:e0:ca:e5:09:8d:e3:09:22:0f:5a:
6e:d6:fd:ec:7f:f1:12:87:65:5c:d1:4e:d0:be:18:
78:03:0e:14:e7:b2:0a:33:42:c1:99:cf:46:13:da:
5d:e2:80:c1:01:9e:36:27:27:0b:92:d5:63:36:31:
21:c1:77:38:4f:a8:09:e5:11:2d:dc:e7:cc:c9:a5:
a4:9a:df:5a:da:b2:31:6a:2a:9f:b9:a1:c8:ff:73:
bd:c6:92:66:03:52:dd:db:d9:11:7e:e9:1d:a7:31:
1d:6a:9e:6b:64:9f:34:91:b4:fc:fd:50:ad:e8:b2:
74:d0:ce:22:a8:bd:d9:d7:b7:61:2d:b4:61:5f:3f:
69:25:f9:35:d4:49:e1:ea:29:fc:f1:bb:a3:3d:2a:
d9:7e:f0:92:ec:9d:45:d4:0b:c1:f2:bc:45:24:6d:
da:34:01:59:93:a2:eb:3c:8a:7a:99:ce:ab:de:03:
19:60:c5:a4:0d:b4:2c:11:7a:fa:3d:60:08:78:a2:
4f:7c:fa:34:46:4c:f3:62:8b:08:f9:cc:f9:95:3b:
85:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EE:22:8F:27:F0:51:99:A9:32:4D:C8:5F:3A:AC:25:1B:C9:52:99
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9d:17:4a:be:63:7a:e2:6e:a9:d2:ce:a9:a2:d6:75:b0:a8:
b8:ea:71:1a:27:f3:23:75:9e:60:3c:d1:eb:d6:c4:e1:51:b2:
ad:f6:ce:36:1d:c6:99:82:a3:07:51:68:cf:df:ae:82:33:11:
79:5a:5d:d0:85:17:ef:ec:3a:43:d4:14:ed:83:bc:9d:55:55:
11:d9:dd:bb:0b:00:6c:e9:23:69:ac:c4:38:0f:c7:b9:c4:9d:
ca:29:5e:b3:9b:09:4b:e6:18:3c:32:8d:4e:8d:35:24:8f:dd:
af:9c:2d:6d:d1:1d:e3:24:56:c5:04:7c:84:41:38:04:b7:d3:
1d:76:db:10:82:4d:f3:0a:78:ca:a3:71:90:64:51:07:fc:b3:
a1:aa:98:98:5f:fa:d9:9b:51:a5:38:d1:88:ad:89:b8:30:d0:
e5:c9:6c:98:0e:bc:ce:56:99:a6:c8:ba:45:3c:01:0c:04:bc:
49:c6:42:57:34:85:4d:42:2c:d9:46:25:d9:6a:cb:ee:e0:ce:
90:2a:2b:a2:b1:c4:8c:20:4e:94:73:f4:f3:4a:4b:c2:3f:99:
cb:5a:35:3a:4f:34:ae:73:96:6d:49:fa:96:3e:fc:16:80:b8:
73:92:cb:46:57:5e:97:49:ea:a7:b6:ae:d4:7b:e0:e0:b0:1f:
da:7d:b5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:22:04 2026 by rpki-client