Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: 37bl53/ftuJz3y/OQtnRXM+sLqou4uoSZ801oCcw3+c=
Subject key identifier: A5:BE:8A:08:3A:8A:82:93:84:46:B1:38:55:41:20:CE:BA:D5:69:BC
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 019E1DC78E68FF006407D5D9C528AF0E372A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 03E0
Signing time: Tue 12 May 2026 20:01:17 +0000
Manifest this update: Tue 12 May 2026 20:01:17 +0000
Manifest next update: Wed 13 May 2026 20:01:17 +0000
Files and hashes: 1: 9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa (hash: +HQk05zntNehbdvu8V8NKlpGF7j4PZhXHS02uV6BN8A=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: Ic8F0EpGKRK63RYSHz1vkf8COjeKxv+2vr4VxwcYitM=)
3: oMePamcSuXSxfmF39ynMXweabv4.roa (hash: rGoYrQCZs2IM8glBNFHp5PUVvbo0qB19ajmf0wK0f8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:8e:68:ff:00:64:07:d5:d9:c5:28:af:0e:37:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: May 12 20:01:17 2026 GMT
Not After : May 13 20:01:17 2026 GMT
Subject: CN=a5be8a083a8a82938446b138554120cebad569bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:b2:0c:23:09:0f:7a:b3:10:23:ce:be:f4:
99:12:5d:ca:24:97:39:55:f3:db:53:4d:ae:b7:cf:
4b:74:c7:9c:22:2c:ab:94:3a:5a:65:ea:75:82:d8:
46:e1:aa:19:9c:5c:d5:09:48:d8:0e:44:60:54:7d:
04:72:8e:40:91:d4:38:4c:87:0a:e3:9e:eb:6e:27:
c5:22:65:da:44:a8:ef:e4:94:dc:0f:f8:ee:00:48:
18:2e:8e:94:b4:bb:26:9f:c5:a1:4d:ee:b4:e3:56:
17:9d:56:ac:94:8b:bc:a3:fd:25:8c:a6:0c:8d:40:
66:ae:42:3e:ea:f4:0d:b1:43:01:42:b0:76:17:40:
e6:b3:a9:ad:50:b8:d6:d0:78:1b:77:c9:c2:06:47:
d8:22:68:ec:4b:e5:75:c5:a4:ab:9a:63:dd:6f:90:
5a:3f:77:a5:55:a1:59:4d:ad:cc:2d:2d:2f:1e:e1:
e1:b4:9e:dc:9e:ea:e5:5d:37:29:47:72:b2:4f:2a:
04:bc:96:15:22:bd:1b:24:0a:82:22:b0:ee:7b:6d:
e5:41:17:b1:07:5b:c7:2f:1e:e2:5c:75:9f:5d:46:
5d:d7:7f:fd:a0:20:2e:bf:6e:40:51:16:e1:03:8f:
81:b6:66:39:76:9f:b4:40:cc:cb:c7:15:c9:12:a3:
8f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BE:8A:08:3A:8A:82:93:84:46:B1:38:55:41:20:CE:BA:D5:69:BC
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:45:11:31:e3:b5:e0:b2:5f:7c:78:a8:e1:11:0d:53:5c:6a:
ae:65:95:b2:8a:2f:52:68:85:d7:39:0c:f2:a7:de:cd:2a:8f:
71:de:ff:9c:22:43:80:f2:8d:3d:de:fb:9b:13:56:2b:7d:ef:
7b:71:63:c8:ad:95:68:85:ae:55:c0:09:30:73:e9:79:b6:c4:
25:92:77:de:00:0e:1d:6c:05:14:ec:60:b6:07:c8:40:16:28:
1d:43:4a:fd:33:cf:07:3f:18:07:f5:85:c4:e7:78:ed:69:51:
83:ab:65:77:3f:9d:f8:1f:ab:52:fb:ca:cc:83:ab:43:6d:c7:
97:64:76:70:76:83:e7:f1:a9:81:00:84:16:ee:58:63:e2:ae:
13:bc:06:e7:57:5e:60:3c:f9:96:b4:a8:5b:17:f9:73:b7:66:
60:3b:86:8a:32:15:02:0d:a3:cb:75:93:2f:b2:1f:d7:22:79:
db:6a:88:e8:36:31:19:c2:e3:52:fb:fc:36:f5:d6:fc:45:4a:
d2:95:b1:9f:1d:cf:63:f6:de:42:83:ff:7f:4f:e4:94:94:2b:
84:22:cf:27:c9:97:e4:88:08:97:03:9a:10:bd:f8:12:1e:1a:
df:36:c0:3d:6b:6a:5e:88:77:fd:d1:57:ae:52:d9:06:01:b7:
fe:e6:5e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:33:56 2026 by rpki-client