Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: 47XDmxQmV24MSC7liAI+ZJ6NBzq0a+x+3t2gbMfMbyw=
Subject key identifier: E9:8E:5F:59:D7:FD:E1:24:7F:F1:D5:6E:8A:FE:BB:06:91:99:9C:93
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 01A0C96B971386315FD8D794725C481A7414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 0542
Signing time: Tue 22 Sep 2026 14:01:06 +0000
Manifest this update: Tue 22 Sep 2026 14:01:06 +0000
Manifest next update: Wed 23 Sep 2026 14:01:06 +0000
Files and hashes: 1: 9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa (hash: +HQk05zntNehbdvu8V8NKlpGF7j4PZhXHS02uV6BN8A=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: pXVAwzFiODJqLiw4ykFNnNEen0MDwtvYlddvRbLz+/A=)
3: oMePamcSuXSxfmF39ynMXweabv4.roa (hash: rGoYrQCZs2IM8glBNFHp5PUVvbo0qB19ajmf0wK0f8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:97:13:86:31:5f:d8:d7:94:72:5c:48:1a:74:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: Sep 22 14:01:06 2026 GMT
Not After : Sep 23 14:01:06 2026 GMT
Subject: CN=e98e5f59d7fde1247ff1d56e8afebb0691999c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:a4:4b:00:6a:24:0b:2d:80:e3:1e:5f:65:
fe:1e:88:b3:01:db:8e:bc:4c:9a:da:fb:39:62:03:
73:65:f4:63:fb:a1:8e:a1:ee:f6:b7:24:90:e2:be:
f3:34:3e:cc:78:16:fb:9c:28:11:b8:54:ce:73:79:
73:b2:9f:ac:5c:83:48:e7:fc:31:d3:a2:9a:71:fa:
0d:b4:5a:8b:11:95:f7:c5:0a:3a:a4:ae:36:6a:7c:
59:e5:88:ee:e8:1c:9c:f5:33:53:50:9d:a1:49:68:
a8:b2:e6:f6:ae:e3:fb:7e:9c:93:20:87:cf:ec:14:
3b:5a:51:4b:23:25:79:30:ae:e7:8c:00:2d:63:d1:
91:84:d0:3d:92:52:15:74:f9:ee:38:0b:3b:59:71:
7d:95:7b:0c:c6:d8:be:19:58:7d:7a:cb:5f:b7:cd:
76:46:e0:d9:63:b3:c5:38:17:1d:83:f9:d1:c9:69:
03:bc:84:92:b7:2a:cc:4b:72:7c:c7:23:3e:06:02:
0d:02:26:94:f7:6b:6d:0e:eb:6c:82:20:5c:51:5d:
52:47:98:75:9f:5c:8d:cb:45:4c:3f:5c:35:be:80:
d5:dd:28:da:e7:2f:2c:1d:88:56:06:47:2a:9d:b5:
b7:be:22:32:fd:ae:7a:cb:fe:cf:85:af:09:b0:d0:
85:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8E:5F:59:D7:FD:E1:24:7F:F1:D5:6E:8A:FE:BB:06:91:99:9C:93
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7b:de:5b:0d:06:52:f7:f7:8e:4a:da:50:90:b6:c0:88:1d:
e2:bd:c4:c1:e1:7e:fa:12:de:dc:25:e0:f0:7a:29:a7:7d:05:
c7:0d:36:d1:8d:68:e9:b7:3a:7e:0f:70:c2:5f:69:b1:b4:46:
37:9e:30:10:ea:22:21:bf:d4:7b:0e:f6:e5:08:7c:99:e4:6c:
93:4d:e5:24:0f:b2:20:f7:d3:1b:41:09:03:bf:ac:66:37:e2:
f6:20:b7:a8:de:77:5f:e6:c4:99:1c:5e:67:fd:10:06:80:9d:
89:98:9e:23:cd:26:d4:ad:5e:d7:d3:7c:3e:59:b5:10:ca:9a:
05:7f:1c:99:fe:ab:35:e5:9b:0a:b7:10:e0:42:25:fb:fd:a4:
c8:31:e9:b1:28:bb:94:33:64:6d:92:b8:ae:70:e2:e9:01:23:
4e:d7:da:93:84:55:54:82:73:6e:a5:9c:22:3d:d0:82:05:e6:
20:92:2a:4d:41:cc:5c:35:a0:e2:9b:58:ea:25:ba:38:4d:24:
9d:5d:15:1f:60:d9:e6:7a:ee:90:7e:c4:e2:c7:30:e1:a9:43:
65:54:a6:cd:76:99:15:19:5e:88:01:ec:b7:d5:15:2b:3d:8c:
3a:e1:65:59:b0:74:1b:2b:68:7a:37:0b:c3:6f:98:0f:74:d8:
60:36:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:10:16 2026 by rpki-client