Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: S7TC84wgDwtd9R/4PSvQxcGAzkUOUOwt+5/paBN0K7w=
Subject key identifier: F4:A9:AA:19:C1:B4:3B:07:AA:2F:A3:F3:3E:67:DB:51:D2:61:65:FE
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 019EC1EDD2CA158FAD307377CBC40A2DEB86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 0435
Signing time: Sat 13 Jun 2026 17:00:49 +0000
Manifest this update: Sat 13 Jun 2026 17:00:49 +0000
Manifest next update: Sun 14 Jun 2026 17:00:49 +0000
Files and hashes: 1: 9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa (hash: +HQk05zntNehbdvu8V8NKlpGF7j4PZhXHS02uV6BN8A=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: Ujm10h40vroQzgA4irtvFDNsgoarmDhfWq+wk/9mAFI=)
3: oMePamcSuXSxfmF39ynMXweabv4.roa (hash: rGoYrQCZs2IM8glBNFHp5PUVvbo0qB19ajmf0wK0f8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:d2:ca:15:8f:ad:30:73:77:cb:c4:0a:2d:eb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: Jun 13 17:00:49 2026 GMT
Not After : Jun 14 17:00:49 2026 GMT
Subject: CN=f4a9aa19c1b43b07aa2fa3f33e67db51d26165fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:c9:64:86:f0:f0:7b:60:8c:19:f0:51:76:
46:16:38:c9:bd:12:71:34:e3:f1:82:28:34:a8:d1:
8a:bc:1e:14:3b:66:8e:48:71:58:9d:12:f3:e0:42:
66:10:31:dd:48:d0:09:73:3e:46:43:13:7d:24:4d:
c9:d9:22:92:a1:e2:6d:73:56:bf:64:e0:ba:90:14:
55:aa:fa:48:d6:f4:0f:f5:a1:8c:d9:13:d4:15:86:
c7:5a:ca:45:cc:4e:18:7f:d5:dd:9d:c4:89:97:ed:
a1:d0:14:89:3a:84:2b:44:8d:46:6f:77:f0:ad:66:
5a:89:1e:65:12:2d:99:fe:3d:0d:52:99:a0:7c:79:
43:49:71:53:74:49:c9:87:a7:10:4e:f0:da:a4:66:
31:1b:47:be:6c:ea:2e:09:fd:7c:9b:e0:f0:48:05:
b1:e5:5a:2c:89:4f:1c:f9:48:c1:a0:f7:e5:17:1c:
93:ee:55:c9:75:b4:bf:3d:14:3a:3c:c4:af:c6:02:
aa:bd:34:44:f1:55:dc:31:db:17:b7:c7:d1:22:de:
ae:52:d8:c9:0c:96:f3:85:e4:8b:e0:2a:cb:23:65:
b3:22:12:f9:a0:4f:7b:26:5f:b8:95:12:cb:5f:9b:
e0:77:9d:49:e6:3f:3c:c8:9c:13:16:a6:7e:d7:d8:
c6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A9:AA:19:C1:B4:3B:07:AA:2F:A3:F3:3E:67:DB:51:D2:61:65:FE
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:55:09:78:52:52:41:91:e4:ab:b2:b8:b2:9c:5a:90:43:8b:
0b:69:0f:72:6d:fb:7b:8a:28:32:b9:ed:b7:ca:a0:cc:10:5c:
98:32:bf:7b:71:53:f0:87:03:cc:69:be:1a:bc:a3:55:da:40:
b0:40:e2:01:fb:a0:a9:82:d2:b7:3f:59:d7:c0:1c:18:fc:a2:
16:16:ba:dd:d0:f9:51:5f:f3:ba:93:6b:37:ce:7b:14:0e:c8:
a4:c2:7e:3f:ca:bb:e2:d5:89:18:02:1a:08:0b:2b:6d:f6:b0:
81:4f:9b:e5:91:84:07:77:67:11:42:38:90:87:35:88:e3:c0:
07:68:1f:ef:f5:31:eb:65:2f:15:72:0a:06:71:1a:53:46:e4:
77:51:14:c9:7c:b7:27:52:77:de:0d:0c:50:fc:64:1f:d7:09:
74:28:7e:75:75:45:5f:92:43:46:9b:2a:80:c8:bc:73:92:f9:
9e:ff:a0:e1:aa:6e:e0:ed:ae:05:cd:20:10:fb:f8:a0:13:80:
a6:0f:94:c1:8b:20:38:20:4e:0d:f5:4b:25:0c:ec:91:2c:ba:
97:ee:4a:0e:6d:1c:a2:97:af:3c:5b:21:d4:4a:d6:34:7d:99:
f3:6f:6f:98:7e:b0:46:49:64:01:65:b0:73:38:3a:d2:22:4f:
8d:90:ac:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:23 2026 by rpki-client