Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: aSIyhV+B1ytst/y2Jxb9rfHo3z1pKqL2LJFc+TZwsDM=
Subject key identifier: DF:4E:0D:0D:CB:12:31:A2:5C:CD:97:ED:FA:4A:CA:55:21:32:84:AE
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 019D9C638BA0D1406C98F2DD8B2BFDE3B385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 039D
Signing time: Fri 17 Apr 2026 17:01:02 +0000
Manifest this update: Fri 17 Apr 2026 17:01:02 +0000
Manifest next update: Sat 18 Apr 2026 17:01:02 +0000
Files and hashes: 1: 9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa (hash: +HQk05zntNehbdvu8V8NKlpGF7j4PZhXHS02uV6BN8A=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: RZaKFJ8ZXJQPXOyJFkAes2eHVqDQh61JuaFg0b+OcFI=)
3: oMePamcSuXSxfmF39ynMXweabv4.roa (hash: rGoYrQCZs2IM8glBNFHp5PUVvbo0qB19ajmf0wK0f8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:8b:a0:d1:40:6c:98:f2:dd:8b:2b:fd:e3:b3:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: Apr 17 17:01:02 2026 GMT
Not After : Apr 18 17:01:02 2026 GMT
Subject: CN=df4e0d0dcb1231a25ccd97edfa4aca55213284ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:7f:a7:2b:00:ce:56:1e:1e:0d:73:19:65:
f7:cb:e1:6b:f1:b4:ad:ce:86:c8:dc:58:80:1f:31:
02:73:71:60:44:fb:8f:5e:cb:22:69:9a:e1:d2:f1:
9b:c4:0c:db:0c:1b:0a:cc:85:90:7c:e0:50:fd:fc:
fa:45:02:73:9d:4b:a0:20:9c:a6:fb:31:3a:79:76:
55:6a:1a:c8:4e:e6:3c:fe:bd:7f:83:3e:50:94:17:
9b:5d:b0:93:c8:de:bf:63:88:e1:d3:61:47:7c:72:
71:16:ab:f4:96:db:36:a5:83:8f:21:10:d7:d7:ab:
7b:b1:94:0a:4d:3d:af:5f:18:9a:55:6b:48:bd:b6:
35:5e:c0:b6:c3:68:e3:73:0a:a3:85:76:89:c7:c8:
99:b0:8d:bd:c7:d5:02:ed:0d:18:fe:80:48:1d:b1:
d5:2c:1e:f4:72:a2:9f:7f:72:e4:b3:c5:4b:b2:e7:
06:89:3c:4b:ab:0d:68:ed:f2:4c:b5:0c:40:44:56:
a0:9c:e8:8b:9d:ff:76:7c:81:da:0f:4f:21:ca:b1:
5d:6f:41:b7:16:0a:68:04:01:f3:eb:ca:14:e9:74:
fa:51:b6:52:59:8f:9f:e4:48:d4:d6:94:64:c8:dc:
2b:b5:80:2d:b3:bc:67:d0:f0:9f:79:26:00:37:ff:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4E:0D:0D:CB:12:31:A2:5C:CD:97:ED:FA:4A:CA:55:21:32:84:AE
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d5:b2:30:65:a6:9a:a9:56:23:7a:8a:0f:10:cf:86:d7:bd:
8a:b4:8f:59:20:03:c8:14:05:c5:53:2e:c1:8a:d4:0a:66:1b:
94:e0:d3:b3:89:68:0e:6b:2c:1e:66:ae:a4:57:8e:92:57:ed:
19:de:8f:a9:0d:57:2a:f7:60:98:e4:b4:8b:c2:f3:f8:c2:27:
42:24:b8:f0:94:d7:a9:78:24:86:b3:bf:e6:d0:4f:25:b9:af:
95:1b:dc:4e:93:dd:e1:de:f6:c2:d2:16:6c:c3:e9:58:8a:98:
bb:8c:dc:40:51:89:96:43:4e:ee:43:87:d9:60:e4:77:c1:24:
4e:77:0e:2a:e9:a2:34:91:96:7e:46:c6:77:bd:8b:20:e8:38:
4a:68:f3:ae:d0:eb:a3:38:ef:74:34:2f:c0:e7:5c:d2:7e:5d:
7f:1c:a1:ab:63:f2:f3:ff:47:e5:37:6b:3f:44:78:a9:d4:b2:
40:6f:6f:93:cc:a1:70:36:e3:61:32:60:2a:3b:23:87:8f:b1:
ec:08:ec:11:fd:aa:ab:60:27:07:92:03:5a:a9:fd:b9:16:64:
de:f5:c7:e8:db:22:f5:bc:44:d0:cd:d5:c0:82:4b:a2:c3:cb:
6f:b2:b7:fd:93:7a:ef:3c:0a:37:45:9d:a9:1e:f6:ff:2f:68:
6e:db:49:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cY4ug0UBsmPLdiyv947OFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNzNiMDU2ZjhkMGZhOTk2ZDY4MzNjMzBiMWZkNzhlN2Q5
NzlhYzQwHhcNMjYwNDE3MTcwMTAyWhcNMjYwNDE4MTcwMTAyWjAzMTEwLwYDVQQD
EyhkZjRlMGQwZGNiMTIzMWEyNWNjZDk3ZWRmYTRhY2E1NTIxMzI4NGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAF/pysAzlYeHg1zGWX3y+Fr8bSt
zobI3FiAHzECc3FgRPuPXssiaZrh0vGbxAzbDBsKzIWQfOBQ/fz6RQJznUugIJym
+zE6eXZVahrITuY8/r1/gz5QlBebXbCTyN6/Y4jh02FHfHJxFqv0lts2pYOPIRDX
16t7sZQKTT2vXxiaVWtIvbY1XsC2w2jjcwqjhXaJx8iZsI29x9UC7Q0Y/oBIHbHV
LB70cqKff3Lks8VLsucGiTxLqw1o7fJMtQxARFagnOiLnf92fIHaD08hyrFdb0G3
FgpoBAHz68oU6XT6UbZSWY+f5EjU1pRkyNwrtYAts7xn0PCfeSYAN/9aXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9ODQ3LEjGiXM2X7fpKylUhMoSuMB8GA1UdIwQY
MBaAFE9zsFb40PqZbWgzwwsf1459l5rEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDNPd1Z2alEtcGx0YURQREN4X1hqbjJYbXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yYWNiOGYtMjIyZi00NDczLTkyMDUt
MTM5MGEyZDk5ZTBiLzEvVDNPd1Z2alEtcGx0YURQREN4X1hqbjJYbXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yYWNiOGYtMjIyZi00NDczLTkyMDUtMTM5MGEyZDk5ZTBi
LzEvVDNPd1Z2alEtcGx0YURQREN4X1hqbjJYbXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdWyMGWm
mqlWI3qKDxDPhte9irSPWSADyBQFxVMuwYrUCmYblODTs4loDmssHmaupFeOklft
Gd6PqQ1XKvdgmOS0i8Lz+MInQiS48JTXqXgkhrO/5tBPJbmvlRvcTpPd4d72wtIW
bMPpWIqYu4zcQFGJlkNO7kOH2WDkd8EkTncOKumiNJGWfkbGd72LIOg4SmjzrtDr
ozjvdDQvwOdc0n5dfxyhq2Py8/9H5TdrP0R4qdSyQG9vk8yhcDbjYTJgKjsjh4+x
7AjsEf2qq2AnB5IDWqn9uRZk3vXH6Nsi9bxE0M3VwIJLosPLb7K3/ZN67zwKN0Wd
qR72/y9obttJDQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:23:54 2026 by rpki-client