
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
File: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft (raw, json)
Hash identifier: V/NWhqzeAKpPt+ZAG5VRACrlyNvcb1atsi+8C/JlMQk=
Subject key identifier: 49:AC:02:66:54:97:9C:9F:59:A4:E8:99:84:8D:4D:A5:C4:FB:96:77
Authority key identifier: 4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
Certificate issuer: /CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Certificate serial: 019FAB99DDA07FFD0899CDE73430626A2085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
Manifest number: 04AE
Signing time: Wed 29 Jul 2026 02:00:15 +0000
Manifest this update: Wed 29 Jul 2026 02:00:15 +0000
Manifest next update: Thu 30 Jul 2026 02:00:15 +0000
Files and hashes: 1: 9Nt7JZdu16GKF_G8iHyI3_Rh4wk.roa (hash: +HQk05zntNehbdvu8V8NKlpGF7j4PZhXHS02uV6BN8A=)
2: T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl (hash: fzHzgveCIvLYM2gtA9Im6SCotSC3j7/4J8sb8F1ofSg=)
3: oMePamcSuXSxfmF39ynMXweabv4.roa (hash: rGoYrQCZs2IM8glBNFHp5PUVvbo0qB19ajmf0wK0f8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:dd:a0:7f:fd:08:99:cd:e7:34:30:62:6a:20:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f73b056f8d0fa996d6833c30b1fd78e7d979ac4
Validity
Not Before: Jul 29 02:00:15 2026 GMT
Not After : Jul 30 02:00:15 2026 GMT
Subject: CN=49ac026654979c9f59a4e899848d4da5c4fb9677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d0:62:eb:e0:39:9c:19:d9:1e:08:90:00:12:
ce:81:44:46:b2:5c:7a:8c:9d:6f:40:ba:7b:e2:a7:
1e:75:fa:03:2d:b3:ff:a2:d2:2b:b2:56:8c:ac:76:
f8:8a:42:96:1f:3e:89:12:29:7a:f1:8d:cd:e4:11:
71:5a:e5:5e:22:62:fb:f2:f5:04:65:23:2a:18:16:
0d:a3:3a:83:b7:33:15:dc:e0:8d:b8:30:c5:e4:0d:
e7:b4:5f:a8:9d:eb:55:20:e9:c1:0b:44:6b:76:fa:
48:f7:69:9a:3c:8f:2e:aa:34:1a:51:98:6d:04:60:
e4:94:ec:09:c8:01:02:a3:2f:f1:d5:a9:b3:c2:ef:
fc:1c:97:52:56:89:67:f0:7a:56:62:06:d6:26:ec:
cd:92:77:a3:7a:71:6b:4f:c1:e1:61:61:c8:58:ad:
1d:6c:7e:3c:b7:37:43:39:b1:0f:dd:1d:eb:43:3e:
f5:15:3f:9b:08:82:2c:5f:f7:46:05:01:4d:5b:69:
3f:ef:53:13:f5:bf:bc:37:35:97:02:91:f4:0b:92:
41:1c:ed:ee:be:ff:b8:b1:46:71:a9:6e:44:80:da:
bd:f4:eb:53:d4:05:92:a2:ad:84:25:d9:27:2d:21:
c8:7a:d8:b7:1c:3c:f8:bf:94:40:2e:5f:3b:44:5e:
b4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AC:02:66:54:97:9C:9F:59:A4:E8:99:84:8D:4D:A5:C4:FB:96:77
X509v3 Authority Key Identifier:
keyid:4F:73:B0:56:F8:D0:FA:99:6D:68:33:C3:0B:1F:D7:8E:7D:97:9A:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2acb8f-222f-4473-9205-1390a2d99e0b/1/T3OwVvjQ-pltaDPDCx_Xjn2XmsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b3:41:84:69:d4:50:98:54:68:e5:40:d0:fc:22:f4:5e:33:
9c:2c:bd:91:25:e0:7d:45:b2:6a:e8:e4:d4:ac:00:47:18:1c:
98:82:86:db:3d:d1:9b:24:83:b6:14:0c:ab:a5:34:7c:92:65:
f3:72:11:07:7c:96:db:9e:98:ff:17:36:dd:42:d7:77:b2:5b:
4d:42:c5:dd:b4:01:42:ff:53:42:94:89:85:b3:31:82:18:2f:
eb:33:70:78:f8:36:51:df:7d:6f:ec:7d:e0:d8:41:ee:61:3a:
84:e5:0c:a3:ba:c5:e0:60:d0:f3:41:2f:5b:34:0b:57:af:47:
89:ca:27:c1:a9:12:10:c5:eb:9f:b8:d5:92:85:3e:d3:6c:c8:
38:aa:31:7b:8b:e4:ef:f8:4c:3f:4b:8e:92:9c:a2:5f:56:c4:
0f:4a:e1:84:f3:ff:17:c2:11:7c:5b:73:b3:4e:f5:cc:1f:7d:
7f:13:70:6d:bd:f5:bf:3e:0a:a6:c0:94:53:83:7b:20:2c:a7:
81:28:e6:b4:0a:f1:7c:56:15:b7:26:28:37:ac:be:e5:82:aa:
cd:b6:68:92:9d:22:1d:6a:fc:35:3e:0e:bb:b2:21:ba:3b:c7:
98:ed:b2:a6:a9:ab:89:d7:09:3a:23:65:14:dc:9b:b8:46:ba:
d3:a9:2c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:56:42 2026 by rpki-client