Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: 3u9hycdtT5g1MGd6+4WcY0k5jI0Qy9iUnEEMxkX6yJA=
Subject key identifier: 85:68:6B:B3:1C:DD:F4:47:31:21:B1:51:CA:A7:FA:36:A9:70:AF:3C
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 01A11786667A879177A436EF4AC1CD317290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 0A23
Signing time: Wed 07 Oct 2026 18:00:46 +0000
Manifest this update: Wed 07 Oct 2026 18:00:46 +0000
Manifest next update: Thu 08 Oct 2026 18:00:46 +0000
Files and hashes: 1: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: gliHweVf5NorBBT8GyBBOf8+DL7jqkL/rw+ubnhnx/E=)
2: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (hash: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U=)
3: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (hash: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:86:66:7a:87:91:77:a4:36:ef:4a:c1:cd:31:72:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Oct 7 18:00:46 2026 GMT
Not After : Oct 8 18:00:46 2026 GMT
Subject: CN=85686bb31cddf4473121b151caa7fa36a970af3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:83:e4:81:96:d2:0c:2f:bd:42:d1:d9:8a:31:
e8:19:d8:73:41:02:3f:15:24:e7:62:a5:0b:d6:21:
bd:9e:63:ff:df:c6:5b:61:05:1b:5f:31:67:f6:f3:
ea:8f:ed:ad:b4:a5:8b:70:e0:d3:26:f8:66:11:4e:
e2:6e:e8:3f:54:4f:80:12:33:a0:81:a0:dc:d7:33:
b5:e3:73:8f:74:ec:d6:96:88:b6:f0:98:97:af:75:
c7:94:43:36:2b:c2:59:0a:76:65:71:03:14:ba:90:
e0:db:6d:4e:0d:f1:8c:80:15:f2:97:cd:58:04:a3:
26:fd:a3:56:eb:0f:e4:04:b4:49:ed:ca:14:cd:f2:
1f:bd:0d:82:99:8d:33:95:9c:d1:26:af:9c:af:0c:
3e:6f:ab:0d:47:4a:5a:76:20:e3:6a:cc:18:3e:8b:
4a:0e:2d:25:4c:5c:cb:61:e5:45:76:a1:92:d8:ad:
19:61:4f:33:b2:8a:03:a0:b7:8e:76:d9:92:55:36:
d2:4f:16:15:80:f4:99:ff:08:c7:ef:c0:f7:71:1c:
e7:0a:df:7b:64:5e:5a:60:70:73:72:cf:e1:27:6e:
5f:37:5d:2f:e5:6b:47:59:27:ce:93:34:85:fd:16:
18:fe:52:2b:15:d1:40:4f:48:18:f7:43:14:9f:be:
99:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:68:6B:B3:1C:DD:F4:47:31:21:B1:51:CA:A7:FA:36:A9:70:AF:3C
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2e:8d:17:2d:84:51:4b:4d:cf:c5:07:48:24:97:00:1f:48:
c7:b1:c1:80:76:d7:20:59:90:f9:ad:1b:59:49:03:09:af:86:
54:aa:b9:82:f6:3a:e0:82:be:bd:74:16:0d:af:b3:b2:68:65:
90:44:47:1d:27:21:fc:63:1b:1d:10:b3:9f:44:6a:7c:d5:f9:
82:f2:4c:96:58:95:13:68:b2:fb:90:c6:b3:83:33:b0:91:93:
85:28:5d:3e:ce:77:e9:a8:3a:61:e4:ac:0a:b1:c2:87:23:c4:
32:72:9c:ff:3d:3f:af:af:f0:61:5c:3c:6f:d0:83:13:3b:23:
c2:b3:03:3c:7c:86:70:a2:44:18:e8:80:9f:f0:46:17:5e:b0:
63:c1:a2:7f:e0:39:c2:3d:15:52:11:fd:a7:0c:af:16:1f:83:
85:8d:d6:88:1a:8c:db:5d:58:2d:04:e5:66:85:59:26:8f:09:
4b:cc:ef:c9:cc:ee:89:79:21:5d:08:a0:13:e7:c1:b2:7b:7a:
26:a3:5f:bc:3d:70:35:33:1b:38:06:70:00:6e:c2:13:81:59:
19:f8:aa:38:f8:b4:1b:0f:61:68:ea:1c:9e:7c:54:fa:e1:4a:
c4:de:b0:c4:c8:99:3c:ba:30:7a:06:1c:f2:06:7e:2b:8a:48:
5c:d2:40:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:59:18 2026 by rpki-client