Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: taOapyuWBgMFF62H8RDVD8/l+MqTnRSX1O+7YH6bdqA=
Subject key identifier: B7:2E:F8:A1:31:B5:50:EE:F2:CF:48:92:60:83:7A:A2:9D:B5:91:AC
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 019D38D2BDDD90FD416C37F51D94DEBF165B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 0822
Signing time: Sun 29 Mar 2026 09:00:28 +0000
Manifest this update: Sun 29 Mar 2026 09:00:28 +0000
Manifest next update: Mon 30 Mar 2026 09:00:28 +0000
Files and hashes: 1: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: ov4AwfFKJRxfsOVWeTkRIR4cmpKIG1y/nVZxnJJSNn0=)
2: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (hash: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U=)
3: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (hash: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:bd:dd:90:fd:41:6c:37:f5:1d:94:de:bf:16:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Mar 29 09:00:28 2026 GMT
Not After : Mar 30 09:00:28 2026 GMT
Subject: CN=b72ef8a131b550eef2cf489260837aa29db591ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:8a:b0:0b:82:1b:d9:89:47:40:40:a6:cb:
42:63:92:07:e4:49:d9:79:2a:74:71:d5:50:ff:8e:
db:da:6a:97:56:d0:25:14:d2:a7:8c:ff:35:53:b3:
4d:04:68:c7:e0:e3:60:33:c9:c1:a0:6a:5b:1f:48:
a8:78:b1:7a:34:1e:e2:b2:6e:43:ff:2b:b1:b7:10:
54:d2:cf:cc:68:6c:e0:be:f0:dd:d6:e0:1d:42:9b:
42:3e:97:ee:cd:ea:a8:77:43:cc:60:e3:d0:94:00:
1b:f8:5e:b6:a4:d3:a8:c7:4a:39:38:7f:bc:40:79:
42:ce:a8:69:76:2e:88:3e:97:a8:d3:13:48:66:a0:
e7:d8:22:30:c4:88:31:d3:bc:f6:f9:ce:b0:4e:d2:
24:48:74:72:f6:e5:24:81:84:58:2a:91:19:0a:f2:
c5:b0:0a:81:7c:78:b3:6e:2e:58:34:93:03:85:a4:
4b:42:93:d8:fd:88:20:31:18:3c:06:d0:da:8c:a8:
9d:0d:fb:94:d5:de:81:c3:5c:97:f1:9f:66:1d:8a:
b1:0d:fb:9c:17:bf:2d:36:cd:39:68:e1:87:f6:f5:
87:0b:11:c0:b7:c7:55:58:70:07:a8:d0:b6:c6:0d:
09:db:2c:0d:5f:98:d5:f5:0c:1d:8e:74:34:2b:96:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2E:F8:A1:31:B5:50:EE:F2:CF:48:92:60:83:7A:A2:9D:B5:91:AC
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b9:e0:d8:52:35:9e:7b:09:22:ea:2c:6b:45:6a:3c:b1:84:
d5:be:77:bc:bd:dc:35:b1:52:38:46:81:1b:86:d8:88:5c:7f:
b8:2f:42:cb:28:97:ff:70:01:94:82:2a:6b:96:be:88:c6:41:
a0:de:6e:86:33:c5:d1:96:a0:f9:f0:c2:d5:0d:51:7d:4e:e9:
c0:04:7d:da:d1:3f:ef:fc:a7:a2:22:7e:01:70:12:36:6f:a2:
a5:18:53:09:10:7a:80:41:c8:8e:b7:a5:a0:02:03:f6:62:0e:
07:b3:b0:69:f3:67:e2:60:be:1f:31:df:27:1a:75:5e:46:90:
f0:72:fd:a3:bf:87:2d:c0:66:62:00:ae:9b:f0:2b:bd:2e:d7:
7f:1b:27:64:9f:3c:5f:82:80:d4:42:7e:10:74:12:7c:2a:dc:
f7:df:f0:00:f9:20:dd:40:e1:da:99:db:d2:1d:9f:c7:d5:b8:
33:5a:77:08:83:cb:1c:79:88:dc:19:06:1a:e5:7d:c9:49:24:
f1:49:9c:79:72:96:d0:1a:c8:29:50:20:04:2b:0f:35:4d:84:
9e:5f:63:0a:a4:d6:15:e8:75:c7:83:7b:bc:95:71:76:0d:c7:
63:1d:19:42:51:a4:b9:e6:d6:e5:68:9a:6d:57:e8:32:3e:a2:
25:96:cf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:34 2026 by rpki-client