Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: HAViCRAqIn1tGPxQoV4tm+wR6OFb9ejwYHfbr+LNTbU=
Subject key identifier: 78:77:49:26:47:7C:66:F5:49:CB:F9:54:3A:0C:AF:B3:8F:7C:02:EF
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 01A010E23AABAE52C17119A71C1990F68A30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 099B
Signing time: Mon 17 Aug 2026 18:00:56 +0000
Manifest this update: Mon 17 Aug 2026 18:00:56 +0000
Manifest next update: Tue 18 Aug 2026 18:00:56 +0000
Files and hashes: 1: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: 0p4eCmDj/LSB5ZVB5rOMV7l1J7wzkuu8Enyyc3427jY=)
2: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (hash: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U=)
3: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (hash: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:e2:3a:ab:ae:52:c1:71:19:a7:1c:19:90:f6:8a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Aug 17 18:00:56 2026 GMT
Not After : Aug 18 18:00:56 2026 GMT
Subject: CN=78774926477c66f549cbf9543a0cafb38f7c02ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b0:5c:1e:31:a0:12:6a:33:fa:55:e8:7f:31:
3e:fb:62:84:df:ae:f9:8a:a6:31:22:68:4b:d0:fe:
a2:ac:a5:7b:bf:1c:cd:b1:27:7b:49:2d:f8:f6:d3:
86:a9:33:da:1b:64:96:3a:18:91:78:9c:b3:7a:98:
fe:f7:f9:04:09:68:cd:dc:16:67:41:6f:34:c9:6e:
0c:24:7e:fb:6a:95:4b:fa:c7:1e:bc:1d:a9:0d:91:
55:47:a9:72:e5:27:24:b7:30:46:ee:4a:ec:c8:22:
cb:a2:d3:00:8d:b3:4a:f8:67:4d:af:d3:fe:0b:ac:
45:b9:29:4e:9a:55:54:4a:00:0e:b4:66:30:59:2b:
55:ce:75:0d:af:83:f0:df:99:d7:93:9d:ca:82:c4:
ff:c1:7a:30:2c:6c:be:ce:d6:3c:88:da:82:42:73:
20:cd:fc:33:05:73:22:c3:b1:d0:46:ac:f2:6d:12:
7f:0b:63:ed:46:6c:4d:d1:53:be:51:dc:93:3c:ef:
46:67:2e:4b:a0:4e:7f:e4:ca:bc:39:7a:5e:bd:86:
5e:70:2b:3a:28:15:57:36:c8:b6:c0:02:ed:ea:e3:
c8:db:c1:d6:76:91:c6:cc:fc:ad:43:e4:8e:0e:eb:
c1:5b:7b:b1:08:46:29:c0:13:e7:2b:df:17:45:f9:
b9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:77:49:26:47:7C:66:F5:49:CB:F9:54:3A:0C:AF:B3:8F:7C:02:EF
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:7e:18:0a:ed:35:32:f1:30:42:e8:20:5c:b4:d7:f8:7d:ae:
5f:2c:95:de:18:82:2e:2f:c0:16:48:35:ad:7e:c9:76:97:ef:
20:97:a7:50:4b:76:06:a1:99:2d:83:8f:86:b5:33:27:43:85:
cf:05:7f:ed:77:40:43:1f:0a:42:61:e1:ad:35:51:47:85:3c:
66:0b:80:3d:85:bc:df:a4:c2:8a:7b:ed:55:48:31:19:eb:9c:
8e:15:07:4d:7e:80:07:21:1c:f2:dc:af:d5:ea:a1:0f:ea:f8:
cd:e4:e3:ae:71:c2:41:6f:3e:bd:c1:19:00:c7:8f:7d:6b:76:
20:bd:06:75:5b:88:79:23:0c:86:23:9c:bf:ab:cc:20:83:cf:
9b:ff:d8:50:fc:e7:98:2c:0c:28:53:0d:29:a7:a7:35:71:07:
02:cd:b0:cd:9f:18:56:52:3a:0c:9b:45:f4:24:42:6d:04:f5:
b5:6d:cd:3a:44:26:68:ff:5e:5e:a1:a3:d5:b3:f9:f2:6e:2a:
c2:ee:b6:b2:5e:07:63:98:70:ed:fd:62:23:2b:00:37:12:ee:
97:4b:45:a0:53:c9:ef:97:75:f9:62:f1:ef:a7:44:46:80:7d:
57:31:db:0e:e7:e9:49:94:77:ef:9e:b9:f5:c8:c3:c1:9f:74:
4c:2b:18:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAQ4jqrrlLBcRmnHBmQ9oowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNzVmYzhjNDVkMzYxMDEwMDg4MzcxMTljYmZhODRhZWUx
OWUyOWEwHhcNMjYwODE3MTgwMDU2WhcNMjYwODE4MTgwMDU2WjAzMTEwLwYDVQQD
Eyg3ODc3NDkyNjQ3N2M2NmY1NDljYmY5NTQzYTBjYWZiMzhmN2MwMmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrBcHjGgEmoz+lXofzE++2KE3675
iqYxImhL0P6irKV7vxzNsSd7SS349tOGqTPaG2SWOhiReJyzepj+9/kECWjN3BZn
QW80yW4MJH77apVL+scevB2pDZFVR6ly5ScktzBG7krsyCLLotMAjbNK+GdNr9P+
C6xFuSlOmlVUSgAOtGYwWStVznUNr4Pw35nXk53KgsT/wXowLGy+ztY8iNqCQnMg
zfwzBXMiw7HQRqzybRJ/C2PtRmxN0VO+UdyTPO9GZy5LoE5/5Mq8OXpevYZecCs6
KBVXNsi2wALt6uPI28HWdpHGzPytQ+SODuvBW3uxCEYpwBPnK98XRfm5pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHh3SSZHfGb1Scv5VDoMr7OPfALvMB8GA1UdIwQY
MBaAFN11/IxF02EBAIg3EZy/qEruGeKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMt
MGNjNTE2OGVhMTVhLzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMtMGNjNTE2OGVhMTVh
LzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMH4YCu01
MvEwQuggXLTX+H2uXyyV3hiCLi/AFkg1rX7JdpfvIJenUEt2BqGZLYOPhrUzJ0OF
zwV/7XdAQx8KQmHhrTVRR4U8ZguAPYW836TCinvtVUgxGeucjhUHTX6AByEc8tyv
1eqhD+r4zeTjrnHCQW8+vcEZAMePfWt2IL0GdVuIeSMMhiOcv6vMIIPPm//YUPzn
mCwMKFMNKaenNXEHAs2wzZ8YVlI6DJtF9CRCbQT1tW3NOkQmaP9eXqGj1bP58m4q
wu62sl4HY5hw7f1iIysANxLul0tFoFPJ75d1+WLx76dERoB9VzHbDufpSZR37565
9cjDwZ90TCsYFQ==
-----END CERTIFICATE-----
Generated at Tue Aug 18 01:08:55 2026 by rpki-client