Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: 59A2DebSt5/IPcSLNGF0R63b4tCKnmlWPze+BS/fTg4=
Subject key identifier: 05:EC:11:8A:62:3C:43:BF:19:68:EB:CD:3C:6A:B2:54:8C:AF:87:18
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 019E30053B38695501A2695DA45D74F5A1C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 08A2
Signing time: Sat 16 May 2026 09:01:49 +0000
Manifest this update: Sat 16 May 2026 09:01:49 +0000
Manifest next update: Sun 17 May 2026 09:01:49 +0000
Files and hashes: 1: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: mB8Sdf6wQwbQ/MjXXZxW1cZr0Toral7dcNNJyriUGnU=)
2: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (hash: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U=)
3: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (hash: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:3b:38:69:55:01:a2:69:5d:a4:5d:74:f5:a1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: May 16 09:01:49 2026 GMT
Not After : May 17 09:01:49 2026 GMT
Subject: CN=05ec118a623c43bf1968ebcd3c6ab2548caf8718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:15:64:22:d5:ff:ae:b8:c1:a9:bf:45:c1:a8:
4e:5b:96:0c:88:d9:68:f1:5d:ef:d6:28:84:91:8d:
da:bf:c1:31:03:b5:0a:61:ae:16:1e:1f:f3:7b:23:
c9:b4:fc:2b:21:84:ad:bd:f1:1b:48:18:26:2f:e0:
1d:ac:33:de:a2:70:e7:c7:0f:b5:3e:37:9f:03:98:
9a:28:21:b7:60:aa:9d:ac:2c:42:1a:24:09:40:e6:
fc:f9:bb:6d:f6:39:24:6b:30:40:6f:b4:b0:fe:0a:
27:6b:cb:07:1f:52:68:d2:57:bd:40:c6:44:55:22:
c4:f6:26:b4:de:c8:bc:c9:67:72:89:59:6c:36:b1:
1a:d4:7a:10:4a:7e:b0:82:f2:ec:ee:f4:cb:d3:b0:
36:ed:38:92:54:3a:c6:f7:01:a6:48:dd:f2:f9:4c:
6c:50:a8:fb:e8:9a:8d:28:31:a3:05:86:91:47:0f:
13:83:e1:97:94:90:1f:a6:02:3d:84:64:9a:b2:01:
fb:cd:87:e6:70:48:34:43:9f:3c:c9:2b:6f:06:a7:
1f:3a:77:5a:65:79:49:26:d1:ae:db:b7:b4:1c:84:
11:c9:30:2f:dc:28:be:11:2f:db:ce:8a:a1:d8:3f:
ca:61:d3:29:66:c0:08:98:1d:f5:54:c8:27:c1:f3:
76:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EC:11:8A:62:3C:43:BF:19:68:EB:CD:3C:6A:B2:54:8C:AF:87:18
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:83:0e:e0:cd:19:37:85:ac:51:09:c9:d6:8b:8a:86:26:ba:
03:5a:13:10:39:7a:90:7d:f8:7a:41:06:4a:4c:37:95:8c:b7:
1b:d8:0c:6d:ac:70:55:7b:24:58:18:d9:57:9e:84:f6:a8:59:
eb:55:04:ab:b2:da:90:1f:6b:71:d5:c0:5a:c5:2e:82:d4:05:
ae:c4:36:29:9a:78:18:74:78:fa:36:8d:5d:c5:cf:be:41:18:
ef:a7:95:7d:1f:b5:89:f0:14:5d:cd:be:70:07:e6:ef:c5:1a:
7e:55:5e:b8:ee:09:74:c2:17:c5:61:2a:6b:fb:1e:e0:67:45:
70:18:0b:e7:30:1c:6e:ab:90:de:6e:24:dc:00:a8:9c:bb:50:
30:27:8e:bf:38:7b:e3:0e:7d:0d:59:12:77:8f:33:4e:25:27:
dc:5b:c5:06:6b:06:59:6d:5e:ac:b9:93:ac:f4:db:13:86:0f:
d0:11:3e:0f:d2:af:50:8e:84:1a:6a:c3:ca:07:8c:4e:8d:11:
e9:bc:59:1d:56:6c:17:08:04:fe:40:b9:ca:10:a9:e4:dc:fb:
76:2d:66:86:52:e5:2a:d7:f6:11:7e:c1:37:fa:08:21:6e:bc:
75:62:c1:e6:d8:6c:5d:cf:99:a7:06:be:4a:ad:45:8a:12:8b:
17:4e:52:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:56:45 2026 by rpki-client