Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: iwdWWQtU11Qv+05LkiGXu/ocQgkytp+I6H01IHeMUz0=
Subject key identifier: 81:1E:9C:83:5D:77:C6:5D:B4:F3:CC:12:1A:81:51:F9:EC:81:C7:53
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 019F292537814F37F49EB0BE2999551A9759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 0923
Signing time: Fri 03 Jul 2026 18:02:12 +0000
Manifest this update: Fri 03 Jul 2026 18:02:12 +0000
Manifest next update: Sat 04 Jul 2026 18:02:12 +0000
Files and hashes: 1: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: 1o+HWnQkJgNn11uFMNujXRUWrfbmwK78JVGvfgkghcs=)
2: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (hash: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U=)
3: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (hash: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:25:37:81:4f:37:f4:9e:b0:be:29:99:55:1a:97:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Jul 3 18:02:12 2026 GMT
Not After : Jul 4 18:02:12 2026 GMT
Subject: CN=811e9c835d77c65db4f3cc121a8151f9ec81c753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:84:17:29:e7:e4:71:fa:db:60:25:48:cc:
da:06:15:f8:eb:51:26:11:85:a1:dd:1d:40:8b:c7:
64:3e:06:d2:1d:05:4e:20:92:17:03:3f:21:07:bc:
f9:b2:09:65:8a:73:5d:85:12:74:54:2d:f1:bb:77:
62:44:d2:9c:80:ab:61:6f:37:c2:6c:91:40:fb:85:
eb:3e:82:8f:d8:77:20:79:f2:a7:9e:de:7f:ac:a9:
d9:6f:4b:cb:3a:3f:4b:84:fe:a5:95:e1:97:c9:89:
7f:fe:42:ba:0e:6f:f8:16:1c:0c:34:01:d9:8b:58:
c8:94:a1:e6:1b:c5:96:2d:54:0d:46:c7:72:e1:e8:
38:c7:22:a0:70:d4:fa:c4:52:b6:9b:e5:36:0b:00:
4a:5b:29:17:40:9d:93:bb:eb:01:b8:7a:69:08:6f:
27:db:51:18:b1:de:08:d0:21:28:27:fd:54:ac:aa:
6f:4d:ac:c1:ee:de:7d:81:f9:35:dd:4d:64:3a:a2:
64:cf:4c:18:4c:ea:90:6c:0c:d5:af:d4:56:b1:88:
dd:3b:0a:33:a4:d1:a2:23:aa:03:4e:f9:fc:2c:19:
6c:65:c0:53:03:5b:bd:93:af:2b:99:da:f0:5b:22:
5a:c8:3e:d4:76:c2:9b:46:58:2f:ee:93:df:7e:d1:
45:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1E:9C:83:5D:77:C6:5D:B4:F3:CC:12:1A:81:51:F9:EC:81:C7:53
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:00:b9:dd:24:03:28:44:43:91:25:fc:60:8c:eb:da:90:09:
d1:f4:55:e2:6d:b5:0a:f9:d0:86:9a:68:a8:33:46:7d:b5:90:
13:61:3f:31:6c:3a:b0:1c:95:1f:6e:d4:14:e2:14:30:0f:1d:
04:c2:7c:c8:18:51:fa:30:12:7d:17:a2:ca:5b:c9:09:e6:11:
70:5d:70:de:ed:5e:1e:9d:48:8f:82:1f:41:a4:fc:26:12:74:
2f:31:e1:3d:db:3b:a8:8d:84:38:9c:50:0e:a0:85:15:de:25:
59:74:76:e0:e3:7a:dc:5d:ce:51:77:36:e5:f3:5a:10:18:2d:
b4:53:d6:d0:83:b3:96:c9:76:71:18:c9:70:4e:60:b8:c9:12:
fb:16:fb:ce:6d:a4:52:c6:aa:cd:46:2a:8a:56:75:93:6a:6b:
b8:79:35:5b:6d:35:cb:22:2c:1b:00:44:8f:39:31:aa:e9:35:
40:e0:f2:fd:74:32:b8:ca:5b:60:1a:cf:6b:d4:af:55:b0:c3:
6a:c4:fc:7a:c1:1a:23:e2:fd:97:9d:74:bf:45:10:66:21:9c:
6b:41:7d:32:5f:17:d1:06:1b:cc:26:f7:85:ec:4e:1c:e3:5b:
17:81:dd:ed:2f:13:de:5f:1c:b9:de:40:cb:bf:04:f7:f5:08:
41:ed:1b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 20:56:40 2026 by rpki-client