Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: CxRx+Mp9AzAlUwm9tpp9tu8e67wg6QBV+M+05srlElc=
Subject key identifier: 02:A2:70:60:47:BF:FD:B6:AE:CA:B9:A6:A4:96:67:C1:F6:7C:EC:37
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 01A0D2005D6551DD5513450C39C91BBEBD93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 09FF
Signing time: Thu 24 Sep 2026 06:00:34 +0000
Manifest this update: Thu 24 Sep 2026 06:00:34 +0000
Manifest next update: Fri 25 Sep 2026 06:00:34 +0000
Files and hashes: 1: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: JfSrZjZ8O9f2Sy5k+WXjHNAx8AIHDJa+h589dfY8PkQ=)
2: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (hash: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U=)
3: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (hash: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:5d:65:51:dd:55:13:45:0c:39:c9:1b:be:bd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Sep 24 06:00:34 2026 GMT
Not After : Sep 25 06:00:34 2026 GMT
Subject: CN=02a2706047bffdb6aecab9a6a49667c1f67cec37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:84:d0:21:da:17:8b:b1:24:56:74:8f:4b:07:
6d:d6:63:c8:91:5d:8e:b8:41:97:4a:fa:30:d3:9e:
aa:43:38:e7:14:e0:05:19:73:e1:b6:62:c0:ee:27:
74:90:5a:42:fc:ee:33:16:da:b2:01:cd:58:43:e4:
95:47:bf:43:32:da:ce:a0:7a:c9:0d:fd:a2:d0:5c:
fa:7e:b4:1a:54:2c:11:2a:84:83:a7:3c:6f:3a:bd:
fe:7f:61:7f:23:1d:5e:c5:71:0a:e1:19:40:70:03:
15:4d:95:eb:ef:44:28:e2:f1:ab:30:ba:da:75:7c:
01:b9:e4:6b:57:3e:2c:19:55:51:05:1c:6e:a9:cb:
c1:16:24:86:5d:ca:40:f0:0e:de:c8:b9:3b:68:49:
78:90:f2:93:fd:60:4f:8c:62:73:af:4a:c9:a2:cc:
5b:22:35:36:0f:fd:77:74:89:02:63:21:3d:ed:be:
0a:ca:ca:6c:a0:29:b7:8d:97:ff:d0:6e:7e:26:87:
49:ed:34:30:32:4e:d5:7a:36:58:19:f0:66:b5:5a:
ce:f9:ad:d5:21:4b:b5:34:27:c1:a9:ea:e0:c2:cc:
e8:e2:b9:9e:49:d4:d6:57:ea:09:f4:85:42:ec:0d:
4b:fd:ed:7c:fa:14:41:8c:ac:c3:80:31:09:b6:21:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A2:70:60:47:BF:FD:B6:AE:CA:B9:A6:A4:96:67:C1:F6:7C:EC:37
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:cd:c0:3d:7a:1d:02:84:d6:cb:81:0f:e1:d5:a4:2f:04:c2:
c5:89:58:98:0f:93:9e:51:8a:0e:bf:d7:53:b4:05:5f:6d:6a:
56:25:ca:21:54:f8:6f:0a:25:19:61:7e:28:e2:44:b4:a1:ea:
c7:71:7c:76:a0:34:7e:fb:ac:a6:7a:5e:4d:b1:93:5e:6d:26:
58:f9:b1:e0:3a:61:fc:ab:76:1e:87:ef:4a:ba:b0:3e:98:bc:
68:98:93:37:c9:67:92:82:56:68:37:47:34:57:27:7e:04:78:
2d:69:3e:63:7b:81:51:93:fd:c2:90:ed:4a:9a:65:a3:4c:74:
5f:ac:66:30:46:67:7c:f2:41:a5:dd:ee:1f:46:08:b0:72:37:
22:c5:da:b3:fc:92:86:1c:03:9d:6d:27:27:46:81:e3:77:da:
8e:db:c8:ff:60:f7:15:a5:2f:e3:96:8a:2a:02:9b:ad:78:db:
25:85:26:cd:aa:a7:db:a7:57:03:65:72:e6:fc:e6:69:2a:7b:
00:3a:f2:c3:fa:8f:df:db:62:d4:63:66:c1:98:ad:ed:08:4e:
ac:28:a5:dd:f3:4b:ec:b5:0b:60:2f:ae:63:8a:4c:43:72:84:
67:17:4e:af:f4:32:82:ef:1a:e5:67:7c:ba:a4:35:a9:cc:b0:
59:45:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:21:24 2026 by rpki-client