Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: IXG7fkv0DvZgs1AN/cQtiSlC+ZGD6YVrZVXgMoB9iD4=
Subject key identifier: B2:1A:AF:13:B5:08:15:2D:A4:28:DF:91:46:F2:33:07:7C:66:DF:DC
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 019F8F7E6AEBA7D543D6D05EF97CC595DAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 0958
Signing time: Thu 23 Jul 2026 15:00:54 +0000
Manifest this update: Thu 23 Jul 2026 15:00:54 +0000
Manifest next update: Fri 24 Jul 2026 15:00:54 +0000
Files and hashes: 1: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: 9b19ka9UApAoXMp17Cv101VRGHchoWKwA43TeZzDUQ4=)
2: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (hash: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U=)
3: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (hash: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:6a:eb:a7:d5:43:d6:d0:5e:f9:7c:c5:95:da:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Jul 23 15:00:54 2026 GMT
Not After : Jul 24 15:00:54 2026 GMT
Subject: CN=b21aaf13b508152da428df9146f233077c66dfdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:bc:d5:43:ec:c7:f3:af:4a:26:ad:79:85:df:
35:d3:8d:be:bd:7d:99:60:13:85:0d:f5:ba:11:ff:
8f:fa:91:20:18:5d:6f:9a:59:78:c9:0b:9a:ee:50:
c6:7d:4a:ac:ba:8b:1f:32:16:cd:23:d3:24:87:df:
ee:61:c1:6e:f5:4e:d3:99:8d:48:92:20:a5:a6:24:
07:64:a2:6a:2c:6d:b6:e1:92:32:f2:2b:7d:5b:85:
ef:3a:bd:00:1b:cd:45:f0:c6:f5:2f:ec:0e:e1:37:
34:3c:c7:70:9e:2c:5a:f4:c3:d8:09:ec:7c:c4:e0:
91:a1:46:3e:42:47:8e:03:5e:47:bd:5d:0c:0c:b3:
94:5c:e7:42:d2:e4:0e:09:e3:eb:f8:58:1e:10:2e:
7f:5f:ec:98:1f:61:2a:72:0c:28:2d:36:d4:2c:49:
52:39:17:ef:be:60:ba:96:0c:4f:3c:53:1d:1b:0a:
75:4f:a1:9a:f0:82:98:92:d1:05:9e:b1:e4:7f:07:
49:23:5d:5c:51:df:db:5f:1a:84:16:b9:c3:8c:0d:
be:25:3a:10:ff:00:9f:78:8e:99:3f:f9:45:a0:5f:
45:07:23:c8:89:64:a6:3e:76:8e:7a:be:d9:12:bc:
ba:32:1a:74:b9:63:ce:e1:05:db:4b:47:a9:f9:69:
7c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1A:AF:13:B5:08:15:2D:A4:28:DF:91:46:F2:33:07:7C:66:DF:DC
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:32:c2:9d:ce:cd:f3:ad:75:a9:aa:42:0c:c5:02:1d:83:78:
ab:8b:53:54:1b:2d:34:b5:28:e1:32:3f:e5:a4:9c:cd:b1:c0:
5a:d5:ae:3d:2c:02:62:82:1f:8c:19:eb:e2:6a:11:3c:d3:82:
88:87:08:ef:09:1b:fb:ee:55:3b:01:37:2c:d6:89:c0:32:91:
b7:4f:7c:5c:65:28:4d:9e:d8:4e:22:2e:b1:8d:6f:63:66:80:
e2:31:87:32:c0:f2:b9:d7:31:22:4a:ec:76:36:b3:4f:7b:ac:
93:6f:44:94:99:eb:05:01:ea:6b:11:e2:03:6a:c6:01:c7:fd:
0a:c3:a5:97:4b:6a:cf:23:fc:97:38:4a:19:de:33:c6:73:8c:
cc:a9:80:dd:57:95:b0:13:25:41:f7:2a:81:5d:9d:1f:b5:cd:
85:3e:ca:3e:5b:95:9b:a7:41:03:68:b6:5d:e8:1d:84:ab:57:
ba:a0:77:5f:a3:71:6a:c4:9f:5b:19:a8:4f:42:1e:b6:55:81:
64:cc:33:ef:f9:9c:6e:4b:20:fd:80:fd:92:e5:76:97:5a:a0:
49:89:df:34:58:67:ad:e4:42:a1:a6:e7:56:7c:8e:09:fa:00:
61:0f:c8:f7:7c:c9:32:73:74:9c:2b:cd:4d:78:00:9f:4d:bc:
2c:8f:b3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:43 2026 by rpki-client