Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: N92KCoFC6kermAcDYWUnAH+Fi8Yl8LZripvufmAtk6A=
Subject key identifier: 7F:B7:3B:24:DD:91:92:43:5D:6F:9A:94:A6:90:36:2D:E5:31:CA:29
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 019E1EA2B0258D3EF2AA36AA0F97D6BE20EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 0899
Signing time: Wed 13 May 2026 00:00:38 +0000
Manifest this update: Wed 13 May 2026 00:00:38 +0000
Manifest next update: Thu 14 May 2026 00:00:38 +0000
Files and hashes: 1: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: KA1DpqMrWGD53aXpRPpoASB1mYl0lSk/AwV7OEvXr/c=)
2: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (hash: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U=)
3: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (hash: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:b0:25:8d:3e:f2:aa:36:aa:0f:97:d6:be:20:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: May 13 00:00:38 2026 GMT
Not After : May 14 00:00:38 2026 GMT
Subject: CN=7fb73b24dd9192435d6f9a94a690362de531ca29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e5:63:6f:b1:6d:d6:77:41:4a:65:9c:3d:23:
c9:9f:28:e9:44:71:e0:3a:78:cc:7e:82:8d:7b:c8:
d9:3a:8f:0d:32:58:38:3c:5e:b6:98:40:35:3e:14:
65:15:2c:a5:2b:bb:d3:02:83:49:df:99:2a:8a:c7:
ba:3c:ea:18:66:3e:34:9c:35:d7:a2:df:99:24:06:
45:38:8d:37:c9:24:a4:20:43:1d:ec:2a:36:e3:be:
57:e8:af:99:3e:d2:85:a5:07:f2:f7:b3:26:58:de:
91:90:ab:d8:9e:2b:f3:bb:eb:9a:27:a1:68:b0:44:
53:dc:9a:57:6f:e6:dc:ab:96:a6:4b:dd:f0:5e:1d:
93:85:44:4b:7b:ff:e3:bd:69:4e:fd:5b:28:85:6f:
20:26:03:4f:dd:68:a2:42:da:5b:9d:e3:70:7e:b8:
ba:11:ab:b0:52:a5:35:83:c4:82:08:8f:41:b9:df:
9e:06:0a:15:98:63:1c:06:39:6f:08:cb:24:a5:a2:
69:c0:10:39:5e:0e:14:27:d3:26:09:e6:e6:6b:1b:
98:78:d4:6d:4e:a3:ad:95:d4:2a:9d:88:9d:78:15:
a9:b8:13:f3:30:1a:81:e6:70:f4:e7:4f:cc:b5:1d:
dc:0a:b3:89:06:6c:7f:8b:c8:73:ca:0d:22:a0:61:
66:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B7:3B:24:DD:91:92:43:5D:6F:9A:94:A6:90:36:2D:E5:31:CA:29
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e8:46:f7:15:18:f5:1d:3e:e3:74:b9:44:ce:6b:bc:1a:d2:
3c:85:ae:45:bb:be:18:ee:48:3d:f9:f9:da:59:c6:d4:17:5b:
0a:b8:fe:90:4e:c6:f1:c8:d3:0a:bc:cf:19:ed:28:ff:1c:eb:
54:7c:00:c2:b7:28:cf:b1:54:4f:21:f6:bf:37:44:05:3f:3a:
07:ff:c0:7f:81:e8:49:09:7d:c5:b5:74:3a:77:3b:e0:94:a9:
ff:e8:8f:69:6c:73:1a:eb:34:42:75:94:9e:8a:02:77:84:5c:
73:54:94:00:fd:e3:90:c5:a6:e8:8c:61:a7:00:e1:63:42:dd:
54:3e:7c:73:51:59:95:87:d1:40:de:ac:10:63:a9:cc:e9:39:
4d:07:ae:5d:2c:a5:b6:eb:73:8a:0d:d1:f2:d5:61:43:41:a1:
68:62:cb:a9:71:7a:f0:49:51:b5:c3:19:8a:11:62:2b:ce:76:
7b:97:8b:79:20:df:82:78:1f:38:7a:83:54:7d:36:4c:9c:d7:
44:ad:a4:27:9a:aa:b7:d7:12:75:dc:56:c6:da:37:b6:aa:c4:
04:a9:6b:be:88:9c:52:58:07:83:27:ff:35:41:7c:81:d8:ff:
ca:cb:49:bd:3d:1e:a3:5c:22:0c:1f:b0:b8:80:02:e0:83:e9:
ca:9e:18:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:57:59 2026 by rpki-client