Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: BXiqEGSsfHhIZCjTHoFpX77qvbUk/ILdi4w/3lccBq0=
Subject key identifier: B9:E5:1B:60:A8:03:D0:AF:BE:58:8B:75:F4:37:D0:10:E2:4E:1D:9F
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 019D29616813CAAEC6867372AB5E13090EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 081A
Signing time: Thu 26 Mar 2026 09:02:22 +0000
Manifest this update: Thu 26 Mar 2026 09:02:22 +0000
Manifest next update: Fri 27 Mar 2026 09:02:22 +0000
Files and hashes: 1: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: OjoVZhsPUMVGJ3WamHPlNtr+z7rCETbKDozSrMm093o=)
2: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (hash: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U=)
3: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (hash: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:68:13:ca:ae:c6:86:73:72:ab:5e:13:09:0e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Mar 26 09:02:22 2026 GMT
Not After : Mar 27 09:02:22 2026 GMT
Subject: CN=b9e51b60a803d0afbe588b75f437d010e24e1d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:ff:8f:33:39:41:01:bf:f0:06:eb:da:af:
f6:b7:2c:7b:47:61:f3:86:7f:85:a9:ab:b2:90:4b:
a3:2e:c5:c8:49:99:7b:88:77:cd:0f:36:e5:eb:95:
fa:f3:a6:e4:55:33:5e:bc:74:15:af:0a:1b:9b:71:
19:01:3d:94:ac:43:30:4a:c0:92:de:5a:72:93:1a:
32:39:f5:cf:b1:24:9b:be:ac:7d:69:c9:08:c7:fd:
40:fa:67:ee:94:aa:dc:d0:e1:0d:80:61:75:a3:0c:
16:d4:ba:9c:42:13:60:7b:50:6f:09:7d:96:2a:4a:
f9:48:0e:f9:a0:64:99:8e:8b:4d:7f:9a:b7:19:59:
85:50:66:e0:91:7d:f2:2e:12:4a:a4:4f:fa:41:77:
2a:a0:fb:fe:38:bf:ef:c0:f4:4d:e1:08:59:aa:e0:
d8:a9:a9:92:4f:19:7c:46:80:4c:4a:df:d4:52:29:
9c:d5:e1:d1:b5:e4:76:19:56:85:8c:9d:0a:62:c6:
8d:e8:d4:07:ad:1a:48:35:fb:6a:fc:bc:fe:00:a6:
e9:13:1a:e1:eb:08:9a:a9:e5:dd:82:f3:bd:e1:1a:
01:72:42:a7:b2:6f:ce:48:87:c2:44:6b:a9:8b:a0:
4f:19:94:a2:39:0f:9f:49:9b:08:8f:84:c8:92:0b:
a1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E5:1B:60:A8:03:D0:AF:BE:58:8B:75:F4:37:D0:10:E2:4E:1D:9F
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:43:c8:42:4c:94:44:f0:c3:eb:b2:e1:82:71:3f:d9:b1:3e:
eb:f7:ed:36:19:76:86:0b:23:04:09:fd:e0:62:f1:42:9a:0d:
86:e8:f8:2b:6a:41:6a:84:81:1c:56:01:97:e9:bd:cc:9d:f4:
63:c1:04:da:2d:0d:3e:da:cc:5e:ea:58:af:79:c8:80:1c:99:
f5:82:ec:83:39:59:bc:97:f9:83:3d:37:2a:92:22:84:b4:f1:
cf:18:e1:ef:bc:91:4a:a0:36:8a:e2:0b:fe:0c:ef:5f:17:8e:
a9:22:8c:e8:f5:b5:8b:08:dd:25:14:c6:09:57:83:30:25:63:
62:02:00:3d:de:15:7e:50:6c:3a:26:f0:3d:08:e1:0d:fa:9b:
9d:6f:b8:c7:ec:a9:2a:83:28:96:41:5d:22:7b:34:b2:60:c7:
ea:67:1f:56:61:b1:86:ca:07:c5:46:4f:6e:e0:76:db:b1:6b:
b3:d3:74:27:18:59:b8:73:24:0d:b4:57:2c:43:74:03:38:51:
95:11:44:49:e8:16:74:80:65:39:66:b0:95:de:25:c0:53:1f:
e8:73:ef:0f:9f:70:a0:ba:2d:39:ed:87:1d:82:a0:f8:2b:7f:
6d:17:f8:92:ba:38:ef:d7:e5:31:02:77:85:f2:5b:b5:f1:01:
94:6e:ae:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:32:53 2026 by rpki-client