Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: 8L9kR+gUiQXRJeITT4pqJ9XSptkF+iRLMOxAmkQSg58=
Subject key identifier: A6:96:4A:07:5A:09:AE:F8:A8:4E:8C:05:C7:5A:22:03:53:60:10:BC
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 01A0C858B339FCB9CDB2546E493192F7D318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 09FA
Signing time: Tue 22 Sep 2026 09:00:51 +0000
Manifest this update: Tue 22 Sep 2026 09:00:51 +0000
Manifest next update: Wed 23 Sep 2026 09:00:51 +0000
Files and hashes: 1: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: Hkt2Ou2mUm7c7nri1pHjm/JyUQ+avhi0ux7GzPB5Dp8=)
2: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (hash: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U=)
3: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (hash: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:b3:39:fc:b9:cd:b2:54:6e:49:31:92:f7:d3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Sep 22 09:00:51 2026 GMT
Not After : Sep 23 09:00:51 2026 GMT
Subject: CN=a6964a075a09aef8a84e8c05c75a2203536010bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6f:88:06:30:60:8d:d1:2b:7d:20:b6:2f:5f:
fc:3f:36:5e:31:03:b8:bc:87:59:f8:03:33:de:01:
7e:f8:14:62:00:19:c5:8f:7f:b2:01:c9:e5:b9:dc:
0f:0d:d2:fa:77:96:8e:4f:8f:37:60:d5:6b:5e:e0:
94:9d:41:40:8a:f4:df:4d:ef:37:1c:4f:d0:72:0b:
79:41:2b:bc:e4:82:0f:7d:ee:9b:5f:5f:a4:45:f5:
d0:98:42:c0:5f:5f:9b:e2:2a:dc:e4:be:4d:de:0d:
df:84:f9:96:b5:8c:1f:e4:89:10:2d:8e:f9:c7:c8:
c6:92:e9:32:e5:17:42:71:2f:c7:6c:00:e0:89:4b:
5d:c4:fe:84:d1:cd:77:39:1f:b2:8c:91:de:10:ed:
34:75:58:d5:43:50:76:5d:75:0f:be:22:58:de:2d:
88:a6:6e:a9:96:af:a5:54:c4:b1:02:48:2d:e4:35:
9a:79:7e:41:cd:b5:03:d6:7d:09:00:47:f3:cf:4a:
ad:3f:95:01:8f:05:ad:28:67:06:09:b3:d9:37:36:
bd:3a:8c:30:bb:34:25:ac:ef:8b:30:c3:60:6e:e8:
dd:fd:fa:7a:5b:fd:f5:71:06:01:c4:d0:79:43:15:
61:85:52:c9:65:9a:b0:40:69:04:bf:08:32:28:6a:
82:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:96:4A:07:5A:09:AE:F8:A8:4E:8C:05:C7:5A:22:03:53:60:10:BC
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:13:3e:6b:19:d6:2c:6c:6c:d0:26:22:f8:59:05:be:91:aa:
36:c8:ed:af:5e:7a:93:af:09:f0:2a:d4:f0:a0:c0:f1:92:56:
12:7f:8b:c6:ec:d4:3f:37:69:6a:9f:6b:02:c9:ce:41:89:37:
48:5c:0e:c7:b6:c5:16:a0:db:28:4f:4e:cf:f7:4f:c9:9f:4b:
53:3e:1f:1c:4a:85:2f:07:d9:80:78:1a:fe:89:09:4b:59:66:
de:25:23:4f:51:c2:00:11:65:6c:54:29:93:0d:f6:06:46:00:
26:d3:e2:f1:85:00:6a:4f:e4:70:4f:6f:00:2c:b8:d2:65:b2:
c6:36:a6:09:50:d1:f8:04:1a:38:40:c8:4a:fe:66:8d:1f:81:
e1:8e:ee:f3:c8:63:fd:92:fa:db:98:5a:5b:9e:dd:f2:43:f3:
bf:b1:d8:c7:ae:15:6b:bc:cb:3a:eb:96:a2:8f:7a:5e:4d:f4:
2c:1c:90:89:94:bc:d4:33:01:74:97:44:0d:f2:2c:74:fe:03:
1f:a4:0a:fd:b3:24:f2:f2:7e:56:60:0b:25:89:62:dd:c7:71:
e8:5b:f8:94:aa:10:cc:70:19:41:d0:2c:ac:62:fc:c8:63:63:
4e:d6:5b:e0:79:5b:4f:43:10:96:93:0a:5a:a9:83:0e:4c:56:
1b:ed:5b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:44:51 2026 by rpki-client