Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: iVrjnZ4R8tLPASDxzQ+ezKuOh9E1MJpjsA/2u7128sQ=
Subject key identifier: 8C:9A:5E:21:87:F9:86:7C:EA:4F:18:7F:15:FA:CB:8A:8D:8E:E9:45
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 019EC0DAEB3283947955B0AC379B32443D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 08ED
Signing time: Sat 13 Jun 2026 12:00:32 +0000
Manifest this update: Sat 13 Jun 2026 12:00:32 +0000
Manifest next update: Sun 14 Jun 2026 12:00:32 +0000
Files and hashes: 1: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: QVNSEB2v76eWXyjoj5NY5SWucvfVS+3myYB2vPemL5Q=)
2: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (hash: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U=)
3: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (hash: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:eb:32:83:94:79:55:b0:ac:37:9b:32:44:3d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Jun 13 12:00:32 2026 GMT
Not After : Jun 14 12:00:32 2026 GMT
Subject: CN=8c9a5e2187f9867cea4f187f15facb8a8d8ee945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:dc:f1:d6:c8:29:49:0c:06:7b:4b:62:23:
57:21:0a:a9:21:e9:36:09:83:36:a1:72:f1:ba:fa:
69:d9:d6:52:34:35:f4:f5:e3:7b:eb:56:a3:ec:4f:
70:ab:52:1b:72:56:5d:6e:95:58:f4:5c:9f:42:24:
a7:98:c1:0a:f9:51:a9:1a:b0:6a:fc:8d:f8:5a:1e:
e3:95:33:05:3a:56:32:f2:a9:dd:a6:a6:21:ab:b7:
38:0b:e4:6d:1a:b0:2c:91:ba:df:9e:e7:23:9d:7c:
49:6c:88:a8:3c:64:7a:0f:aa:d1:bb:6a:f0:ae:10:
76:36:f3:7a:5d:21:fc:08:33:f7:21:90:4c:cf:42:
07:61:d0:99:e5:6a:fc:90:c0:37:d4:c2:32:0f:4b:
be:be:2c:33:79:92:18:8d:c5:18:7b:db:62:35:3a:
a5:6a:00:28:fa:6f:e7:b2:57:54:48:fe:9a:d5:44:
b9:92:31:db:97:7f:ce:8f:5e:9a:b8:5e:27:a6:2c:
45:b1:13:aa:5d:fb:73:44:03:99:54:99:7d:42:eb:
0a:8f:1f:1a:03:50:d0:81:0a:e2:d9:a9:82:81:50:
5d:c7:60:2f:b1:43:5a:40:1d:c7:4f:31:e2:77:24:
42:60:5a:2b:63:85:16:35:ca:52:d6:34:41:58:34:
30:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9A:5E:21:87:F9:86:7C:EA:4F:18:7F:15:FA:CB:8A:8D:8E:E9:45
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ec:e4:39:b6:5b:67:94:6e:0a:05:57:cd:f4:da:fd:41:5e:
4e:6e:98:26:06:f7:e7:87:d5:0e:2a:b0:56:3d:2a:0b:87:0a:
d9:23:aa:df:70:09:aa:18:8e:96:e3:a1:a2:74:21:22:ad:5d:
4e:a8:35:fc:b2:a7:6b:9a:d1:d7:b4:c5:52:6f:b1:2a:d8:0c:
23:d8:ca:68:92:c8:25:ad:69:b1:fe:30:ba:1a:61:49:81:91:
e2:f8:aa:3d:aa:80:d2:4f:54:f8:de:43:41:f1:97:dd:bb:a8:
7e:3f:90:7b:78:ad:b7:ee:94:24:78:78:8b:4c:c0:67:25:53:
08:4a:51:d7:b0:bb:63:ef:87:f3:50:36:38:df:92:f0:62:7f:
1f:53:61:b4:71:8b:24:cd:41:ea:bd:92:05:4b:33:17:a5:1b:
16:b4:e8:d5:09:f5:f1:a6:9c:b3:9f:6c:bc:57:b5:a7:5c:5e:
ca:80:7f:9e:64:3a:a6:62:c4:bd:85:d9:9b:4d:db:25:22:19:
e8:0d:0a:33:4f:2f:c3:c0:81:da:9a:a0:bb:49:be:07:d9:07:
f4:71:48:1b:d3:cf:62:fc:e3:45:67:da:ba:f1:76:d7:03:32:
c3:56:eb:da:ea:2e:62:a9:90:f5:f6:c4:bf:6d:42:88:1f:91:
f9:e4:3b:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2usyg5R5VbCsN5syRD2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNzVmYzhjNDVkMzYxMDEwMDg4MzcxMTljYmZhODRhZWUx
OWUyOWEwHhcNMjYwNjEzMTIwMDMyWhcNMjYwNjE0MTIwMDMyWjAzMTEwLwYDVQQD
Eyg4YzlhNWUyMTg3Zjk4NjdjZWE0ZjE4N2YxNWZhY2I4YThkOGVlOTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYPc8dbIKUkMBntLYiNXIQqpIek2
CYM2oXLxuvpp2dZSNDX09eN761aj7E9wq1IbclZdbpVY9FyfQiSnmMEK+VGpGrBq
/I34Wh7jlTMFOlYy8qndpqYhq7c4C+RtGrAskbrfnucjnXxJbIioPGR6D6rRu2rw
rhB2NvN6XSH8CDP3IZBMz0IHYdCZ5Wr8kMA31MIyD0u+viwzeZIYjcUYe9tiNTql
agAo+m/nsldUSP6a1US5kjHbl3/Oj16auF4npixFsROqXftzRAOZVJl9QusKjx8a
A1DQgQri2amCgVBdx2AvsUNaQB3HTzHidyRCYForY4UWNcpS1jRBWDQwHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyaXiGH+YZ86k8YfxX6y4qNjulFMB8GA1UdIwQY
MBaAFN11/IxF02EBAIg3EZy/qEruGeKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMt
MGNjNTE2OGVhMTVhLzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMtMGNjNTE2OGVhMTVh
LzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEezkObZb
Z5RuCgVXzfTa/UFeTm6YJgb354fVDiqwVj0qC4cK2SOq33AJqhiOluOhonQhIq1d
Tqg1/LKna5rR17TFUm+xKtgMI9jKaJLIJa1psf4wuhphSYGR4viqPaqA0k9U+N5D
QfGX3buofj+Qe3itt+6UJHh4i0zAZyVTCEpR17C7Y++H81A2ON+S8GJ/H1NhtHGL
JM1B6r2SBUszF6UbFrTo1Qn18aacs59svFe1p1xeyoB/nmQ6pmLEvYXZm03bJSIZ
6A0KM08vw8CB2pqgu0m+B9kH9HFIG9PPYvzjRWfauvF21wMyw1br2uouYqmQ9fbE
v21CiB+R+eQ7PA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:04:10 2026 by rpki-client