Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: Yq9QZRqN+6YIwdqMXj+SrTsOuCPRQ17LN1v7RNPWYW8=
Subject key identifier: 74:C9:DD:D8:75:24:A8:3E:E1:78:A1:54:BC:7B:1B:95:DA:D7:11:39
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 019CABD94839A98C4FA4E32280777DB7634B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 07D9
Signing time: Mon 02 Mar 2026 00:01:09 +0000
Manifest this update: Mon 02 Mar 2026 00:01:09 +0000
Manifest next update: Tue 03 Mar 2026 00:01:09 +0000
Files and hashes: 1: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: XwEkA8+lNALFZh5qS2igy7geI6kCih4o49tRzLQFC3k=)
2: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (hash: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U=)
3: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (hash: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:48:39:a9:8c:4f:a4:e3:22:80:77:7d:b7:63:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Mar 2 00:01:09 2026 GMT
Not After : Mar 3 00:01:09 2026 GMT
Subject: CN=74c9ddd87524a83ee178a154bc7b1b95dad71139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:14:3c:6e:24:87:c9:8b:f6:05:b1:15:06:
17:b7:ab:85:09:b4:53:bc:e8:0c:db:a4:32:1a:72:
98:cb:cd:4e:25:af:c4:77:e1:dd:c7:37:52:b9:dd:
18:f1:c3:f2:31:a4:0d:74:db:ee:be:a3:cc:b6:29:
9e:8d:cc:2b:b2:44:11:50:44:43:06:d5:48:68:48:
ee:57:3b:7d:d2:bf:b1:a8:f2:aa:6a:49:fc:d4:e2:
e3:f2:24:d2:92:10:9f:30:4f:c3:fb:4f:ab:da:53:
c8:e4:a9:bb:6d:c4:bd:ff:7a:fc:e8:a5:74:1b:26:
8a:b4:ec:03:d0:22:82:5e:ab:ad:27:02:77:37:e3:
30:07:95:8b:99:4e:c3:1a:fa:7d:46:29:45:68:5b:
00:b7:c6:89:b3:be:5e:5a:a8:a3:5e:ba:9e:41:52:
82:a6:67:85:3d:66:f5:b6:44:45:ac:27:d4:0d:14:
61:d5:3a:20:40:72:df:a8:46:39:5b:7f:da:e5:08:
f3:be:e4:5c:89:c5:bf:8b:26:d5:a7:48:84:ce:00:
68:67:a8:7c:22:8a:76:d9:c5:f5:d5:ae:cb:81:68:
20:60:05:0e:07:f1:c5:a6:c6:fd:26:0d:8f:11:b9:
3c:fc:f8:09:75:61:5d:f5:09:31:13:3f:68:79:e0:
ca:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C9:DD:D8:75:24:A8:3E:E1:78:A1:54:BC:7B:1B:95:DA:D7:11:39
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:35:3a:93:73:7e:b5:f9:97:76:c7:a9:78:41:03:82:c9:38:
9d:60:65:0f:87:ea:7e:a4:f9:25:f5:fe:d8:2c:12:91:8f:ab:
08:4e:64:7b:e3:df:fa:f7:39:45:79:cc:dd:9c:35:71:8c:18:
45:b9:dd:cf:c8:fb:6a:87:86:a2:47:d5:ef:16:a5:62:d7:1f:
ce:7f:4b:a4:50:9e:c6:7d:7b:2f:d5:96:50:b4:a4:54:9e:e2:
c7:e0:d6:be:fc:78:77:94:09:54:61:c8:f7:47:b3:44:8c:7f:
5d:b2:8c:85:23:e3:4b:1f:7a:3e:26:b6:63:5b:dd:d4:bb:39:
f0:9d:d9:d8:8c:12:38:7c:4b:61:e6:00:4b:b8:45:2b:d1:58:
c6:c5:fb:57:cb:e0:f8:38:be:c1:52:ed:61:f2:31:46:4b:92:
c2:bd:21:ef:7f:4f:b3:db:c6:d4:e0:ca:0a:be:33:e9:a9:3a:
f8:8c:5f:eb:28:ee:97:2b:e7:80:cf:b0:88:e1:fb:f4:60:0e:
64:cf:15:68:8f:4d:58:4c:b7:60:b5:e4:82:a0:ee:7e:ba:64:
c1:dc:bf:b5:bb:93:62:a8:70:4a:08:66:eb:ca:d3:4e:08:5c:
80:54:6f:10:52:5e:1e:6f:c8:4c:79:5b:3e:94:96:85:c2:92:
78:78:fc:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2Ug5qYxPpOMigHd9t2NLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNzVmYzhjNDVkMzYxMDEwMDg4MzcxMTljYmZhODRhZWUx
OWUyOWEwHhcNMjYwMzAyMDAwMTA5WhcNMjYwMzAzMDAwMTA5WjAzMTEwLwYDVQQD
Eyg3NGM5ZGRkODc1MjRhODNlZTE3OGExNTRiYzdiMWI5NWRhZDcxMTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPIUPG4kh8mL9gWxFQYXt6uFCbRT
vOgM26QyGnKYy81OJa/Ed+HdxzdSud0Y8cPyMaQNdNvuvqPMtimejcwrskQRUERD
BtVIaEjuVzt90r+xqPKqakn81OLj8iTSkhCfME/D+0+r2lPI5Km7bcS9/3r86KV0
GyaKtOwD0CKCXqutJwJ3N+MwB5WLmU7DGvp9RilFaFsAt8aJs75eWqijXrqeQVKC
pmeFPWb1tkRFrCfUDRRh1TogQHLfqEY5W3/a5QjzvuRcicW/iybVp0iEzgBoZ6h8
Iop22cX11a7LgWggYAUOB/HFpsb9Jg2PEbk8/PgJdWFd9QkxEz9oeeDKAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTJ3dh1JKg+4XihVLx7G5Xa1xE5MB8GA1UdIwQY
MBaAFN11/IxF02EBAIg3EZy/qEruGeKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMt
MGNjNTE2OGVhMTVhLzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC82ODUwMGQtYTc4MS00NzM5LWIyNmMtMGNjNTE2OGVhMTVh
LzEvM1hYOGpFWFRZUUVBaURjUm5MLW9TdTRaNHBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDU6k3N+
tfmXdsepeEEDgsk4nWBlD4fqfqT5JfX+2CwSkY+rCE5ke+Pf+vc5RXnM3Zw1cYwY
Rbndz8j7aoeGokfV7xalYtcfzn9LpFCexn17L9WWULSkVJ7ix+DWvvx4d5QJVGHI
90ezRIx/XbKMhSPjSx96Pia2Y1vd1Ls58J3Z2IwSOHxLYeYAS7hFK9FYxsX7V8vg
+Di+wVLtYfIxRkuSwr0h739Ps9vG1ODKCr4z6ak6+Ixf6yjulyvngM+wiOH79GAO
ZM8VaI9NWEy3YLXkgqDufrpkwdy/tbuTYqhwSghm68rTTghcgFRvEFJeHm/ITHlb
PpSWhcKSeHj80A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:01 2026 by rpki-client