Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: jD3tK/aFrbEaJCl86Iuod/7selBIe4Fa2F7lLuLQPzU=
Subject key identifier: 31:42:FA:78:41:11:2B:87:CA:3E:2D:EF:36:99:27:02:73:39:2F:66
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 019D9B50B6312F116B2D9257AB41397F95CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 0855
Signing time: Fri 17 Apr 2026 12:00:51 +0000
Manifest this update: Fri 17 Apr 2026 12:00:51 +0000
Manifest next update: Sat 18 Apr 2026 12:00:51 +0000
Files and hashes: 1: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: TAgd8t3V5K2CElMrM3M7kZmkiNAC4jaqOw0CHYLxDrQ=)
2: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (hash: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U=)
3: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (hash: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:b6:31:2f:11:6b:2d:92:57:ab:41:39:7f:95:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Apr 17 12:00:51 2026 GMT
Not After : Apr 18 12:00:51 2026 GMT
Subject: CN=3142fa7841112b87ca3e2def3699270273392f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:1d:af:48:d0:78:f0:3a:5c:ae:f9:9a:86:
7d:47:12:3d:d7:1f:16:22:41:7a:c9:a4:db:de:38:
b0:27:d9:cb:dc:ab:09:d7:b8:81:25:27:17:9e:04:
84:1f:d2:25:4e:99:fc:c5:2e:01:bb:0d:d6:ab:bc:
77:5b:5f:f9:cd:ee:fd:58:b2:f4:75:61:77:99:a6:
dc:d8:71:dd:ef:24:96:15:8a:ec:7c:b2:1c:f6:ea:
da:c5:e9:8c:54:88:81:98:ae:47:ea:10:3a:a0:dd:
06:12:26:d7:f4:a8:68:d7:b9:80:e2:72:90:3f:2a:
d4:89:cd:ad:d7:05:d8:ab:37:d4:13:58:44:a0:e3:
17:0b:a0:86:9b:2d:ae:ab:f4:98:90:f0:bf:de:d2:
17:74:0e:f1:09:1e:8e:f4:06:82:e8:51:66:b7:50:
f4:78:c0:90:68:31:61:a6:66:3c:08:a1:d2:de:c2:
3d:18:04:62:97:8e:2e:7e:ee:69:c8:b3:05:4e:f9:
7b:94:c7:ae:82:24:bf:ea:82:98:1e:54:a7:35:d3:
3a:7c:cc:19:57:51:4f:3b:22:8a:74:d0:00:4f:41:
7f:f7:79:07:76:7e:0a:a8:a7:63:59:da:d5:30:6d:
42:93:44:4e:03:14:0a:0a:d6:8e:88:91:71:96:ec:
12:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:42:FA:78:41:11:2B:87:CA:3E:2D:EF:36:99:27:02:73:39:2F:66
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:34:58:16:2d:d6:0c:73:a6:9f:0c:ce:c6:ca:bf:d3:86:32:
a6:8d:25:30:83:4d:73:56:ad:09:b5:36:c4:f9:3b:cc:90:4f:
8d:a1:3f:fa:21:db:df:51:bd:c2:d8:5c:f3:7b:b3:23:c0:be:
68:1d:7f:a3:26:35:75:c1:af:52:1c:bc:6f:e6:10:06:06:2e:
b8:b2:3b:90:92:c2:48:74:56:04:ef:40:d5:3e:f1:7f:cc:e2:
57:d8:fb:f8:be:db:98:f1:62:c3:f8:89:16:ff:c5:ec:37:85:
1c:ff:6c:72:f7:9a:3d:17:43:44:6b:bc:95:93:6d:60:37:01:
f2:37:4d:e2:f1:88:44:79:25:94:c9:bf:98:a1:47:d7:73:cf:
a6:c7:ed:0c:3d:92:df:ea:c3:fe:41:97:87:2c:74:f8:60:63:
cb:2d:17:7c:1b:b5:e6:24:6a:70:18:68:4c:b2:16:4f:19:70:
c9:5c:e4:a2:42:27:6c:9d:5a:0f:eb:70:5a:ad:71:4a:95:a3:
22:5d:17:d5:f4:a7:85:dd:7b:0f:4d:1c:a3:12:61:51:28:a4:
51:15:e5:05:7b:fd:60:eb:96:a1:8c:b0:5f:aa:f3:38:f2:65:
c3:9c:22:bd:f4:36:de:e5:f2:ac:ef:ff:1e:65:ac:35:2e:e9:
83:8f:09:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:20:45 2026 by rpki-client