Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
File: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft (raw, json)
Hash identifier: kjmBbtumJWzTz4xlqwUOPtzSAgEu2opsTH0T0uKrMfo=
Subject key identifier: 62:3A:6F:90:E5:F4:E7:24:25:37:39:44:0E:AA:20:D5:4E:70:97:94
Authority key identifier: DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
Certificate issuer: /CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Certificate serial: 019FAA87B7D0FE361E38ED34DA79F98844D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
Manifest number: 0966
Signing time: Tue 28 Jul 2026 21:00:48 +0000
Manifest this update: Tue 28 Jul 2026 21:00:48 +0000
Manifest next update: Wed 29 Jul 2026 21:00:48 +0000
Files and hashes: 1: 3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl (hash: b/Ntwrht/myVyOMR3KxnAYf/uYntR+Vnw6GyhNrHDEM=)
2: DC8THQNIT_ft_VIae0j7lr2XD3w.roa (hash: NAMbp16OoxifwzW1JGmr9hqgxHOpVSAKtiKZQm7xb3U=)
3: rDVkAfZJ4mm-tvRM1GXXX_udw34.roa (hash: zFuftZIox6FDvhmwXiLYib2V/P0TP7DPdZL6nZIhzRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:b7:d0:fe:36:1e:38:ed:34:da:79:f9:88:44:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd75fc8c45d36101008837119cbfa84aee19e29a
Validity
Not Before: Jul 28 21:00:48 2026 GMT
Not After : Jul 29 21:00:48 2026 GMT
Subject: CN=623a6f90e5f4e724253739440eaa20d54e709794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:71:ec:a4:0b:9d:c7:7b:16:25:33:4e:44:c6:
b5:b0:16:0d:a3:7e:71:b9:e5:b5:4e:ec:44:ea:27:
57:c1:ec:8c:6b:1b:82:86:20:cf:5c:d6:e2:9f:7d:
36:ea:84:8d:3b:20:90:62:66:ce:fb:41:a2:92:9b:
95:f4:8a:8a:fe:80:10:58:13:03:b6:f9:7b:60:44:
3b:5f:f1:49:4e:c4:f0:f9:1e:c4:e1:dc:56:55:3d:
20:d2:9a:5a:1e:3e:e6:2f:56:5e:e4:af:fc:1b:df:
79:ba:bd:86:7e:59:db:2c:c3:7e:e0:f4:cb:06:70:
78:96:9d:c2:8f:ec:f5:97:94:12:7f:85:6b:7b:3e:
15:b2:b3:e2:88:1e:99:2d:98:4f:5a:f8:16:22:87:
7c:b7:3e:89:a9:05:5e:3e:f0:14:08:46:b5:39:5c:
85:20:7d:2b:ae:42:7b:66:5b:40:b4:da:6f:5e:7a:
d0:99:d0:cc:f8:6b:35:45:1b:1d:11:ba:b5:ce:22:
05:91:c4:49:54:c8:5e:eb:00:6d:0d:70:05:52:e1:
bf:9b:8f:a3:e0:cc:e8:88:64:87:cd:3e:50:5a:2a:
98:21:b3:0d:4f:f7:a6:85:43:d7:f4:ea:a5:96:92:
29:87:f4:3f:60:cd:a5:a1:69:6d:3f:5e:c9:34:cd:
0d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3A:6F:90:E5:F4:E7:24:25:37:39:44:0E:AA:20:D5:4E:70:97:94
X509v3 Authority Key Identifier:
keyid:DD:75:FC:8C:45:D3:61:01:00:88:37:11:9C:BF:A8:4A:EE:19:E2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3XX8jEXTYQEAiDcRnL-oSu4Z4po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/68500d-a781-4739-b26c-0cc5168ea15a/1/3XX8jEXTYQEAiDcRnL-oSu4Z4po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a6:eb:11:92:cf:87:34:8a:cb:5c:9f:ec:35:4f:2f:57:05:
8d:ad:de:5e:23:7b:87:b2:08:8c:07:3f:a0:26:ed:d7:68:50:
b8:48:ef:a6:76:c3:88:e8:5e:41:c2:96:c4:1d:bc:a8:bb:1d:
78:8f:fd:ed:fb:ba:d7:86:19:b9:73:cd:2e:be:46:c5:26:23:
a4:41:78:68:06:60:93:11:0e:4a:5b:47:0a:c6:af:af:4b:3f:
e1:7f:b0:45:e0:9c:6b:9c:a2:5c:e1:00:81:04:1f:de:91:ae:
07:e0:4b:c5:58:0d:5b:cc:0a:50:a5:a2:ac:c7:4c:e7:dc:98:
2f:52:ad:cf:fa:0f:95:e1:76:ef:b5:bc:a0:fa:ae:0d:42:2e:
6d:f8:75:db:2e:4f:fa:04:23:e2:d2:3c:ab:14:0e:b7:49:1b:
fa:8a:22:fe:43:b5:55:af:52:7b:95:c5:43:d5:1d:ce:a3:5a:
fa:90:74:a0:1b:fb:40:7d:53:59:69:d2:fe:68:df:17:e0:63:
5a:de:d2:4e:54:9a:f0:3f:7c:8e:35:bd:6a:f5:4e:21:4b:a1:
28:99:7f:a9:64:32:a8:ed:e0:d5:e3:cf:d1:4c:3b:7a:f5:2a:
63:2c:4b:5f:5f:a3:2e:86:19:c1:1f:55:8d:df:f5:dc:15:60:
3d:f8:32:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:47:26 2026 by rpki-client