Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier: pPqxMWYyk/SS8fquUnMWji8kOek4D9v2wKvc4fe4I2Q=
Subject key identifier: 3B:D4:89:DA:77:6D:7A:FE:97:F2:42:DF:89:85:53:1E:D3:F1:13:9B
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial: 019D3752EAA5789B7741F1FBA58EB0472AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number: 0F60
Signing time: Sun 29 Mar 2026 02:01:14 +0000
Manifest this update: Sun 29 Mar 2026 02:01:14 +0000
Manifest next update: Mon 30 Mar 2026 02:01:14 +0000
Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: jKGxGpeQPyAKOmY9GBXF8oE0OtM2dK89AhKrDdheWCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ea:a5:78:9b:77:41:f1:fb:a5:8e:b0:47:2a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
Validity
Not Before: Mar 29 02:01:14 2026 GMT
Not After : Mar 30 02:01:14 2026 GMT
Subject: CN=3bd489da776d7afe97f242df8985531ed3f1139b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:df:be:19:f2:a7:8a:35:c0:c9:b8:41:3b:9a:
4f:c2:47:f9:4d:6f:07:da:95:6d:2c:17:22:9e:7f:
90:6d:32:a6:05:b8:0f:97:2a:8c:8d:cc:ee:07:5e:
60:78:07:ee:1a:93:36:15:bb:98:97:41:45:e1:17:
f2:98:17:54:35:bc:3a:2a:e8:b3:1e:45:80:70:f1:
7f:2b:e9:22:9b:5e:19:24:2c:6c:a5:8d:fa:62:0d:
ce:8a:fa:c3:ce:dd:7c:d1:1d:7c:fd:7b:51:f4:a8:
72:75:00:2d:b8:77:e1:0b:d2:95:86:ee:10:8d:7b:
44:c6:7c:91:c3:77:01:c1:b1:e8:ca:99:e1:45:00:
be:95:46:08:54:75:47:6f:fd:18:a0:b9:da:0a:45:
46:05:e1:46:a2:8a:28:21:53:34:34:0c:97:b1:90:
34:9e:fa:a5:e7:34:bb:2e:7b:dc:c7:ee:74:b9:49:
a0:12:7c:32:12:b0:80:ad:43:c7:2e:0d:aa:97:70:
51:9b:92:05:d6:58:74:f9:b5:ea:42:62:ee:61:23:
0d:2d:fb:92:4c:e2:36:a3:b0:6a:6a:90:04:ee:32:
bf:2a:8b:db:d7:a9:34:c6:5a:4b:4d:b0:57:4c:20:
5a:7a:d4:b1:bd:e0:33:23:71:9b:3a:1d:a7:88:4b:
a5:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D4:89:DA:77:6D:7A:FE:97:F2:42:DF:89:85:53:1E:D3:F1:13:9B
X509v3 Authority Key Identifier:
keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:60:ab:ce:c1:04:b9:72:ce:c2:28:79:97:9e:96:ee:f1:17:
c6:76:59:67:38:0c:2c:05:ff:99:6e:e4:6e:92:e9:10:fd:87:
00:70:a0:15:27:65:bd:32:af:96:02:fc:dd:18:d0:04:12:61:
18:e2:2c:99:84:87:be:18:61:80:c0:ea:35:ae:f6:35:88:ef:
b8:25:68:bf:6d:de:62:5f:88:69:41:f2:2e:64:ec:75:58:88:
32:69:4e:63:8d:2c:41:ed:04:b0:b1:b0:ad:25:f1:f9:bb:80:
98:f0:35:db:47:7c:d0:7b:12:0d:de:ed:c4:80:10:f6:c5:a1:
d5:50:05:d8:51:a8:14:a1:96:8a:45:70:0e:24:9e:e4:7a:2d:
a6:d7:2e:8d:10:75:c3:92:47:5a:d7:b0:60:91:91:11:6b:1c:
79:2b:c1:23:d0:ab:62:70:71:b7:0e:46:54:ca:85:28:18:9e:
e2:91:37:b9:d8:4e:3a:71:8d:46:95:48:e3:e7:e5:7d:ec:91:
a9:80:bb:75:76:b8:24:91:c5:e2:cb:ee:b6:28:f3:f0:9d:48:
81:ae:31:52:3b:24:b2:f2:e6:c5:4c:10:08:53:55:72:4b:20:
20:91:93:39:51:7b:30:86:32:a3:93:e4:43:8f:c3:2d:ca:84:
f3:16:cd:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UuqleJt3QfH7pY6wRyrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzODU3MzMyMTNiMzQyMzYwMTlhMTQwZmYxOWM1Mzk4ZWQ3
MTczMGUwHhcNMjYwMzI5MDIwMTE0WhcNMjYwMzMwMDIwMTE0WjAzMTEwLwYDVQQD
EygzYmQ0ODlkYTc3NmQ3YWZlOTdmMjQyZGY4OTg1NTMxZWQzZjExMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt++GfKnijXAybhBO5pPwkf5TW8H
2pVtLBcinn+QbTKmBbgPlyqMjczuB15geAfuGpM2FbuYl0FF4RfymBdUNbw6Kuiz
HkWAcPF/K+kim14ZJCxspY36Yg3OivrDzt180R18/XtR9KhydQAtuHfhC9KVhu4Q
jXtExnyRw3cBwbHoypnhRQC+lUYIVHVHb/0YoLnaCkVGBeFGooooIVM0NAyXsZA0
nvql5zS7Lnvcx+50uUmgEnwyErCArUPHLg2ql3BRm5IF1lh0+bXqQmLuYSMNLfuS
TOI2o7BqapAE7jK/Kovb16k0xlpLTbBXTCBaetSxveAzI3GbOh2niEulmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvUidp3bXr+l/JC34mFUx7T8RObMB8GA1UdIwQY
MBaAFOOFczITs0I2AZoUD/GcU5jtcXMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yYWUwODgtNjljOC00NzdkLWE0YmYt
ODc3ZDNmYWMyNjY3LzEvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yYWUwODgtNjljOC00NzdkLWE0YmYtODc3ZDNmYWMyNjY3
LzEvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2CrzsEE
uXLOwih5l56W7vEXxnZZZzgMLAX/mW7kbpLpEP2HAHCgFSdlvTKvlgL83RjQBBJh
GOIsmYSHvhhhgMDqNa72NYjvuCVov23eYl+IaUHyLmTsdViIMmlOY40sQe0EsLGw
rSXx+buAmPA120d80HsSDd7txIAQ9sWh1VAF2FGoFKGWikVwDiSe5HotptcujRB1
w5JHWtewYJGREWsceSvBI9CrYnBxtw5GVMqFKBie4pE3udhOOnGNRpVI4+flfeyR
qYC7dXa4JJHF4svutijz8J1Iga4xUjsksvLmxUwQCFNVcksgIJGTOVF7MIYyo5Pk
Q4/DLcqE8xbNnA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:21 2026 by rpki-client