Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json)
Hash identifier: f++tz7kc1gapRJsK31O8fMJ10vlyLbMJ0nsGu42x5RQ=
Subject key identifier: BB:E4:F2:E0:DD:B2:C9:47:CD:15:70:06:63:E8:C5:ED:50:44:B5:6F
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial: 019D389BB82A8A39948C2E62E06C469EA1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
Manifest number: 0518
Signing time: Sun 29 Mar 2026 08:00:22 +0000
Manifest this update: Sun 29 Mar 2026 08:00:22 +0000
Manifest next update: Mon 30 Mar 2026 08:00:22 +0000
Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: nrAsfygMRVQe2WJVF9NEp6bX5+PqeVAIRoRsI9cPqhg=)
2: RPnqpd4QiTnwCz1MgHARgUiKRfA.roa (hash: EMQ9uAHdxhy6q4kC92RKeDGjFCm7FDg8EbfwYcj/lNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b8:2a:8a:39:94:8c:2e:62:e0:6c:46:9e:a1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Validity
Not Before: Mar 29 08:00:22 2026 GMT
Not After : Mar 30 08:00:22 2026 GMT
Subject: CN=bbe4f2e0ddb2c947cd15700663e8c5ed5044b56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c4:cf:6c:93:19:b7:d3:89:3c:71:39:a6:8c:
e7:ba:5c:cd:3c:49:cd:2a:03:5f:06:b9:da:dd:9b:
60:62:3d:1f:29:f5:6c:30:83:25:94:75:97:9e:80:
55:c9:77:f1:58:24:7a:d0:f8:94:24:47:48:3c:3c:
a3:a9:07:c5:73:f3:8c:ad:5e:e2:80:65:f1:3e:14:
11:28:8c:ea:6e:04:3e:1c:18:2f:ad:75:47:b2:16:
70:f0:dc:7c:be:24:d6:89:31:e2:b6:4f:4d:10:6d:
f2:04:f6:74:33:6d:d0:20:39:f2:27:f9:10:a2:61:
b9:72:c2:95:cb:57:c9:cd:6b:63:5e:1a:b3:0f:b2:
d5:66:5a:84:75:9a:c4:86:d3:20:d2:53:e7:aa:50:
63:b8:b8:68:e5:13:57:3e:fc:d2:18:e6:8d:8f:7d:
2b:cc:4b:69:0f:e4:cc:ec:32:ab:41:fc:93:75:61:
88:e0:09:37:35:21:25:0c:b9:8a:9a:00:5e:9a:52:
ae:69:d2:bc:c1:80:fc:41:25:d9:f8:1c:cf:81:8e:
7c:50:95:8c:7d:af:1f:13:e3:ff:bf:82:08:2e:25:
c8:d0:ba:14:56:80:af:23:84:44:74:81:37:0d:13:
95:de:f4:45:68:3d:4d:26:b8:a3:73:f8:4a:86:3e:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E4:F2:E0:DD:B2:C9:47:CD:15:70:06:63:E8:C5:ED:50:44:B5:6F
X509v3 Authority Key Identifier:
keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:90:6c:c9:49:a8:b4:55:ab:ce:00:d6:dc:50:2a:60:b7:3a:
24:a7:35:d1:af:fe:1a:b4:3f:b4:2a:71:15:aa:d9:da:e0:70:
63:0e:60:51:07:1f:db:48:ae:bf:dd:6c:55:a0:3d:35:f5:7d:
4f:b3:f0:f1:0b:82:c2:b1:44:cb:dc:93:7f:b1:8f:15:94:0c:
b1:b2:3e:77:c3:67:3f:2c:0b:e1:71:c7:a9:21:96:e4:46:b0:
b0:8e:d6:88:46:52:7b:f1:b6:cd:ac:41:74:e6:7b:7a:40:b3:
49:3c:9c:9a:eb:d7:57:8c:34:c3:34:c0:92:d5:71:a9:5b:bf:
ea:bd:c2:91:e7:55:71:d3:67:2c:a9:d4:53:aa:ff:2b:f8:00:
f8:c1:b2:6d:18:7e:8c:da:37:aa:00:eb:1f:0d:18:79:26:eb:
a4:fd:0f:68:49:31:82:d9:70:1a:3c:be:ec:73:bd:41:ae:3e:
78:de:1f:a0:7a:8c:a9:38:c2:de:07:f1:09:a5:42:d3:1c:33:
2a:01:4e:43:9d:bc:be:47:5f:f6:9c:4c:c8:cb:9c:51:92:0d:
e1:90:bc:6f:48:f1:c7:dd:83:03:99:18:86:2e:06:89:2c:aa:
6c:82:ab:9e:bd:08:c8:ec:a7:1f:49:53:da:58:dd:42:92:b8:
cb:80:1e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:35 2026 by rpki-client