Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: +wiNAt6VREC8Efdh3UYMb4/aGSgg70dp1LWdgrLOUnI=
Subject key identifier: E1:48:AF:44:5A:75:D5:86:E0:D1:EE:68:BE:E6:E9:37:29:49:63:76
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 019D3865B339F483917B4DEC75377ADF769D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 1201
Signing time: Sun 29 Mar 2026 07:01:22 +0000
Manifest this update: Sun 29 Mar 2026 07:01:22 +0000
Manifest next update: Mon 30 Mar 2026 07:01:22 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: YpfhUSnTlEhNAm4EvKbdkUNFbrzqRP6pEE7233FlihQ=)
2: _eQtw5cyWM7bN-n1wH5kFmdpMgc.roa (hash: sNGFzrnadHYgam/Tin+pJL2a8Tg3Ac1jpPx5ZlgeT5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:b3:39:f4:83:91:7b:4d:ec:75:37:7a:df:76:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Mar 29 07:01:22 2026 GMT
Not After : Mar 30 07:01:22 2026 GMT
Subject: CN=e148af445a75d586e0d1ee68bee6e93729496376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ed:0a:e3:ae:c4:29:fb:9d:71:4f:51:0b:60:
e4:84:9e:e5:18:63:37:08:d8:b6:47:c0:d1:25:5d:
29:96:88:b4:b3:09:b6:f4:2b:20:fb:d5:b4:ee:fb:
33:86:46:11:fe:f0:b6:9d:20:2d:88:3c:8b:63:da:
d9:77:1f:5e:22:f3:d3:85:02:1c:72:58:37:30:85:
80:e5:94:90:a0:c4:84:0b:69:1e:c0:32:39:47:ef:
c7:ca:67:c2:2b:c0:01:74:43:41:4b:5a:ae:bb:13:
d7:88:a7:89:30:0a:70:dd:22:2c:24:0d:2c:08:b0:
41:80:36:2d:7e:42:9f:c7:7a:30:09:ef:64:1d:1b:
97:2b:df:f3:87:a3:a6:b2:58:ac:14:40:44:b8:39:
e0:70:10:5a:8f:b6:c5:3e:0d:78:d9:bf:ec:36:eb:
f3:94:bb:29:55:bd:c5:54:df:74:96:aa:a9:7e:86:
25:9a:77:5f:c2:f8:83:05:b6:03:52:31:81:c9:1f:
c1:30:0d:86:87:61:a8:ce:e3:35:21:6a:29:cb:65:
d7:77:a9:e3:f3:92:fb:c8:57:a2:ab:d2:f3:e9:21:
a4:bc:a1:f3:a0:68:89:8c:b6:93:30:cf:5e:8b:57:
60:c3:39:e2:8d:6c:f1:70:6f:fe:15:a2:f3:79:6e:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:48:AF:44:5A:75:D5:86:E0:D1:EE:68:BE:E6:E9:37:29:49:63:76
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:74:f4:c0:62:2b:69:27:89:a6:8c:05:b3:e2:79:20:65:3b:
b7:59:01:9a:24:31:93:0f:b7:61:70:25:db:29:14:d7:f3:8b:
7d:ac:c2:69:e8:43:17:da:b7:8d:30:ee:d0:60:62:eb:d0:d4:
00:47:98:6e:d5:6d:22:17:41:b5:70:48:5d:62:10:5c:e3:6d:
50:43:19:f9:a4:43:50:b8:cb:44:e7:92:41:6f:60:be:fe:f1:
83:43:af:05:c2:1d:c0:63:ce:76:58:da:16:5d:ba:3f:44:93:
81:6f:a5:14:1b:1d:c1:66:67:6f:56:69:1f:d8:d4:cc:2f:d6:
07:c1:28:b8:05:3d:30:75:62:db:22:3f:65:99:c8:98:27:6e:
85:32:b0:f7:e2:63:8b:e3:78:d4:44:95:53:05:e4:4c:9f:6f:
fb:fa:2c:b6:cc:9f:ff:fb:b9:ff:0f:46:3d:44:b1:ae:5f:e4:
81:5d:90:2b:f3:11:8c:db:3a:32:5f:87:9e:b7:c5:61:72:0d:
bd:aa:c8:b2:ef:ac:da:c5:0d:d6:91:ae:70:6e:43:5c:07:72:
d3:dc:26:31:ae:89:ce:af:e7:b0:1e:d1:d3:91:0d:cb:c0:c6:
54:82:ff:09:13:bf:00:c2:45:93:c5:93:36:22:27:b6:d1:a9:
43:0c:b4:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:54 2026 by rpki-client