Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: G8wf061wPNzoRlvvPOYLQaDv2dMQBTzlw2/qGiFmziA=
Subject key identifier: 56:38:58:65:F2:AC:42:16:63:A1:64:EB:29:86:51:4D:82:1B:51:39
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 019F1943ED17FDB92EE7EB7B4BCF089633FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 12FA
Signing time: Tue 30 Jun 2026 16:01:49 +0000
Manifest this update: Tue 30 Jun 2026 16:01:49 +0000
Manifest next update: Wed 01 Jul 2026 16:01:49 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: vo6S/SoZe5WslPHCnmmeZZouaWTVt6qj1jTnVqY8dio=)
2: _eQtw5cyWM7bN-n1wH5kFmdpMgc.roa (hash: sNGFzrnadHYgam/Tin+pJL2a8Tg3Ac1jpPx5ZlgeT5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:ed:17:fd:b9:2e:e7:eb:7b:4b:cf:08:96:33:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Jun 30 16:01:49 2026 GMT
Not After : Jul 1 16:01:49 2026 GMT
Subject: CN=56385865f2ac421663a164eb2986514d821b5139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:b5:38:98:32:26:72:c9:69:50:a6:5b:af:
86:70:cd:cb:7b:95:ea:35:1f:01:81:70:de:d4:b0:
86:98:ec:04:c9:20:8f:29:b4:fb:30:d3:ff:38:70:
ac:e8:dd:20:73:7e:f0:0f:34:f1:71:26:6e:5b:31:
12:2b:97:78:b7:df:b0:5f:12:d1:0d:72:81:68:73:
3c:3b:d3:0f:20:da:ed:fe:83:77:c3:82:7d:f0:16:
99:df:a9:f6:ec:ad:37:52:93:c1:5e:59:a7:54:a7:
0c:c2:ce:ea:c7:78:44:02:22:40:61:50:ee:9e:7d:
fc:2b:d8:0a:93:3f:68:f3:8b:0c:6d:eb:d7:12:bd:
ae:6e:c2:05:28:de:e5:1b:0f:62:50:60:c2:29:1f:
41:2c:75:43:ca:0a:53:71:8f:87:d2:a7:1b:07:51:
a4:5a:3d:aa:77:c0:81:10:2e:58:cf:a0:e1:62:1b:
3c:aa:ac:da:5c:07:7f:52:17:54:98:37:f3:f2:69:
95:0d:51:f3:00:c7:de:b3:42:77:b5:51:a5:bb:47:
7d:29:8d:de:88:a3:30:c0:02:71:df:79:c9:e4:1a:
86:d6:15:94:bd:d7:e1:a7:e9:c2:49:36:7f:54:59:
99:33:44:1f:6e:60:fe:56:52:e8:ee:99:45:a1:c6:
86:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:38:58:65:F2:AC:42:16:63:A1:64:EB:29:86:51:4D:82:1B:51:39
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ec:f3:f6:6a:b9:a1:32:68:bb:07:88:f9:65:9a:a6:80:64:
89:6c:1a:98:93:6f:65:71:21:dd:41:c1:cf:06:7f:fd:8d:cf:
c8:c4:06:f8:b5:20:8a:38:7b:7f:61:9e:b1:e2:a9:d0:64:3a:
e2:9d:8c:d7:f2:77:13:a5:9b:b2:19:5f:fa:a1:5c:94:47:50:
c7:8e:5f:6e:a5:99:8b:9b:fc:46:8d:5d:ea:2f:a5:f1:7f:f6:
d1:61:dd:db:df:05:b5:81:31:ce:f4:32:e4:87:1c:ab:95:57:
6c:98:5f:21:45:5f:9d:77:1f:38:68:31:9c:c5:29:a5:f6:4a:
fd:15:90:71:a4:97:d6:e8:10:04:2b:a0:77:56:de:77:0d:19:
61:3d:29:57:09:f6:47:09:2d:94:5d:a6:63:08:42:2d:4e:1a:
75:81:4a:17:42:d0:bc:f3:ae:84:8a:34:9c:fb:c8:5f:c8:3f:
3f:b7:d6:a8:6b:6b:8a:ec:d0:5e:d7:da:69:08:4b:70:c1:3b:
7b:ea:25:c3:51:bb:95:ca:53:1d:f6:2a:df:55:dc:3e:0b:11:
98:04:4c:6c:eb:83:53:1b:f8:8f:9e:af:cf:55:a7:d1:fe:fb:
46:86:7e:a7:26:60:16:d9:9d:38:fb:64:a2:e7:6a:ef:0b:26:
8a:01:b4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:31:35 2026 by rpki-client