Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: XV7DTOUIdnRC349TUkWgKGgwRoqC0UQQ72dxyTfrJLA=
Subject key identifier: 48:89:ED:23:58:84:99:C0:07:D1:10:43:1E:86:E2:04:01:E3:2F:F4
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 019DA943B0AA487BFABA278F4B4B42CC8A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0E25
Signing time: Mon 20 Apr 2026 05:01:18 +0000
Manifest this update: Mon 20 Apr 2026 05:01:18 +0000
Manifest next update: Tue 21 Apr 2026 05:01:18 +0000
Files and hashes: 1: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: fA/RAxbqQh5fTukdg0Pqjxql1rWKStgDMOsWfxvDbHM=)
2: gabLNz-9haR8x0JVvUH9RWZfT3o.roa (hash: elMsH5/2kflaBwBGb1wo4RBVBbTZ4kW2OpPSbwpINts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:43:b0:aa:48:7b:fa:ba:27:8f:4b:4b:42:cc:8a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Apr 20 05:01:18 2026 GMT
Not After : Apr 21 05:01:18 2026 GMT
Subject: CN=4889ed23588499c007d110431e86e20401e32ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e1:8d:c7:49:e6:ef:95:42:c3:e3:6b:f5:a2:
3a:c9:97:10:be:d2:ec:55:e2:8d:7d:ad:27:b5:62:
f0:73:8d:15:0a:9b:7a:fc:ac:81:0e:c4:33:84:90:
44:7e:b4:e7:c6:26:95:d4:7c:eb:6a:92:55:82:d5:
3e:f7:21:8c:be:11:37:85:63:a4:fb:44:0b:ae:f8:
75:ea:fd:dc:12:45:9c:09:82:35:01:c5:f4:f7:6b:
43:6a:7b:fb:46:00:4b:7a:5a:44:e5:44:17:78:6b:
1e:b9:6c:12:5b:90:39:cd:e8:17:c3:87:fb:39:a1:
b3:9b:ef:cf:46:84:f3:05:7d:64:89:38:a0:12:f4:
f0:57:c8:dc:9a:d2:0a:c2:b4:d2:4a:77:84:29:f0:
a6:ae:6d:5d:92:88:a1:a5:a8:cf:01:70:e0:37:da:
51:37:e2:70:f5:e9:cb:0a:17:84:5e:01:5c:eb:f6:
ed:04:1c:1b:d0:13:10:ec:d2:75:dc:20:30:7c:53:
d2:1c:4f:46:fe:7d:f9:e4:4d:36:f1:54:06:f6:b2:
5e:09:57:43:84:1a:48:a5:9d:10:c1:de:0e:d9:7c:
16:16:e0:dc:05:39:50:00:af:f5:8e:ad:fd:b5:91:
37:4e:65:ed:a8:6d:70:93:4a:eb:18:1c:d9:6f:db:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:89:ED:23:58:84:99:C0:07:D1:10:43:1E:86:E2:04:01:E3:2F:F4
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1d:12:7a:14:44:60:4b:da:a1:be:74:97:ee:8b:8f:56:ce:
1b:8c:b9:24:05:57:36:e6:ff:11:05:be:91:80:16:a9:51:8a:
2a:62:16:05:aa:88:f5:20:e9:ed:7b:18:5b:65:7c:93:90:d8:
4a:18:f1:62:27:6f:84:60:a0:8e:ca:b7:01:a9:9c:74:11:e1:
3e:2a:fe:76:e3:d2:af:e0:56:ac:9c:1e:88:35:fa:b5:1b:f0:
85:7e:6a:55:d7:4c:88:4b:6a:e4:cf:49:79:8d:6c:fe:c9:28:
e9:ce:bc:23:25:60:b2:9f:45:7d:c4:e8:f4:59:3f:1a:77:3d:
dd:9a:1e:fe:97:cf:20:8d:36:e4:3f:94:5a:1c:c6:a2:fd:08:
0a:4b:f1:97:13:79:44:46:39:52:54:72:43:f6:0b:df:0e:7c:
62:f7:49:0f:dc:b3:f2:fc:16:24:dd:e2:30:04:ab:73:4b:dc:
a1:43:0c:a4:4d:fe:ae:83:a0:74:01:a6:cd:ba:0d:21:1a:15:
98:5a:da:c3:95:7d:e1:d8:7e:67:19:e2:a3:21:8f:ff:25:ab:
dd:9e:43:11:e2:48:e0:a9:e0:cd:de:f6:ab:cc:29:b5:03:e2:
ca:3c:10:77:8c:48:08:d0:31:bb:cd:77:d0:0c:45:04:1e:9d:
86:5f:53:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 09:41:00 2026 by rpki-client