Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
File: 44qr6o7im_fJFbw-8Luswn0Ozt4.mft (raw, json)
Hash identifier: OWU9mK7MiAYZ44VtuD7RHOpliRXqsu1EjU/j7Yjs/PQ=
Subject key identifier: 34:CB:CC:66:49:58:71:A4:54:C1:B2:3A:4C:AE:76:93:BD:E8:DF:19
Authority key identifier: E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE
Certificate issuer: /CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
Certificate serial: 019D3789B5DA03290825A8050FD582E59F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
Manifest number: 153B
Signing time: Sun 29 Mar 2026 03:01:04 +0000
Manifest this update: Sun 29 Mar 2026 03:01:04 +0000
Manifest next update: Mon 30 Mar 2026 03:01:04 +0000
Files and hashes: 1: 44qr6o7im_fJFbw-8Luswn0Ozt4.crl (hash: ovCKEdCrtKumMQ7hlTAub+jcAtYnopC9sCg/bGHFheE=)
2: PjyNMGY84TJ2cr5QJLc6HnzswgM.roa (hash: ZAnEXpXJffc4T6GUbV/LDI34CqWwT/3G+mLU5uuO0xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:b5:da:03:29:08:25:a8:05:0f:d5:82:e5:9f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e38aabea8ee29bf7c915bc3ef0bbacc27d0ecede
Validity
Not Before: Mar 29 03:01:04 2026 GMT
Not After : Mar 30 03:01:04 2026 GMT
Subject: CN=34cbcc66495871a454c1b23a4cae7693bde8df19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:db:9b:39:90:42:37:3e:0e:9f:0c:fc:93:
29:0f:10:63:e5:ba:db:94:c8:76:f4:bd:8f:db:53:
14:a2:a6:df:74:51:d0:d0:fb:da:d6:39:d2:fc:23:
be:e5:e9:06:db:fe:97:0f:0b:ab:d5:66:ed:ff:92:
43:c2:39:39:64:df:68:3c:f4:8b:2c:12:12:29:28:
d6:40:80:33:94:fc:65:fd:a4:a0:09:63:96:25:10:
30:f9:f5:db:d9:cd:9c:27:82:52:59:97:fa:29:cd:
63:0a:af:3d:09:d0:54:e1:1f:30:c6:e9:f5:39:9f:
b5:db:a5:d1:46:ad:4b:21:0d:ab:ef:1e:59:c1:cc:
a2:7a:93:cf:42:fc:0c:aa:60:40:5b:8a:2d:ba:b7:
96:dd:0d:27:f8:1b:e6:e5:58:cd:b2:62:28:6f:29:
f2:b2:b1:8f:c0:80:dd:c4:2f:d8:bb:a2:77:b4:e6:
1d:5f:8e:f1:eb:e9:d7:4a:7c:2f:ca:1d:10:ef:b5:
d3:a6:ac:43:ec:26:7b:44:82:f7:ce:84:16:fd:22:
a5:5a:d7:4a:df:d5:a6:90:fd:2b:a5:38:a4:bb:ef:
32:66:17:d1:8f:f6:60:d6:99:2b:2f:4a:93:f2:a2:
d7:5e:29:71:c6:6a:40:1f:b6:61:a6:38:66:5f:32:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:CB:CC:66:49:58:71:A4:54:C1:B2:3A:4C:AE:76:93:BD:E8:DF:19
X509v3 Authority Key Identifier:
keyid:E3:8A:AB:EA:8E:E2:9B:F7:C9:15:BC:3E:F0:BB:AC:C2:7D:0E:CE:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44qr6o7im_fJFbw-8Luswn0Ozt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/563afc-b194-41fb-a7a1-6aeae63ed8fe/1/44qr6o7im_fJFbw-8Luswn0Ozt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:60:dd:9d:a3:95:6f:46:43:01:98:fe:e4:e7:c8:dc:1a:7d:
d4:22:30:1a:bd:20:35:25:a0:b9:7c:31:02:8e:76:e5:e8:1b:
3d:ec:1b:4b:7b:35:02:72:00:21:a4:cd:da:e7:25:ad:3d:8d:
9a:98:a8:86:27:04:32:5e:d2:c5:b7:f6:2f:a7:00:e9:1b:aa:
6e:f2:b3:7e:76:e3:a2:7b:46:bb:f5:2b:36:90:91:b0:a5:13:
60:8f:52:6f:5f:f9:d2:90:39:30:f0:73:39:89:66:e4:46:06:
14:f8:b1:bc:29:3c:5a:22:63:e0:8a:b0:e0:7d:44:e5:1c:59:
14:3f:50:5c:b3:cc:67:98:16:11:5b:6f:9e:9f:7b:0c:53:d3:
87:5f:68:62:e2:f7:2d:cb:61:e4:0a:0d:d6:62:27:71:9c:cb:
8f:03:ca:de:dd:fe:a9:06:3a:cd:7e:ff:6b:b8:df:f1:e0:7f:
b3:21:9d:78:9b:ce:54:09:79:76:cb:a9:80:19:c6:61:b0:19:
8e:4c:01:2a:e0:eb:12:65:6a:23:67:46:94:47:6a:1b:32:c1:
31:47:88:0f:b8:55:31:c0:20:d6:83:a4:db:91:03:50:21:04:
87:7a:6c:c2:ae:f9:6b:0a:c5:80:ee:a2:44:8a:7d:12:b0:bf:
49:3e:3e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:20 2026 by rpki-client