Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier: +//121ijjrr3c64VydIxTZb+P3cx2SwZDhGG5th0fGI=
Subject key identifier: 2A:18:35:0C:AE:6B:59:F2:BF:C2:26:FD:14:0F:DB:60:9E:11:4F:1E
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial: 019E1D22933D59A3653169D8EDB60865AEC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number: 0FD7
Signing time: Tue 12 May 2026 17:01:05 +0000
Manifest this update: Tue 12 May 2026 17:01:05 +0000
Manifest next update: Wed 13 May 2026 17:01:05 +0000
Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: 7EtIaj6/Gu/KZJVn6g0/cCHOve7uPcj71W0L6VAk0aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:93:3d:59:a3:65:31:69:d8:ed:b6:08:65:ae:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
Validity
Not Before: May 12 17:01:05 2026 GMT
Not After : May 13 17:01:05 2026 GMT
Subject: CN=2a18350cae6b59f2bfc226fd140fdb609e114f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fe:c9:a0:35:d0:f1:73:4d:e6:ae:3a:1f:d5:
6b:8f:90:aa:93:0b:8d:95:ba:00:20:95:8f:cf:af:
9e:82:01:c4:d4:0e:9e:91:75:87:21:25:21:e6:96:
d0:2c:d8:fd:2a:7e:51:de:e6:1c:81:8e:09:d7:c1:
b3:75:e9:be:ef:52:26:2a:73:87:d3:88:fb:49:99:
53:18:95:4f:78:51:a3:57:61:1f:84:ef:33:d0:76:
57:f7:62:12:5b:01:b7:53:ac:d2:01:b2:40:ac:74:
3f:ee:65:9e:ec:91:83:54:57:0f:ba:78:8d:f3:63:
c1:e6:f8:ab:0b:83:45:7c:04:0a:fe:72:ca:ab:de:
3d:e3:4b:21:4a:2f:49:87:93:12:46:2f:7f:d9:c7:
8b:b8:b6:e6:81:59:55:f0:34:8b:67:3d:7f:62:91:
54:1a:ce:ee:13:06:01:39:36:1d:e8:9d:cf:b2:96:
80:c4:68:f1:74:09:45:f5:74:09:95:f6:fa:64:1c:
ba:ee:2f:4e:c6:a0:4c:2d:26:f6:99:31:c5:cd:66:
b4:91:9c:05:9c:dd:f4:17:e5:f6:7b:13:47:92:ad:
bb:bb:5a:e5:18:14:8a:81:94:ee:0e:8e:64:1b:56:
b6:31:ac:48:8e:67:a1:ad:8c:90:cf:56:8a:a2:da:
34:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:18:35:0C:AE:6B:59:F2:BF:C2:26:FD:14:0F:DB:60:9E:11:4F:1E
X509v3 Authority Key Identifier:
keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:d0:de:47:0f:c0:b4:47:02:65:da:92:4a:7a:2d:2d:41:2c:
fe:9e:af:f9:af:6b:30:2d:03:d6:a6:35:76:64:58:24:90:45:
78:78:52:72:7a:f1:3c:61:15:b4:d6:10:ad:43:4e:1f:dc:b1:
0c:af:e9:bd:d6:11:5d:35:43:09:1b:6f:34:49:70:56:3f:e5:
f6:4e:35:ef:4c:54:27:2b:c2:63:97:80:31:cd:c9:d6:df:be:
5c:ba:26:63:83:07:92:bc:88:ef:1c:7b:6a:dc:27:6f:3c:5c:
9d:a4:7c:ca:af:33:7c:9c:a7:f6:10:1b:ef:f8:a5:ae:2b:c6:
73:cd:8f:d5:52:89:71:76:6c:b0:c7:06:63:2e:4d:52:8a:9d:
66:bd:ce:73:2f:37:99:d2:cb:f0:6e:90:ec:b3:df:57:70:4b:
95:ce:42:84:ac:65:7a:f8:22:8d:82:22:fb:50:5c:92:50:34:
8f:7d:d3:d2:52:ae:d0:10:ce:03:4b:c6:f2:bb:77:72:fb:9b:
4c:7d:6e:64:04:45:94:21:87:bd:cd:25:67:cf:65:90:ef:09:
b2:7a:44:73:a8:0f:4b:ea:f8:23:a3:7d:ae:67:07:14:8d:d4:
3a:fa:ac:7c:bb:37:de:46:39:71:3e:e8:f2:5a:15:c6:00:bc:
02:b6:c2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:23 2026 by rpki-client