Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
File: 3o44GHrnDLx77WlXWfDgMpn7swI.mft (raw, json)
Hash identifier: cXcV1FaP1PXOtVFPoyikjk9vzTJF7oP+owkv/EsmhkQ=
Subject key identifier: 4C:48:81:CD:EE:64:B4:C7:23:D5:8F:1A:09:9C:DF:0E:C3:59:48:41
Authority key identifier: DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
Certificate issuer: /CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Certificate serial: 019D2B17AAADE254438F661C2457E860D4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
Manifest number: 0511
Signing time: Thu 26 Mar 2026 17:01:04 +0000
Manifest this update: Thu 26 Mar 2026 17:01:04 +0000
Manifest next update: Fri 27 Mar 2026 17:01:04 +0000
Files and hashes: 1: 3o44GHrnDLx77WlXWfDgMpn7swI.crl (hash: tL2INSfhZNyBmgtTTgaYt4mUmzbVaKSJxna+p0h7N2w=)
2: RPnqpd4QiTnwCz1MgHARgUiKRfA.roa (hash: EMQ9uAHdxhy6q4kC92RKeDGjFCm7FDg8EbfwYcj/lNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:aa:ad:e2:54:43:8f:66:1c:24:57:e8:60:d4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e38187ae70cbc7bed695759f0e03299fbb302
Validity
Not Before: Mar 26 17:01:04 2026 GMT
Not After : Mar 27 17:01:04 2026 GMT
Subject: CN=4c4881cdee64b4c723d58f1a099cdf0ec3594841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:6b:61:a6:70:48:40:d8:7f:34:09:68:65:
c8:18:b2:76:00:64:42:2f:9a:aa:d8:11:ee:80:2d:
71:af:cd:6b:c7:23:ba:70:2f:ed:51:56:dd:93:6c:
c8:71:af:dd:a9:4c:69:98:67:86:40:5b:e3:43:1d:
a6:7d:15:f8:79:a8:6e:c8:1f:33:23:ee:c3:06:24:
8c:df:cf:07:c8:0b:b1:fb:01:88:fd:8c:ca:88:02:
e3:ed:8f:c5:b0:60:4e:fd:ef:dc:4e:81:e6:80:c8:
49:38:e9:f4:53:10:c5:78:9c:10:c4:71:7d:45:00:
2c:57:a6:7e:4b:1e:74:57:cb:74:64:42:db:c2:81:
3c:6b:9f:58:22:bd:74:36:4d:86:46:9d:d5:59:6f:
db:4d:a9:00:3d:e1:de:95:5c:70:84:c1:ba:e2:7a:
1e:12:75:86:98:1c:a4:16:9d:fc:a8:ac:64:79:ab:
76:ef:dc:c5:cf:35:78:35:4f:6d:ab:a4:d7:54:9c:
75:1a:c3:a5:39:b6:1b:2d:90:3d:77:d2:5b:9b:96:
a9:25:9c:b8:18:3d:2c:d2:67:a5:b4:70:ed:2d:d4:
f5:11:f6:c3:8b:4a:75:b1:1f:d4:69:1c:f6:44:1d:
bb:a0:16:67:e1:3e:d3:26:83:dd:07:db:d5:ff:98:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:48:81:CD:EE:64:B4:C7:23:D5:8F:1A:09:9C:DF:0E:C3:59:48:41
X509v3 Authority Key Identifier:
keyid:DE:8E:38:18:7A:E7:0C:BC:7B:ED:69:57:59:F0:E0:32:99:FB:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o44GHrnDLx77WlXWfDgMpn7swI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/580c11-3913-4479-bea3-5b1f48b3e214/1/3o44GHrnDLx77WlXWfDgMpn7swI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5f:21:03:4a:27:d5:f9:02:36:b6:43:e2:3a:d1:22:a9:97:
e8:68:ba:18:81:f9:1e:c6:fa:f7:cb:75:f1:00:d2:c4:3a:30:
24:8d:b5:63:ea:e2:7c:a9:85:c3:42:5d:04:77:bd:dc:8e:bb:
0d:9c:63:6c:f3:1f:62:7a:f1:ee:56:cc:63:ac:0f:0a:b9:5e:
a1:db:f2:08:2f:c0:43:0c:d5:90:95:1c:48:eb:b3:48:29:ce:
af:0d:03:4a:fa:7f:29:12:4a:0d:8a:7e:d7:83:49:27:34:0d:
d3:80:cd:56:80:f4:0f:19:2a:69:ed:d3:95:e0:7e:5d:87:93:
7a:ec:3a:d3:d9:41:b0:57:d9:09:c1:3f:9e:9d:94:29:a3:d4:
87:0c:3a:40:2e:78:b1:04:fa:40:46:b7:bc:d0:06:1c:72:00:
b4:b6:5d:0f:ec:96:a1:da:c8:cd:f4:68:67:4c:8c:d6:9f:51:
16:65:eb:69:5a:dc:49:17:6b:4d:c1:30:f0:f7:26:f5:00:65:
41:cd:af:b3:33:fe:71:b9:c8:e9:94:af:48:d9:4a:67:48:33:
dd:d3:0c:08:1f:46:ee:6a:aa:8c:05:bf:b5:b7:10:22:30:80:
b0:4f:48:41:19:b4:8c:88:a4:09:47:75:e9:27:dc:40:79:5e:
1b:9a:04:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:38:30 2026 by rpki-client