Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: eHbA1ciztGnTbcr2wiFw5cWTB7GcXagJnkHDq48H/dA=
Subject key identifier: 35:28:FD:6C:B2:BD:25:5D:74:F5:CF:A1:87:D3:F0:E3:94:46:C2:8B
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 019E1E3522FC70AB145C15ECD60449EDE867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 1278
Signing time: Tue 12 May 2026 22:00:59 +0000
Manifest this update: Tue 12 May 2026 22:00:59 +0000
Manifest next update: Wed 13 May 2026 22:00:59 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: ofOMjf4Cm1nlsSnEyCVxsNtvs81nKegrCZDQWeKBuNA=)
2: _eQtw5cyWM7bN-n1wH5kFmdpMgc.roa (hash: sNGFzrnadHYgam/Tin+pJL2a8Tg3Ac1jpPx5ZlgeT5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:22:fc:70:ab:14:5c:15:ec:d6:04:49:ed:e8:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: May 12 22:00:59 2026 GMT
Not After : May 13 22:00:59 2026 GMT
Subject: CN=3528fd6cb2bd255d74f5cfa187d3f0e39446c28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4e:33:3e:32:4c:8c:d4:d9:b9:1c:c5:f1:e4:
36:12:e0:ae:bc:0e:40:49:d5:55:e0:7f:c6:70:e0:
89:8d:3c:2e:e9:cd:e6:fc:c4:7a:7f:fd:f1:0f:3a:
3c:2b:2e:a0:87:41:90:0d:e7:93:ae:10:c0:1e:fc:
e8:fa:28:c8:4b:9a:c2:35:d9:e7:cb:3f:6c:5d:f8:
d2:8a:d1:44:e6:14:05:fe:e8:b6:f1:35:86:fc:c0:
8f:68:4a:66:75:f4:91:6c:ec:ee:00:d2:9b:12:e5:
14:11:cb:0f:7e:c3:91:ab:f4:02:be:07:59:f3:f9:
c0:73:d3:de:8a:91:36:e8:ec:c1:cf:ee:f8:32:b6:
08:13:01:f3:b4:58:9c:86:be:e6:f5:66:20:ce:27:
5c:98:7d:5a:83:2c:3b:a7:d0:62:ce:c0:f9:b4:3e:
b3:52:9f:29:ea:08:c9:e3:0d:c1:f2:ed:83:07:77:
9d:d9:e3:74:39:a6:e8:76:06:89:95:15:2e:88:ec:
05:0a:3b:2d:e3:49:97:ba:fa:a4:e7:58:36:fe:e2:
2d:a2:07:4d:ad:11:e8:46:fa:b5:eb:59:32:41:2f:
f6:9b:b8:bd:08:85:fb:82:72:69:f0:27:86:fc:e6:
a7:68:1e:e3:89:99:71:3a:4f:0a:88:10:8f:a1:cb:
96:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:28:FD:6C:B2:BD:25:5D:74:F5:CF:A1:87:D3:F0:E3:94:46:C2:8B
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:50:22:3f:3e:60:d5:2b:4a:c4:90:d0:99:a6:6d:0b:fe:a9:
a8:8b:ae:3a:02:e1:20:41:10:14:ea:55:b1:c3:7d:33:ed:1e:
ad:fb:d6:17:7e:af:9d:14:16:2e:9b:26:0e:a3:ae:bc:a2:40:
a4:ea:b0:f4:fd:34:bd:b5:81:c8:17:f2:2b:25:24:03:20:8a:
95:9b:10:14:8a:74:4c:97:10:fe:35:a0:25:3a:b8:45:36:58:
31:62:58:10:a8:0d:b0:76:ce:d8:ec:88:66:67:d8:f6:cc:18:
66:28:95:d6:b7:49:2a:58:9b:cd:45:cb:4e:52:04:d8:03:01:
00:17:0a:18:08:d5:c8:c1:de:20:98:fc:41:12:45:c1:ee:aa:
cc:44:a4:d9:af:c5:79:44:00:62:35:27:bc:0b:55:95:2b:6e:
73:95:bf:6e:99:44:fb:27:ca:39:75:5d:86:8a:74:f8:12:f6:
41:71:26:66:ae:7d:2b:d4:2a:fd:43:24:7d:9f:43:26:64:ed:
6f:fe:ee:75:1c:c6:9d:42:fb:89:b7:8a:a1:1b:d4:0d:1a:ff:
08:d6:97:5f:90:3c:c6:e5:14:a9:eb:f6:be:44:67:d6:82:2f:
ef:4c:b3:23:c2:8f:0b:5e:39:0e:71:e7:3c:e1:8e:4d:16:13:
08:fa:f2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:49 2026 by rpki-client