Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: +fKVzwVs4+2Qgf6uSNvbLAtB3DK6sqUxddrNG0y3xn4=
Subject key identifier: 74:19:23:59:2C:F1:2C:81:61:28:99:63:A5:6A:6C:4A:59:22:D9:94
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 019D2AE06E02E1BF1E9E41CD20535480EE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 11FA
Signing time: Thu 26 Mar 2026 16:00:44 +0000
Manifest this update: Thu 26 Mar 2026 16:00:44 +0000
Manifest next update: Fri 27 Mar 2026 16:00:44 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: WgyqQ3fCB4+4/vMhOxQRSp+rTOM0NOqMGKbCBkLPvxI=)
2: _eQtw5cyWM7bN-n1wH5kFmdpMgc.roa (hash: sNGFzrnadHYgam/Tin+pJL2a8Tg3Ac1jpPx5ZlgeT5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:6e:02:e1:bf:1e:9e:41:cd:20:53:54:80:ee:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Mar 26 16:00:44 2026 GMT
Not After : Mar 27 16:00:44 2026 GMT
Subject: CN=741923592cf12c8161289963a56a6c4a5922d994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e4:6a:32:17:91:1e:6b:c5:2c:dc:f9:70:f5:
ae:9a:13:79:70:f1:62:f4:bb:b4:0d:87:0c:a7:c6:
5d:76:f8:74:cc:a8:35:db:b4:c9:90:c9:63:2e:b4:
94:86:53:0d:7d:24:04:76:64:be:93:38:b6:8d:89:
00:3d:a1:39:55:01:a2:88:f3:7a:92:71:0d:17:55:
dc:26:e9:9d:07:6a:9e:a7:2f:5e:de:18:96:51:7b:
4e:63:eb:f8:b5:e7:19:68:23:0a:13:d2:ae:ee:1c:
90:48:59:26:2d:e2:00:83:ee:11:ec:53:00:5d:a1:
ff:a4:35:dd:fb:ec:fd:0a:00:01:c2:39:34:26:64:
1d:d0:06:37:38:81:af:b6:72:0b:d7:54:2f:3a:ea:
14:3b:5f:bf:96:73:fe:71:9d:e7:1b:a5:6b:65:66:
fe:be:6f:38:37:cc:00:30:5f:33:73:c9:1f:39:c6:
bd:c0:e2:1e:36:16:8e:9e:f1:9b:53:03:97:bb:c1:
74:2d:ea:6f:5d:a9:f8:20:df:77:ef:6e:f0:67:f3:
31:ae:b0:83:fa:8a:5f:20:a4:b9:a9:2e:fa:6c:ff:
41:04:5d:10:91:ae:ee:0e:3b:aa:8c:49:3c:92:89:
8d:32:8c:a9:19:6f:21:65:87:8b:31:d2:4b:a3:85:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:19:23:59:2C:F1:2C:81:61:28:99:63:A5:6A:6C:4A:59:22:D9:94
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:72:7c:bd:75:5a:9a:d7:82:74:83:cf:5e:b6:60:b0:2a:cc:
e2:fd:4e:13:88:98:45:e1:ab:e9:0f:02:a7:1e:a4:49:c1:46:
5c:c0:4b:83:a4:29:42:2c:d8:ed:2b:6d:d8:b6:56:87:fd:0e:
4d:39:ae:33:ef:a8:63:6c:b4:9d:be:85:d6:40:b0:5d:a3:ef:
76:f3:b5:03:79:10:80:5a:45:85:b7:65:24:9f:f4:ab:58:3b:
88:40:30:02:45:37:e8:d8:d8:5b:bd:02:f8:50:83:a2:8e:de:
1f:3a:c7:d4:72:d2:0f:7c:d4:a8:18:e6:7c:f8:b2:7f:6c:dd:
88:99:8d:c1:e0:0b:2c:88:70:8c:39:32:a0:b8:b4:73:fb:88:
5a:53:a9:1c:af:23:58:c2:78:14:3e:97:cf:85:45:99:04:de:
2b:7f:10:4a:d9:f1:8f:e1:ca:fe:71:04:7c:43:b5:20:11:1a:
95:66:e8:2e:97:56:ac:52:09:f1:65:4a:e4:ba:db:d2:e6:e2:
bb:3c:29:d1:79:62:05:a4:e1:67:26:e0:cf:1f:57:1f:70:15:
23:86:06:db:2d:07:86:ad:c9:19:7b:33:47:72:5b:65:ab:5c:
fa:88:a4:0d:a9:af:46:42:d0:4f:11:cd:6f:e8:ed:03:f0:9d:
97:39:c1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:27:48 2026 by rpki-client