Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: p5tVQTBwKjyKVY+HPdCnWSfpWb+ySufxlsMu7UqemRA=
Subject key identifier: D3:C2:98:54:59:2D:CB:BD:A5:2A:A3:D6:A6:0B:41:35:74:CC:49:71
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 019F8F10138AC6DF8A203BD0225C8AF7D338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 1337
Signing time: Thu 23 Jul 2026 13:00:23 +0000
Manifest this update: Thu 23 Jul 2026 13:00:23 +0000
Manifest next update: Fri 24 Jul 2026 13:00:23 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: VVnxwQZbh1aO/Y5WzEq3hqeM7D+dkmu8jPVGyUNeCiQ=)
2: _eQtw5cyWM7bN-n1wH5kFmdpMgc.roa (hash: sNGFzrnadHYgam/Tin+pJL2a8Tg3Ac1jpPx5ZlgeT5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:10:13:8a:c6:df:8a:20:3b:d0:22:5c:8a:f7:d3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Jul 23 13:00:23 2026 GMT
Not After : Jul 24 13:00:23 2026 GMT
Subject: CN=d3c29854592dcbbda52aa3d6a60b413574cc4971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:09:38:2d:34:bb:cb:3f:6f:4f:49:be:be:05:
c0:66:fd:57:f9:27:04:c3:54:d4:8f:88:43:ae:c4:
4b:ce:45:3c:2c:eb:99:7d:a3:53:21:ef:be:6b:2f:
99:70:5b:85:8d:eb:02:e9:2d:bb:85:93:56:16:03:
ef:94:19:ff:44:dd:22:31:cb:ab:51:e5:05:20:42:
b4:56:8e:1e:f3:f6:f0:41:70:3f:1e:c2:1a:a3:fe:
47:b1:9e:2b:7b:36:d3:b9:82:5e:77:14:a9:a5:21:
4c:69:1e:c5:49:70:bc:b1:a2:5a:b0:cb:5c:4b:b3:
a6:f8:49:58:40:fb:2f:60:0b:6e:fd:de:b0:b7:19:
32:78:7a:5b:d8:8b:20:c2:47:5b:3f:56:81:bc:67:
23:29:4a:e8:f9:ad:b3:d9:9b:ca:79:11:08:90:3b:
e0:53:d5:98:9e:00:94:a0:50:5a:da:9f:2a:67:cd:
30:36:bc:28:d8:b8:e0:bc:eb:73:aa:f0:71:6b:a3:
a1:b5:ef:e2:52:0a:fe:42:85:f4:9b:1c:35:5f:55:
ba:79:9e:02:44:43:2c:f7:4d:67:23:3d:8b:7a:05:
4f:02:a5:89:ec:68:0f:65:a3:f5:ff:71:c4:29:b2:
e5:0f:a2:26:ed:29:89:72:d4:e3:44:3b:b1:06:ab:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C2:98:54:59:2D:CB:BD:A5:2A:A3:D6:A6:0B:41:35:74:CC:49:71
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:be:08:e7:be:01:2f:d1:7c:fd:b4:3e:27:a9:ba:00:26:51:
44:32:ca:aa:f4:03:f2:59:3e:72:ea:e1:bf:d5:ac:ca:18:cc:
0b:7d:67:9e:56:87:e4:8e:40:26:b0:12:22:4d:82:8f:54:c0:
d4:7b:e8:e2:49:22:99:fe:54:19:9d:7c:ce:19:ce:a0:24:da:
1f:1e:29:ad:47:6d:8d:e1:59:a1:23:cf:ae:df:ac:14:1b:e5:
ee:fa:97:9f:b8:36:80:75:98:3d:f5:33:13:4f:e8:3e:80:9f:
67:86:29:37:b6:fb:f0:26:0e:43:00:28:a5:b2:ed:50:59:f8:
8f:63:fb:84:c9:e6:79:e1:76:07:27:d2:e1:bc:78:ad:03:95:
6b:2f:08:2d:a7:78:ef:cd:2b:3e:40:ff:e2:32:a0:03:05:45:
3b:5a:a9:cf:a4:60:4e:6b:28:40:aa:93:53:c4:86:a7:b5:88:
48:e9:83:a6:c5:03:71:fc:f1:e1:79:2e:33:23:12:c8:b3:11:
3d:8d:9a:74:e3:b8:a2:35:5a:96:35:ba:17:48:50:18:be:b2:
db:a4:42:4a:4e:e7:60:f0:be:cd:07:cf:77:0c:63:fe:3f:a4:
f3:44:9b:55:cb:8c:c4:63:94:ad:1a:e0:22:20:84:9b:a1:8e:
9a:de:11:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:07:32 2026 by rpki-client