Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
File: _Dq1XVdQnL-ueYvXGqojs0RNjlo.mft (raw, json)
Hash identifier: bFF/brEygZdky6+3ePPbDw3JEI1AskUlOlJ1PALyekc=
Subject key identifier: 44:CE:99:9D:0F:22:25:4F:FC:60:52:0B:42:9D:F0:79:80:C7:6D:1F
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 019D98F55885839270C89087A113314F4CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
Manifest number: 0929
Signing time: Fri 17 Apr 2026 01:01:48 +0000
Manifest this update: Fri 17 Apr 2026 01:01:48 +0000
Manifest next update: Sat 18 Apr 2026 01:01:48 +0000
Files and hashes: 1: _Dq1XVdQnL-ueYvXGqojs0RNjlo.crl (hash: jV4SeInvYcNQpgeh1esXXXy9CtufWoxpJ26ezh/QSe0=)
2: bdFa7noc5JULgEIUUp2O_nnsfX8.roa (hash: oE4E3OOq0qDI/T3VHEtrFh4lpygnjYYLcPsEtbasbyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:58:85:83:92:70:c8:90:87:a1:13:31:4f:4c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Apr 17 01:01:48 2026 GMT
Not After : Apr 18 01:01:48 2026 GMT
Subject: CN=44ce999d0f22254ffc60520b429df07980c76d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b4:83:93:3e:4e:e3:8b:86:97:38:f6:39:be:
fc:2f:00:aa:5b:fd:2c:7a:2d:7a:63:73:10:a2:3b:
55:09:0d:34:33:02:3e:4e:2f:78:d1:89:4e:e7:80:
da:f2:ec:fb:c6:00:41:56:58:ad:90:28:7f:3a:0a:
32:94:cd:b4:fa:75:4f:17:04:a4:81:2d:ce:21:52:
51:82:0f:40:c0:80:32:e4:0f:e6:73:96:f3:4c:31:
cc:ef:b8:9b:42:d3:22:57:58:03:de:63:20:93:59:
02:8f:45:b2:17:01:04:63:f7:a8:95:fc:6f:78:7f:
cf:bb:68:c3:bc:8a:c5:ea:31:b0:24:d1:e3:07:8b:
b5:e5:ff:a7:f1:9a:78:a5:8d:37:7b:4b:fc:33:4d:
31:c5:6b:f7:66:4b:b1:f7:6d:3a:bd:d1:d5:58:df:
bf:99:fd:e1:43:d1:29:a3:a9:de:0c:95:2a:3a:13:
cb:02:3b:0e:e0:60:35:8a:40:45:76:20:33:b4:69:
d8:6a:80:72:2f:af:9c:ed:7d:e8:d6:cc:c1:f3:04:
82:d6:0f:02:f3:7b:3d:70:be:28:34:f6:5b:eb:01:
6a:c6:60:64:01:d0:93:8b:50:da:bf:ff:d5:29:20:
d1:00:71:3a:83:98:24:85:e2:01:18:79:48:d4:45:
7e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CE:99:9D:0F:22:25:4F:FC:60:52:0B:42:9D:F0:79:80:C7:6D:1F
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:88:dc:5f:fb:70:d2:49:8d:f2:13:9a:f0:3d:18:19:f8:2e:
43:0b:89:71:88:1a:cb:f1:e6:87:90:aa:3d:0f:ae:25:8f:bc:
f0:b8:cd:06:8c:71:c2:af:98:95:aa:58:41:64:a4:5c:ee:15:
63:ba:1b:70:e0:ff:75:27:c6:cd:50:f1:d2:e4:34:a5:2f:90:
e4:a8:8c:fb:90:a6:ad:14:d9:d1:e3:75:dc:2d:90:e1:97:6c:
86:34:79:1c:f1:00:ca:63:8b:c7:4b:88:23:2a:69:d5:4f:2c:
c4:b0:09:c8:d0:33:b5:d7:21:a3:56:48:04:5c:81:4e:bb:65:
fb:05:9e:29:70:bf:9c:22:ed:1f:c6:6f:a9:6e:20:99:94:e3:
dc:60:cb:f4:bd:61:2a:db:c5:4d:fc:06:56:67:6f:0d:e6:3a:
92:52:83:19:81:3c:a1:13:10:5f:db:5b:86:f4:a7:b6:fc:59:
11:b6:ac:5f:69:2f:b4:30:2b:56:84:47:ef:c4:78:13:69:f0:
e8:3c:d2:0b:ed:2c:12:6a:d5:e5:bd:e0:54:5d:eb:73:06:cb:
36:f4:32:e0:f2:18:36:80:91:8f:78:db:24:35:74:69:74:57:
54:22:ac:b7:c7:76:16:bd:51:f8:ae:66:7f:4e:49:b1:02:51:
a4:0f:d5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:55 2026 by rpki-client