Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
File: REIuqj2u32uQIVnu2-lMqbfSKE8.mft (raw, json)
Hash identifier: vhi6d1ItTP9s7EXnFGWp0i6X3zWtHgvNyEUnvGIYxro=
Subject key identifier: B1:0B:23:8E:E4:9F:D7:EC:25:AD:42:FD:FC:1D:7A:AD:03:CC:3E:7B
Authority key identifier: 44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
Certificate issuer: /CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Certificate serial: 019CAC0FAB51808A7BF77BF6FEFAE864196B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
Manifest number: 0E7A
Signing time: Mon 02 Mar 2026 01:00:33 +0000
Manifest this update: Mon 02 Mar 2026 01:00:33 +0000
Manifest next update: Tue 03 Mar 2026 01:00:33 +0000
Files and hashes: 1: REIuqj2u32uQIVnu2-lMqbfSKE8.crl (hash: AN4OMEhwEuN2xeJel36EGUm7fEFA7RcfXIiOfAA6HXo=)
2: gCwdPZm7-2mkCNs_6h-_knpGMgA.roa (hash: zOOdjbIrjBtj8zo7gLNAmynH9YT4viYiJaXTAoE0p/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:ab:51:80:8a:7b:f7:7b:f6:fe:fa:e8:64:19:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44422eaa3daedf6b902159eedbe94ca9b7d2284f
Validity
Not Before: Mar 2 01:00:33 2026 GMT
Not After : Mar 3 01:00:33 2026 GMT
Subject: CN=b10b238ee49fd7ec25ad42fdfc1d7aad03cc3e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8e:6f:8e:15:0b:51:0a:9a:ff:5c:d2:13:11:
64:17:9e:92:3e:d4:22:54:55:57:b7:62:89:6d:b4:
d9:02:37:d4:0b:0c:56:f8:61:62:ca:f7:25:7c:b7:
8a:b1:08:26:bd:1c:3b:ac:72:3b:5b:a1:44:8f:6a:
c6:b5:6b:e8:f1:94:ae:82:43:79:f1:ea:8f:4d:27:
6f:8e:1d:72:24:10:da:af:d1:e0:81:e5:5b:0e:08:
af:8c:ac:15:d5:83:89:d3:4e:5c:6b:09:38:f8:51:
b3:e9:65:89:dd:bf:ce:a0:ab:1f:ed:bf:d9:4e:f8:
5c:72:6c:34:55:c2:14:81:dd:e0:63:09:51:ee:df:
34:de:b6:39:2a:86:f3:a7:83:a8:e4:2b:d2:73:12:
80:7a:5f:07:98:4f:57:04:ef:e6:e4:90:dc:33:c5:
43:b3:96:14:f1:74:81:ba:5d:7a:f3:15:aa:f8:93:
22:6e:fc:2a:21:b8:14:f9:66:f4:ec:3a:81:04:39:
cb:a6:cf:46:bc:68:e2:e5:d3:8e:5a:32:b0:b9:2f:
11:0b:a3:7a:e1:46:b6:5f:e9:5a:5f:aa:c8:77:b1:
70:5e:40:a2:c6:62:73:cf:1f:93:34:6d:a6:e8:72:
d2:85:9b:48:06:ee:cb:3a:34:10:23:4a:cd:7d:55:
3c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0B:23:8E:E4:9F:D7:EC:25:AD:42:FD:FC:1D:7A:AD:03:CC:3E:7B
X509v3 Authority Key Identifier:
keyid:44:42:2E:AA:3D:AE:DF:6B:90:21:59:EE:DB:E9:4C:A9:B7:D2:28:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/REIuqj2u32uQIVnu2-lMqbfSKE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/dd944d-8faa-4cce-aafe-c050f4c05f29/1/REIuqj2u32uQIVnu2-lMqbfSKE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:4e:cf:73:8c:db:80:61:82:50:53:04:45:11:a2:91:46:e5:
c5:cd:8c:ff:1d:a0:f9:bb:43:41:95:33:ae:7b:2e:71:e6:b2:
74:8a:d4:c1:39:54:4b:ba:54:ba:8a:ab:6e:cc:39:b6:04:e5:
00:b5:be:f0:2a:d0:05:9b:f1:d3:1a:01:ee:71:d2:f1:98:33:
39:85:ba:09:e0:d6:f3:c0:50:a5:71:1b:8c:fc:14:96:eb:8f:
dc:42:17:38:94:72:65:14:7b:58:c5:8b:be:a6:1a:15:50:99:
6a:ce:2b:fb:af:dd:8c:80:a3:ce:01:35:a7:1d:cc:9d:57:b3:
07:e8:86:f2:ad:7a:d2:3e:41:b2:64:ea:99:8c:7f:cf:30:89:
8b:c2:f1:a4:d6:22:04:73:ae:82:86:b1:31:b3:f0:e0:a5:79:
56:5d:06:58:f8:39:3b:0e:28:44:16:1a:ff:d3:dd:b8:22:5e:
f9:00:57:1d:fd:a2:23:a4:df:99:cf:89:27:d9:fd:39:e2:e1:
a2:cd:e1:c3:67:9e:3d:2b:fa:ea:91:13:54:dd:0f:73:02:9c:
22:7a:5c:f8:25:6e:58:ed:6e:bd:5d:c4:31:49:98:64:d1:b5:
ee:28:59:c5:a0:b8:d6:b0:2e:ef:85:9d:aa:68:af:ac:f5:7a:
77:a0:88:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:05 2026 by rpki-client