Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier: iMq+MaisyhIdDvLDY0l9yoFt34/T7gov/WxU3OpEPKY=
Subject key identifier: BD:7B:C7:66:9C:4F:D1:F3:DF:2C:C5:72:6A:3F:2A:CC:8C:39:BE:77
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial: 019CAC4731010DCDE2989229F833D8340098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number: 0F18
Signing time: Mon 02 Mar 2026 02:01:12 +0000
Manifest this update: Mon 02 Mar 2026 02:01:12 +0000
Manifest next update: Tue 03 Mar 2026 02:01:12 +0000
Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: FVdZaIbMODuvPKJC/p7GV8HqePWntwZz9AF0GwthcLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:31:01:0d:cd:e2:98:92:29:f8:33:d8:34:00:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
Validity
Not Before: Mar 2 02:01:12 2026 GMT
Not After : Mar 3 02:01:12 2026 GMT
Subject: CN=bd7bc7669c4fd1f3df2cc5726a3f2acc8c39be77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:93:70:3b:67:d0:10:1b:71:7a:42:06:8f:d0:
ba:4b:a1:9e:87:d6:05:b0:78:fb:77:47:35:2f:ca:
82:f8:fd:45:20:e7:f6:38:1e:e3:73:c6:58:43:4e:
ec:14:dd:d4:fa:26:07:b9:08:c1:c2:98:8f:ac:93:
a1:e3:48:b5:99:44:03:55:42:8c:50:bb:51:41:d2:
72:3b:01:06:56:6f:ee:30:a9:87:94:f0:8d:70:3a:
e4:5e:c1:24:f5:f5:eb:03:b1:12:89:35:1a:28:15:
25:70:e8:a9:a9:d9:02:aa:24:7e:8f:5b:54:45:b8:
89:8e:fd:42:ac:c8:93:9a:56:c4:fb:49:48:e7:8e:
82:ec:52:8c:89:87:00:0e:e3:55:c4:5a:e1:7b:ff:
ce:ee:1a:7e:09:d3:71:59:32:1d:24:0b:92:a7:9c:
78:a4:49:d2:29:4a:5e:ca:6d:f5:09:5d:f8:c9:36:
2d:b4:fb:9a:4b:ce:7d:58:97:2b:ab:e7:df:1b:bf:
06:96:16:85:49:07:de:ec:ed:a6:ca:f7:f4:d6:7a:
88:fe:dc:a9:7d:b4:8f:5e:43:b9:75:0f:0f:a5:c9:
db:0a:c4:f9:d0:2c:e6:a2:b1:ae:cb:e5:01:58:48:
d8:12:36:c9:91:ca:0c:51:b7:1f:b5:a5:e2:c0:c5:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7B:C7:66:9C:4F:D1:F3:DF:2C:C5:72:6A:3F:2A:CC:8C:39:BE:77
X509v3 Authority Key Identifier:
keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:80:03:3d:4e:36:74:84:45:cd:49:3c:84:c8:76:9d:5f:aa:
2b:1a:d5:b3:ef:c8:31:f4:d8:ba:4c:d6:91:f8:e9:12:1a:ab:
f7:27:61:2d:ac:fa:f2:6d:db:40:91:2b:91:13:c0:60:6d:66:
07:6d:a4:f9:a2:f4:6e:7b:1a:51:ba:45:2e:8d:44:74:8e:d2:
85:8e:31:c0:68:e7:39:b0:0a:99:92:ef:ba:20:cb:1f:15:55:
63:d6:81:0e:03:1e:12:d6:0d:38:71:e6:50:ed:18:5b:57:1d:
ac:c4:11:1b:b4:44:25:6d:24:bc:f2:07:e9:7f:cc:b3:6a:b8:
80:e0:fb:b1:ab:f7:07:a8:24:d4:68:c5:84:08:97:20:c5:cd:
0d:70:21:ac:cb:ff:db:27:54:5a:75:d4:ca:97:30:a1:e5:f2:
cf:c2:ab:39:3b:44:ed:3e:68:58:86:6f:6d:b7:fa:76:ce:a8:
61:4c:f0:c9:31:33:d8:9f:f6:fc:e4:57:03:56:b2:bd:04:1f:
c2:36:af:f0:c0:a6:51:db:66:31:c6:de:f5:4c:d3:a6:64:0f:
d3:51:2d:96:a2:8e:fb:1e:48:0c:f5:63:70:8e:6b:bd:f2:6d:
a5:06:83:8e:73:83:0b:4d:12:6c:4f:50:e8:b6:3b:97:7c:71:
88:12:11:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:41:02 2026 by rpki-client