Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier: xR/r/dJbjf5DHv+0dHZWc6geTkGlUl2512YAamWuye4=
Subject key identifier: 91:32:F6:7D:93:4D:99:0D:CE:23:2D:24:41:A7:5C:68:AF:F9:B5:0E
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial: 019D9BBEE5F5A6608FE31EA0AF1BD8A89E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number: 0F94
Signing time: Fri 17 Apr 2026 14:01:12 +0000
Manifest this update: Fri 17 Apr 2026 14:01:12 +0000
Manifest next update: Sat 18 Apr 2026 14:01:12 +0000
Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: Iz0KYEDjoTOIozZF2A/ZBisAil/tXbPMej6WSwtq2k4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:e5:f5:a6:60:8f:e3:1e:a0:af:1b:d8:a8:9e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
Validity
Not Before: Apr 17 14:01:12 2026 GMT
Not After : Apr 18 14:01:12 2026 GMT
Subject: CN=9132f67d934d990dce232d2441a75c68aff9b50e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fe:f7:98:f1:ff:90:78:57:45:b7:a6:68:cf:
6b:f6:a1:d1:74:4b:aa:d1:1f:0d:f4:03:df:00:98:
0b:5e:77:a1:32:2a:d9:ce:d4:2e:8e:f1:37:fe:9b:
d1:94:9a:00:3b:ca:b8:c3:f6:f2:d6:cb:ad:7a:f0:
8f:3a:c0:3e:cc:11:3a:ae:7a:09:cf:28:f4:26:87:
c9:37:e8:69:b8:4c:cb:f3:af:66:f8:66:a6:f3:ed:
0a:30:7c:34:1d:66:e1:7b:f9:d3:20:6d:df:3f:7d:
71:d3:eb:89:b7:07:ef:8d:e3:04:e0:0c:eb:a0:5b:
97:0f:3c:72:ce:5e:80:32:4d:b8:06:53:97:d3:99:
a1:fc:61:89:2f:90:89:78:e0:05:15:39:ad:b8:c9:
a2:b2:d2:5e:c5:d4:4d:47:66:d4:e5:e8:ac:09:02:
22:47:34:7e:02:d7:9f:3f:12:ec:23:84:5e:d8:2c:
08:55:c2:a9:73:96:70:c7:92:5e:16:29:63:6d:0f:
e2:40:32:0f:16:32:9e:74:19:f0:7f:8b:b9:a6:b1:
c8:18:16:79:4b:02:2c:67:4f:ad:c6:e4:a4:ed:a6:
1b:ea:be:9b:f9:4c:a0:7a:c9:a1:db:4d:4c:17:a0:
5b:02:6f:f9:52:02:71:b1:3a:0e:e3:87:4a:a2:eb:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:32:F6:7D:93:4D:99:0D:CE:23:2D:24:41:A7:5C:68:AF:F9:B5:0E
X509v3 Authority Key Identifier:
keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:14:68:3b:d1:68:65:e8:5f:79:4b:4e:b0:c7:c2:71:33:0e:
6d:d4:61:a0:5c:03:e7:f6:bd:34:09:61:90:4c:94:68:74:34:
fa:33:52:7f:d6:6e:f0:07:fc:30:b5:a9:21:3f:4e:ec:5a:e2:
5f:b9:10:44:69:b8:2e:a4:69:e1:67:20:1a:a0:4f:03:6e:ab:
d4:1f:63:60:dd:3d:cc:91:6a:31:a7:95:a3:cc:24:73:69:e4:
8b:b4:c6:7c:45:a9:e1:d1:f9:91:be:c6:b2:bc:a6:c9:af:9f:
a0:6b:d8:9a:ed:e7:27:ab:77:74:15:0a:a6:49:4a:a0:e5:f4:
a2:76:68:d5:c9:c6:03:cc:f4:93:1a:d9:8f:3e:ae:00:61:e0:
72:03:a6:b6:43:47:fa:fa:00:52:23:93:c5:28:52:1f:da:43:
89:dc:91:db:62:dd:26:8a:c3:36:01:ba:a5:90:5a:65:1e:e0:
a3:2e:e9:d1:6c:21:da:f8:dc:c3:4f:66:45:62:ce:5c:d8:3a:
c6:66:5c:0c:19:3f:c5:06:5e:d7:bf:70:9b:e1:c2:64:37:15:
1c:f2:3d:d5:99:a1:ae:6f:2f:8e:60:bc:ca:ca:74:84:0a:35:
5c:63:78:3a:79:a2:ef:65:2b:4e:7c:81:f3:36:7c:05:43:b2:
f9:7f:83:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:05:27 2026 by rpki-client