Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: lqZ1KIoiFClDxkuSweh3jLR4HaDwrTPMGatv18WSKyc=
Subject key identifier: 23:74:4B:6B:7D:95:85:B5:A3:18:4F:F1:88:EB:34:CF:44:3E:CE:D8
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 019D9AE300F087725EDF4BB21742752D7724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 1234
Signing time: Fri 17 Apr 2026 10:01:01 +0000
Manifest this update: Fri 17 Apr 2026 10:01:01 +0000
Manifest next update: Sat 18 Apr 2026 10:01:01 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: PTC+CRDUiUw+8UyXScK+uYK6tfuH7eaebqSD0fOiKVI=)
2: _eQtw5cyWM7bN-n1wH5kFmdpMgc.roa (hash: sNGFzrnadHYgam/Tin+pJL2a8Tg3Ac1jpPx5ZlgeT5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:00:f0:87:72:5e:df:4b:b2:17:42:75:2d:77:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Apr 17 10:01:01 2026 GMT
Not After : Apr 18 10:01:01 2026 GMT
Subject: CN=23744b6b7d9585b5a3184ff188eb34cf443eced8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:48:3b:7f:03:91:49:7a:98:cb:46:eb:33:bf:
6b:2b:77:ae:30:b2:86:1e:13:d3:84:6d:a6:72:55:
dd:bb:16:be:19:75:dd:f9:57:a8:77:70:f4:53:f3:
6e:f4:48:6f:7a:2e:90:09:38:ba:aa:c9:f4:17:19:
d2:88:40:51:0a:40:0a:30:ad:32:f7:13:77:1c:73:
0e:4a:70:10:21:0f:4d:16:a0:84:8c:b0:6a:f2:da:
cf:23:c6:69:6c:a9:47:9c:bf:56:bd:98:b1:2a:a2:
43:3e:71:d1:20:35:08:2a:46:aa:51:de:4b:7e:37:
c7:59:fd:1d:be:83:27:52:c6:f6:11:0e:41:e4:52:
94:df:74:2d:e3:18:3b:a0:27:24:c4:6a:2f:ee:78:
b6:b9:ef:8c:af:6d:57:aa:99:0d:ea:aa:80:7f:be:
07:27:c8:4b:8b:b1:63:1d:87:de:aa:f7:aa:f9:98:
ff:ed:c1:eb:e4:0d:64:2a:aa:c4:43:4b:8e:d8:71:
45:2e:4f:ac:29:a0:e7:ea:c8:68:7f:41:e7:3f:86:
06:17:93:d1:87:2b:95:c0:9c:0a:95:a2:6f:f1:f8:
aa:cf:b7:c3:2d:d5:61:57:7e:0f:b9:c3:41:c5:8b:
6e:79:53:c0:72:ce:d3:b0:f2:11:5d:e6:06:1b:49:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:74:4B:6B:7D:95:85:B5:A3:18:4F:F1:88:EB:34:CF:44:3E:CE:D8
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:96:c6:ee:e3:67:87:20:d3:29:0f:38:c3:58:da:75:f2:2b:
01:c0:f0:7d:73:62:39:20:be:87:80:a0:c0:8d:0c:24:1c:1e:
4a:f6:5e:80:fb:2c:2e:13:81:d3:d8:e4:e6:04:87:75:81:70:
fd:d0:80:85:94:25:03:79:c6:4e:65:7c:e0:2c:70:42:5f:fc:
b8:26:2b:be:92:a6:82:fa:f1:74:ff:b8:b5:b2:09:21:25:28:
79:42:a6:79:c6:91:37:13:32:3a:61:87:01:aa:21:36:cc:2d:
93:4c:dc:20:00:ac:88:c1:e3:dd:6d:0f:88:d4:c9:39:93:d1:
07:51:a8:25:fb:ef:fa:05:22:8d:5b:27:bf:d5:42:df:7c:ee:
76:ff:f2:ab:44:07:8d:91:29:17:db:11:2d:97:ef:28:6a:6f:
24:9a:c6:dd:01:3b:2d:4b:50:40:68:33:6f:95:45:a5:43:4e:
fb:aa:07:7b:cb:87:66:f8:f1:e1:dc:c9:51:24:08:11:c7:bd:
a6:91:ce:15:b2:83:98:f8:8c:4a:3d:f4:03:5c:00:11:78:6f:
fe:a8:24:b4:e0:91:23:03:5c:76:c7:5d:74:a8:a8:b4:23:0e:
0f:c9:5d:d2:c4:1b:41:7c:2b:c1:73:d1:f4:d9:7c:d5:73:73:
56:33:3e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:15:23 2026 by rpki-client