
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: PeFknaphSz5XI8/ifvSNkwEXNkZMC9iPERuDyZ3KURU=
Subject key identifier: E1:F7:EC:0B:79:ED:4E:F7:76:76:49:8F:A2:61:A0:D3:3A:7B:D8:CD
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 019FA82BF18D10BB31179F55778DF1456B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 1344
Signing time: Tue 28 Jul 2026 10:01:19 +0000
Manifest this update: Tue 28 Jul 2026 10:01:19 +0000
Manifest next update: Wed 29 Jul 2026 10:01:19 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: LmHmq7ez3ubcMiIHERiDAJrv+Cv9gdpUS70nzzprjXM=)
2: _eQtw5cyWM7bN-n1wH5kFmdpMgc.roa (hash: sNGFzrnadHYgam/Tin+pJL2a8Tg3Ac1jpPx5ZlgeT5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:f1:8d:10:bb:31:17:9f:55:77:8d:f1:45:6b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Jul 28 10:01:19 2026 GMT
Not After : Jul 29 10:01:19 2026 GMT
Subject: CN=e1f7ec0b79ed4ef77676498fa261a0d33a7bd8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:28:6b:ef:27:94:02:5c:98:15:eb:ad:b3:ed:
0b:6e:08:a6:be:a0:51:41:7f:d2:1e:bb:cb:93:a2:
0d:c0:ff:11:3f:6c:ab:f9:86:fa:6b:85:28:73:40:
39:27:07:1e:87:13:37:60:63:cd:d1:fc:fb:33:e7:
78:6d:f4:16:8d:b5:0c:13:2f:c7:b4:0d:45:1b:ff:
41:b5:25:02:c5:24:7d:fc:ab:f1:0f:15:55:e6:4d:
b5:b2:ce:01:b2:38:d6:80:f8:03:f8:ce:86:b2:32:
50:78:bb:2f:9d:f7:8c:47:0c:ff:15:3e:97:b2:0f:
40:35:15:13:56:67:dd:98:37:1e:8b:68:e9:82:38:
5c:b9:fd:fc:05:7b:4d:9f:88:81:30:71:f2:23:1d:
a6:fc:95:d1:15:67:0e:1c:e5:0b:39:bc:d5:24:7c:
f1:ac:9c:16:ab:0d:fc:fa:80:36:f8:b2:e6:f1:a3:
9f:53:24:cd:1a:6c:5a:1b:8f:ca:07:fa:05:d1:a9:
b9:8f:32:7c:94:a1:a1:8c:37:c8:36:1e:3d:3f:aa:
3b:0f:a0:d5:6c:05:cb:7a:65:28:5c:2c:2a:41:11:
7d:4d:12:20:ab:44:03:19:ce:4e:e7:54:a0:99:fa:
f9:06:e9:93:57:2d:51:c0:00:38:4f:48:21:a2:b8:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F7:EC:0B:79:ED:4E:F7:76:76:49:8F:A2:61:A0:D3:3A:7B:D8:CD
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:be:17:12:d5:f4:e6:2f:e0:76:a0:5c:9e:00:27:2c:19:a3:
43:b9:3e:59:80:84:fe:43:97:d0:37:95:79:66:af:40:59:22:
fc:4f:7a:ca:45:c1:37:57:dc:c7:e7:92:4c:ca:a0:94:23:93:
89:c6:67:d6:bd:af:d9:af:d3:a2:e2:4e:f9:54:48:bc:02:2e:
03:3e:91:0e:3a:fc:87:8b:f5:5b:cd:dc:5f:79:f7:7d:7d:a5:
35:98:7a:c6:ee:33:a2:21:c1:d5:9d:dd:e7:dc:85:4d:14:9c:
08:c8:7b:95:3a:8e:97:1c:35:a9:3e:af:6f:a9:3d:31:70:5f:
60:b3:6f:d3:a3:1b:2c:57:3a:eb:c1:3f:26:62:30:6d:09:30:
31:19:0b:53:6e:c6:d5:77:94:af:ad:cd:4c:10:c5:0e:7f:42:
09:73:69:26:b3:f0:b3:b5:24:56:28:88:a1:d1:28:04:3a:c2:
c0:50:a4:bb:0f:56:db:bc:6c:4f:89:78:fb:7a:0b:39:e1:17:
2d:42:72:9b:83:74:45:9b:47:a9:f9:5a:74:ae:ac:36:2c:14:
32:db:e5:9c:b7:6e:8f:4b:9e:5f:40:0c:45:c6:a0:da:30:c2:
a4:dc:0b:25:e2:0c:e7:3c:53:f3:65:4b:cf:a0:35:a8:1d:5d:
89:68:bb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:18:18 2026 by rpki-client