Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: N7fD+iB5+10wD1BdO5EYZKqkSKFgw7bojxMovaaX+0E=
Subject key identifier: DE:74:AF:6A:70:AA:57:08:42:08:01:B5:E0:82:13:9A:F5:24:D7:CB
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 01A0C5FC1EF7D0E6A17FEE7BACE9B28F3BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 13D8
Signing time: Mon 21 Sep 2026 22:00:29 +0000
Manifest this update: Mon 21 Sep 2026 22:00:29 +0000
Manifest next update: Tue 22 Sep 2026 22:00:29 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: d/745xpf7GsqNfpm3mX+x8cMNPe62TqdV6NF0oxdIBA=)
2: _eQtw5cyWM7bN-n1wH5kFmdpMgc.roa (hash: sNGFzrnadHYgam/Tin+pJL2a8Tg3Ac1jpPx5ZlgeT5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:1e:f7:d0:e6:a1:7f:ee:7b:ac:e9:b2:8f:3b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Sep 21 22:00:29 2026 GMT
Not After : Sep 22 22:00:29 2026 GMT
Subject: CN=de74af6a70aa5708420801b5e082139af524d7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:d5:4d:92:0c:54:37:c5:9c:84:10:8a:92:
16:ef:38:55:b8:1e:5d:71:90:e1:12:22:42:d3:62:
9b:98:fc:d8:99:d4:d1:fc:80:0c:9a:a2:08:12:65:
7f:0c:6f:10:fa:3e:4e:d8:60:1b:88:5f:37:67:a3:
6c:4b:e0:01:7f:59:ad:a5:4d:b7:eb:b6:b8:06:c3:
47:93:74:26:23:83:36:18:c9:fa:7f:54:40:7f:e2:
d6:44:05:fd:c7:9f:d9:c2:7b:1e:a4:bd:fd:0c:88:
42:1f:e2:00:5f:a0:0b:2b:22:8b:e7:ec:f9:54:1f:
9b:c7:57:83:d0:03:cd:85:3b:c4:87:55:dc:9a:de:
65:13:1b:ae:e7:55:9c:04:06:00:88:fd:4d:4f:e0:
cb:79:b4:94:29:c8:4e:fc:32:95:5f:a6:c4:fa:9d:
ce:54:10:88:08:90:60:d0:f9:85:67:6a:3e:fb:8b:
95:a4:91:5d:ff:04:c0:d6:7c:d1:e0:45:c4:ae:08:
6c:8d:8e:c8:a8:8e:7c:2e:40:23:7a:67:eb:31:38:
bb:10:fe:b6:db:76:50:a7:4d:5e:46:25:d1:ee:6a:
72:6a:6f:94:bd:1e:de:92:7c:66:c2:8b:8f:01:fa:
d6:f7:00:32:a6:b9:d6:f8:d5:ca:35:67:76:0e:c4:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:74:AF:6A:70:AA:57:08:42:08:01:B5:E0:82:13:9A:F5:24:D7:CB
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0e:7e:eb:ec:5c:63:ca:7c:5c:7a:73:60:8e:cc:cd:c8:8e:
32:9a:ac:55:7c:01:29:7a:4d:77:a2:c7:91:f1:46:fe:b8:8f:
71:3a:04:ac:74:46:a4:72:c5:c4:58:05:92:a2:f0:36:a9:37:
5f:4c:e9:97:b0:76:2c:51:a7:60:b2:f4:5d:d5:99:c5:f5:ff:
54:9d:72:ea:5d:57:15:9d:c3:86:44:85:af:93:f5:bd:9e:c8:
d6:df:b2:c1:a2:b8:ed:35:68:52:7b:62:b5:4d:47:f0:01:91:
ff:99:ee:d3:92:73:fd:c0:fa:15:05:f8:1b:48:6d:ac:05:eb:
1e:7b:df:27:fa:5f:2e:b1:7b:3a:d9:41:64:90:b4:30:86:80:
cb:fc:3b:4c:41:19:2b:05:fe:b6:5a:18:aa:5f:b7:d3:1e:f6:
31:96:cf:0c:fb:dd:12:83:7e:a8:3a:b8:e7:be:19:a0:be:2d:
a4:89:57:ff:21:30:96:ae:60:47:5a:6f:ab:ff:81:29:fa:0e:
16:a5:ad:6a:be:9b:e5:b4:8d:89:f2:0f:76:ae:e7:c4:b1:ca:
df:c6:3a:23:3e:32:03:1a:2c:40:3d:1c:fb:5b:cb:9c:03:a7:
e3:c5:17:1e:3c:8c:29:dd:64:cc:2f:d0:13:46:2b:8c:bc:e0:
54:92:4b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:19:56 2026 by rpki-client