Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
File: 3U44kvRrEHhSw-rhsn3M9g-rmb0.mft (raw, json)
Hash identifier: OCqCUBw1wdHLyszUdEQbNccCk1p72lqaTpPdFFqEZp8=
Subject key identifier: 7B:2D:7C:30:8E:9C:15:3E:9D:FD:46:F4:5B:84:C0:B1:69:94:C9:F6
Authority key identifier: DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
Certificate issuer: /CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Certificate serial: 019CAB6BC6115CCC7191F58518A3B3C814A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
Manifest number: 11B8
Signing time: Sun 01 Mar 2026 22:01:32 +0000
Manifest this update: Sun 01 Mar 2026 22:01:32 +0000
Manifest next update: Mon 02 Mar 2026 22:01:32 +0000
Files and hashes: 1: 3U44kvRrEHhSw-rhsn3M9g-rmb0.crl (hash: Zw/IFFA29npIyn/qSdbN9hzymi7dWPR19CqKBEa1pOI=)
2: _eQtw5cyWM7bN-n1wH5kFmdpMgc.roa (hash: sNGFzrnadHYgam/Tin+pJL2a8Tg3Ac1jpPx5ZlgeT5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:c6:11:5c:cc:71:91:f5:85:18:a3:b3:c8:14:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4e3892f46b107852c3eae1b27dccf60fab99bd
Validity
Not Before: Mar 1 22:01:32 2026 GMT
Not After : Mar 2 22:01:32 2026 GMT
Subject: CN=7b2d7c308e9c153e9dfd46f45b84c0b16994c9f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2c:f5:ef:c8:3a:50:24:46:c8:ee:be:86:f3:
6f:13:b4:6c:57:2c:16:8f:f4:78:d6:14:f1:c6:81:
7f:f3:7f:c4:cf:72:06:bd:c3:29:4d:83:d0:ec:01:
fb:cc:dd:d1:e1:01:f9:f7:81:26:46:ca:7e:bf:73:
a8:4a:83:99:e6:db:50:e3:f8:82:c6:b0:e8:c3:4c:
8a:81:8c:d7:1b:a3:19:5a:bd:79:f8:98:fa:4b:f5:
a5:60:cb:ec:d8:c2:e3:95:5d:2d:00:8c:62:6a:9a:
03:11:3e:c7:68:53:99:c1:a6:59:b3:13:91:63:0f:
27:8e:41:6b:ca:f0:39:c3:20:e1:ff:20:9c:c7:f4:
9f:f6:f1:6b:73:c2:8b:23:ed:e8:7b:0d:c4:fb:09:
d7:ef:dd:03:8c:88:71:7d:f5:eb:b1:a4:cf:eb:d4:
02:32:02:88:a8:e4:da:70:d1:a3:5a:2e:63:c8:a5:
cb:32:34:7c:1e:0f:84:ff:af:ad:7f:ca:f9:28:09:
12:d5:1c:cf:bf:87:af:f7:25:17:12:80:b1:36:f5:
e4:e7:86:56:af:81:e9:2d:a0:49:02:9c:d1:a9:6e:
16:21:f3:f9:c4:3f:24:bc:1d:db:31:21:88:d5:6d:
b8:18:a4:6e:da:61:7e:80:28:11:15:78:1a:fd:fe:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2D:7C:30:8E:9C:15:3E:9D:FD:46:F4:5B:84:C0:B1:69:94:C9:F6
X509v3 Authority Key Identifier:
keyid:DD:4E:38:92:F4:6B:10:78:52:C3:EA:E1:B2:7D:CC:F6:0F:AB:99:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3U44kvRrEHhSw-rhsn3M9g-rmb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/84887c-6809-4425-bce9-3b5b71cbb322/1/3U44kvRrEHhSw-rhsn3M9g-rmb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:fa:a7:14:b8:61:da:94:65:e2:04:95:29:04:19:3f:30:91:
1b:64:99:57:32:f1:ab:ac:c2:e0:12:7e:5a:81:ae:1f:96:94:
28:5d:4b:63:27:81:11:8c:97:0e:8d:49:b5:61:09:12:7d:6f:
6b:68:bd:72:b7:c0:5d:56:ad:c4:e3:99:42:43:db:3c:c0:7e:
da:bd:96:40:5e:39:0e:06:cc:ae:fc:ce:54:d1:30:cf:8e:a1:
9f:32:a2:a5:c1:67:33:97:5d:61:1d:cb:2b:a4:67:cd:0e:4f:
bf:e4:ac:07:0b:a1:ad:4d:57:24:8c:6a:82:93:21:dc:84:c1:
60:11:48:45:bf:fd:e6:00:ef:ad:8b:b0:73:5d:04:af:e0:2f:
e5:f3:c9:b8:03:f3:e8:c9:21:e1:93:55:92:fe:9d:c2:df:62:
23:c6:2f:98:b3:f9:47:9d:0a:96:9a:de:ad:fc:34:d5:01:91:
35:e9:28:9f:8f:e2:7e:05:42:57:44:8c:f2:da:15:12:4d:12:
19:cb:98:5b:a3:f5:be:a6:04:41:f4:fa:6f:17:5f:99:60:64:
4a:4b:70:0d:78:a9:7e:01:8e:0e:1d:2d:55:07:38:f6:28:6d:
cd:9b:7e:05:c8:c2:8b:09:cc:11:d5:7c:1c:23:55:f2:4c:54:
ad:8a:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:14 2026 by rpki-client