Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: PADw34MhvodhA3bdnuXVeIAYnrnKteuERR67DBkWOJQ=
Subject key identifier: 21:CD:E3:95:5C:F6:41:D0:4D:AB:73:4B:83:52:26:88:A6:7B:EE:2A
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 019D99D0C5C33E904C5B3741885F474B7E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0E1D
Signing time: Fri 17 Apr 2026 05:01:29 +0000
Manifest this update: Fri 17 Apr 2026 05:01:29 +0000
Manifest next update: Sat 18 Apr 2026 05:01:29 +0000
Files and hashes: 1: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: 2j3Y0GONgZvKg9+0HbVroh8lKRezZVLzaVptDimq0lY=)
2: gabLNz-9haR8x0JVvUH9RWZfT3o.roa (hash: elMsH5/2kflaBwBGb1wo4RBVBbTZ4kW2OpPSbwpINts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:c5:c3:3e:90:4c:5b:37:41:88:5f:47:4b:7e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Apr 17 05:01:29 2026 GMT
Not After : Apr 18 05:01:29 2026 GMT
Subject: CN=21cde3955cf641d04dab734b83522688a67bee2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:8b:98:d2:b9:34:2e:41:57:1e:9f:79:e4:
30:f1:d1:c1:80:28:73:77:31:6c:09:99:d5:03:f4:
ec:e2:bb:c3:92:ad:34:c2:78:cc:98:bc:4d:e0:d6:
87:b9:ba:fe:4e:3f:bd:e6:e1:62:ce:4d:7b:f4:61:
a2:c5:8c:01:cf:ee:ad:f3:53:8d:a1:44:4c:3e:90:
ec:26:a2:5b:4c:62:af:0e:39:b2:9b:6e:bd:6a:ff:
d6:a5:f6:84:cc:07:30:e5:86:84:6f:c1:4f:b4:b8:
a0:6d:20:7d:58:e1:6f:fa:39:cd:29:21:00:36:74:
21:12:89:23:1d:66:72:7b:65:81:0f:18:57:56:6b:
12:c4:3b:f6:eb:56:9d:1b:4f:76:e6:38:31:da:e4:
5e:db:fe:4a:95:21:1b:2b:3f:20:cf:3e:d5:3e:fa:
5a:ef:3a:47:26:25:31:6e:e2:eb:24:01:b4:58:d0:
90:c5:81:52:6f:49:e5:4c:a1:73:be:c4:76:a7:0f:
f4:77:0c:2c:39:8f:7a:97:17:fa:29:7b:ec:26:80:
e8:f6:0e:44:c9:a1:06:10:56:71:34:6a:4c:03:bd:
26:4c:73:b7:d7:50:fe:06:d5:58:c1:79:a0:d1:75:
c1:c5:7e:77:24:bd:9b:0d:2d:d6:f1:4c:c2:d0:11:
09:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:CD:E3:95:5C:F6:41:D0:4D:AB:73:4B:83:52:26:88:A6:7B:EE:2A
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d6:3a:73:e6:74:81:6f:31:18:69:4c:b1:9c:b1:c6:87:38:
0d:3a:b5:9b:5d:62:c7:83:23:14:64:9b:23:9a:f5:a8:49:1f:
8d:e9:04:57:a0:53:c7:52:94:b9:eb:5b:b5:74:36:86:79:8b:
e7:93:b0:eb:4a:b6:5e:bb:8f:65:3d:53:b2:14:41:3f:19:c4:
2c:eb:18:80:e1:ea:28:7f:9d:58:71:7f:0f:db:f9:b1:e2:2a:
cd:70:9c:e4:ff:ab:8c:03:ae:b1:1d:29:3c:64:35:b2:01:23:
7e:6c:5a:c2:ab:5c:df:82:77:be:d6:04:db:fb:46:99:ad:1c:
67:f6:90:d7:66:28:11:15:de:f3:c1:b0:51:89:7f:3d:c1:f9:
83:71:44:bf:2d:b6:bf:9c:a7:a0:88:ba:b0:ac:a0:88:31:72:
94:49:e0:a4:f3:a9:7b:bd:60:26:8b:ab:2a:11:cf:82:d9:c7:
ca:c9:10:9e:bf:89:c8:a6:99:6e:c7:58:60:8b:4e:b2:97:5d:
24:b0:a8:bc:5c:a6:4d:a7:6d:24:dd:93:09:5a:95:87:6d:3f:
d3:f5:c6:77:4a:09:b3:74:41:ed:ea:0b:7c:b4:d3:1e:a1:18:
bf:0d:9c:6e:ec:6d:61:91:b4:f6:00:03:16:93:79:36:36:0e:
b2:5b:fe:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:12 2026 by rpki-client