Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
File: d44TTk_7X7E6woT-lIgnaCYVZjI.mft (raw, json)
Hash identifier: cxE3WGYYkxkxPI4ZwS+lqD+4mRR4pDfwBsPZj/wikW0=
Subject key identifier: 48:B3:1E:9E:78:E1:19:15:6C:AC:E7:8A:1B:36:47:77:93:85:43:DC
Authority key identifier: 77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
Certificate issuer: /CN=778e134e4ffb5fb13ac284fe9488276826156632
Certificate serial: 019CAC47048D0873BCB9CCE7865B00A1B1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
Manifest number: 0DA2
Signing time: Mon 02 Mar 2026 02:01:01 +0000
Manifest this update: Mon 02 Mar 2026 02:01:01 +0000
Manifest next update: Tue 03 Mar 2026 02:01:01 +0000
Files and hashes: 1: d44TTk_7X7E6woT-lIgnaCYVZjI.crl (hash: mFvyJhMQRzwvExw9hwq1ysgT23HPoG3yUaiJhGnsYOg=)
2: gabLNz-9haR8x0JVvUH9RWZfT3o.roa (hash: elMsH5/2kflaBwBGb1wo4RBVBbTZ4kW2OpPSbwpINts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:04:8d:08:73:bc:b9:cc:e7:86:5b:00:a1:b1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778e134e4ffb5fb13ac284fe9488276826156632
Validity
Not Before: Mar 2 02:01:01 2026 GMT
Not After : Mar 3 02:01:01 2026 GMT
Subject: CN=48b31e9e78e119156cace78a1b364777938543dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:0f:75:98:47:44:d7:1c:52:8d:5c:58:aa:
bc:6b:4d:ba:00:c0:a9:1d:18:2e:d2:8f:6e:7a:0c:
69:b7:4b:0c:15:4e:91:31:30:dd:81:f4:93:df:3b:
1f:f7:18:33:2b:54:8d:84:b8:55:46:06:cd:33:4d:
58:d0:c2:a7:a6:0e:7c:de:5b:f9:d7:5c:09:f1:48:
ad:bc:92:76:99:69:45:1c:3e:2d:e7:6e:90:80:f1:
29:58:64:b7:f0:3f:93:0b:7e:95:a1:f7:b3:9f:09:
65:6d:c7:93:e5:e1:f5:35:29:1c:59:e4:61:6c:3c:
d8:b4:c1:a2:f4:62:f3:ac:48:71:17:86:4c:7a:26:
6d:0c:0a:3f:49:80:a6:ac:4f:42:f7:bc:2e:d6:e1:
48:04:43:14:aa:a8:5b:30:4e:c9:4e:df:30:c4:94:
e5:7e:95:4b:18:e2:f9:84:26:55:cf:51:e1:2e:13:
f2:41:65:aa:2c:4e:1c:d2:a3:76:41:e7:4c:03:c0:
e5:41:a8:db:e6:72:07:fd:4c:be:8e:24:cc:df:d2:
13:af:43:4a:34:4b:df:3d:f0:92:a1:5a:ac:e9:a5:
8f:fb:5d:70:b5:c3:69:c8:5c:74:83:03:1f:32:5f:
c3:15:d4:2a:ca:48:5c:cf:da:2d:ab:5d:c2:18:eb:
21:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B3:1E:9E:78:E1:19:15:6C:AC:E7:8A:1B:36:47:77:93:85:43:DC
X509v3 Authority Key Identifier:
keyid:77:8E:13:4E:4F:FB:5F:B1:3A:C2:84:FE:94:88:27:68:26:15:66:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d44TTk_7X7E6woT-lIgnaCYVZjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/5841b1-012f-4046-b1d5-099bad03768e/1/d44TTk_7X7E6woT-lIgnaCYVZjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d7:4f:9b:dd:5c:15:16:91:87:9c:a4:58:8e:be:03:c8:84:
d4:99:72:2d:39:05:c2:e4:ce:19:94:7b:a8:52:b8:ed:03:bf:
18:ff:c1:46:13:0b:ca:c9:f8:1e:b5:0e:cc:32:f9:b2:1b:91:
aa:75:47:8d:81:45:9e:5f:76:3a:9a:2d:1e:0b:ac:b5:60:38:
f6:ed:85:6b:4c:6e:f2:d3:6f:1c:73:54:b1:5c:2f:34:7e:49:
2c:57:e4:d2:80:05:d0:cb:ae:b5:93:98:74:9c:df:5a:75:e4:
5f:83:d9:fe:37:e3:ff:66:00:66:0c:3f:5c:15:7d:6c:a9:2f:
1c:de:07:58:32:9c:23:e2:db:78:d9:c1:db:b0:45:a4:56:f4:
9d:e7:ab:40:a7:08:28:e5:3e:e4:e5:b1:46:f8:ad:ea:c5:cc:
33:ff:3c:18:76:0c:60:26:bf:8b:82:19:24:f8:5f:22:89:5d:
dc:c1:86:e6:6e:9b:fe:5d:80:af:1b:7a:ed:aa:65:18:7b:0c:
7e:26:dd:53:02:1a:52:c9:76:04:88:3e:16:58:4b:ae:33:4c:
d3:a6:59:13:79:52:af:27:27:06:34:8c:6f:09:f4:5c:d2:0c:
ed:ca:9d:7d:76:83:bb:33:f8:57:9b:12:70:98:3d:f4:cd:f6:
11:67:0a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:21 2026 by rpki-client