Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
File: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json)
Hash identifier: c3d7b9V3Uv04KIn61DYZgvMFrG/YaSrUMTIfRfoEG74=
Subject key identifier: 92:73:A0:67:C2:7E:79:27:BB:29:E4:51:B5:AC:10:D5:3E:3B:39:EC
Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
Certificate issuer: /CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Certificate serial: 019FA82BBA46723710F32AA13E06A9ECE8EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
Manifest number: 0FFE
Signing time: Tue 28 Jul 2026 10:01:05 +0000
Manifest this update: Tue 28 Jul 2026 10:01:05 +0000
Manifest next update: Wed 29 Jul 2026 10:01:05 +0000
Files and hashes: 1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: lrZv3c34FX3xGGi9JGthGPQgR9K8+5CUAWDsVmDnvNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:ba:46:72:37:10:f3:2a:a1:3e:06:a9:ec:e8:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Validity
Not Before: Jul 28 10:01:05 2026 GMT
Not After : Jul 29 10:01:05 2026 GMT
Subject: CN=9273a067c27e7927bb29e451b5ac10d53e3b39ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cc:05:35:06:67:0b:8d:d1:00:aa:ea:de:a3:
e4:9e:a6:5b:19:c3:9e:60:22:12:cf:6c:38:dc:b5:
0b:c2:cb:c3:cc:30:9f:39:38:25:53:c5:11:73:6e:
f9:9d:29:28:81:cc:5d:65:fa:be:a6:f6:20:e6:81:
c9:0d:8b:d7:51:9d:34:19:c8:68:c5:14:5a:69:06:
a9:cc:d0:8f:4f:ad:a3:e2:03:33:cf:b2:81:78:4f:
e7:c5:94:3d:4f:db:aa:cc:57:06:e0:c3:0c:d9:e7:
57:e7:18:95:ab:e5:5b:38:d5:84:19:a5:1a:36:7b:
81:22:e0:bd:54:a6:08:87:5f:c2:dd:02:c6:6a:c8:
f0:7f:7d:17:db:93:ad:92:22:04:96:91:9f:bf:fa:
e9:32:90:22:01:6a:ab:3f:39:3d:06:19:56:a5:80:
d5:63:2e:dd:8a:04:1f:02:11:9a:ab:72:83:8c:89:
88:8b:6e:e6:47:53:c8:1f:cf:d1:f7:03:e3:39:b1:
a4:3a:9f:16:97:1a:d9:06:89:7d:98:3e:92:5a:d2:
3c:0e:11:06:c2:22:5b:67:ef:b4:fd:0d:6d:62:20:
42:7f:0d:83:dd:85:98:23:d2:ad:e3:24:fc:ba:0e:
67:41:38:ca:7c:78:5f:a1:89:18:3f:bf:1e:82:17:
f8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:73:A0:67:C2:7E:79:27:BB:29:E4:51:B5:AC:10:D5:3E:3B:39:EC
X509v3 Authority Key Identifier:
keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:99:88:65:fc:6c:74:4f:bd:a4:20:23:12:de:be:78:8a:88:
a3:0b:54:ce:b7:e0:de:e6:ae:99:39:67:87:41:c2:50:76:09:
45:98:df:62:d7:b4:14:cf:b6:81:d6:cc:80:a1:1b:fc:01:5b:
5f:39:8a:87:8d:13:61:4e:59:c2:9c:c6:10:70:45:33:56:51:
a4:9d:7f:66:4d:12:ba:48:29:e0:a1:8c:5d:d1:2a:1d:08:87:
48:55:52:0d:f8:ee:b6:99:53:ee:ff:93:6e:97:45:8b:96:b0:
ae:49:5f:04:13:0c:e2:d8:55:f0:6e:16:e9:dc:e2:d5:5c:e0:
94:f7:d8:ed:4c:bd:2b:9c:15:46:ce:b2:1f:df:da:4b:91:8c:
3a:99:8a:78:f3:a1:a2:ae:05:71:a1:b9:97:3c:16:95:e8:8c:
3b:33:ce:31:a4:6c:8b:83:07:bc:6b:d9:40:7c:d1:91:86:7f:
61:a5:43:49:1a:a3:60:46:8b:25:cc:0f:c7:87:86:ac:d2:2f:
60:1e:f6:77:9f:9b:f7:05:2e:ce:89:9d:8a:58:c5:19:65:01:
21:f7:40:8d:ce:1c:45:7d:e4:8e:66:58:ea:fe:c1:76:44:da:
8d:44:1e:1b:3e:97:a1:28:57:94:19:96:19:47:5e:67:4f:18:
25:66:a2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:54:41 2026 by rpki-client