Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
File: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json)
Hash identifier: WozAOX2hXtfSdYZHgVqYKEW+n0eD6wOELXQq+4nzufY=
Subject key identifier: 2A:14:D8:2B:60:1A:45:BE:6A:BB:10:95:C8:E8:7E:B0:EC:A4:B7:9C
Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
Certificate issuer: /CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Certificate serial: 019CAB6B4F708770878A63BB341BAE0D5D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
Manifest number: 0E72
Signing time: Sun 01 Mar 2026 22:01:02 +0000
Manifest this update: Sun 01 Mar 2026 22:01:02 +0000
Manifest next update: Mon 02 Mar 2026 22:01:02 +0000
Files and hashes: 1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: mAM9AyxOPhu1uvZrsa+yduzrOgRyRjxJEDP2BR2+epQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:4f:70:87:70:87:8a:63:bb:34:1b:ae:0d:5d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Validity
Not Before: Mar 1 22:01:02 2026 GMT
Not After : Mar 2 22:01:02 2026 GMT
Subject: CN=2a14d82b601a45be6abb1095c8e87eb0eca4b79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:21:72:a6:bd:4d:7c:48:39:ae:e3:f0:c7:19:
e9:e2:ef:0b:95:c8:75:e4:39:c9:db:f8:be:34:09:
aa:af:77:8c:98:72:9b:e1:1e:7c:b3:ed:e7:5a:25:
8b:74:36:99:13:fa:8a:45:57:e5:95:83:e8:ec:ed:
7f:4d:15:ae:23:2b:12:cf:d1:ea:af:f6:5e:39:ea:
ee:ee:ca:d2:be:a7:0c:a9:6b:61:0d:3d:13:d2:bc:
b6:4c:93:7f:47:75:31:c6:ad:c4:cd:a4:4c:ad:8a:
55:2a:6f:f4:ee:67:17:bf:95:03:4a:10:42:29:2b:
18:0f:a7:70:cc:57:5e:4d:59:2a:fc:f9:0e:28:04:
29:cb:db:89:c9:14:12:86:12:e0:fd:a7:27:59:1b:
1f:6d:bc:7b:72:b9:4c:02:f3:85:58:6a:62:f1:1c:
06:34:fb:21:6b:c7:5b:b0:a8:40:45:a6:79:e9:79:
05:57:04:f4:bc:42:64:d6:a9:a9:d0:5c:28:dc:75:
c3:2e:1f:2e:6f:db:23:d3:25:8e:bb:2c:3f:78:06:
48:78:a2:c1:6e:e9:95:06:fe:ec:78:f9:4c:b4:9f:
32:8b:82:a9:b1:6c:d1:57:90:d4:f8:b0:99:02:1f:
05:2d:27:34:c1:90:50:1e:f4:bb:21:f9:f1:18:22:
49:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:14:D8:2B:60:1A:45:BE:6A:BB:10:95:C8:E8:7E:B0:EC:A4:B7:9C
X509v3 Authority Key Identifier:
keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e6:8d:4b:16:5c:4f:51:18:84:a7:98:2e:bf:42:72:d7:d1:
2f:ed:8f:f9:1b:16:64:3c:5d:f6:31:97:98:c8:f1:5f:d9:3a:
77:fb:22:6a:e8:d0:d7:26:57:84:14:03:22:f6:d5:e2:0d:b0:
bd:d1:d9:d4:00:66:e7:9f:43:10:dd:e2:72:44:96:bd:79:31:
87:18:0e:61:4b:79:0e:cd:1d:a3:fd:de:7f:19:55:6e:de:8d:
df:58:ef:eb:c3:69:d7:b9:5c:05:39:02:75:f7:40:09:20:9c:
d8:a7:8e:b9:11:84:a8:a6:7d:14:9b:28:c6:b3:53:d7:0a:62:
f7:3d:dd:31:0b:e4:5e:fa:22:de:db:1f:2f:01:93:69:1b:8f:
b4:cb:5b:ef:ce:df:67:f9:39:ef:ce:fd:ec:9e:91:71:ea:75:
56:87:c2:a7:7e:63:9a:f6:e0:05:81:60:ac:c5:f1:dc:25:3c:
50:05:16:c3:7a:11:84:eb:fb:67:b9:11:81:fe:12:84:ed:80:
eb:15:31:7f:a0:c0:40:4e:df:c2:b3:1b:e3:a7:d9:f0:7a:73:
08:da:0e:5b:22:20:8d:33:9b:9d:33:31:2f:9b:37:7e:ac:ea:
51:7e:94:36:5d:4e:ec:1e:dc:12:9e:dd:2d:5d:a7:d2:91:9c:
46:1b:cc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:39:49 2026 by rpki-client