Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
File: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json)
Hash identifier: KOL8IvWXJUdinYNdit4OHUsVNRPVJmzAmvkP1TGowDM=
Subject key identifier: A9:55:2B:F3:F6:5A:D7:73:32:64:00:65:AE:C2:1E:2E:D7:E8:AF:15
Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
Certificate issuer: /CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Certificate serial: 019D9AE39F5E20E203634C0E77687CB0B924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
Manifest number: 0EEE
Signing time: Fri 17 Apr 2026 10:01:41 +0000
Manifest this update: Fri 17 Apr 2026 10:01:41 +0000
Manifest next update: Sat 18 Apr 2026 10:01:41 +0000
Files and hashes: 1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: v5OtkoQDPg5lY1OU91EGdfv2YHgiZL6dLKb8R31yY8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:9f:5e:20:e2:03:63:4c:0e:77:68:7c:b0:b9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Validity
Not Before: Apr 17 10:01:41 2026 GMT
Not After : Apr 18 10:01:41 2026 GMT
Subject: CN=a9552bf3f65ad77332640065aec21e2ed7e8af15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3d:f3:35:11:a3:42:9b:f1:98:55:0e:7f:24:
e5:b6:00:78:5b:8a:9a:3b:37:2b:4a:b7:55:bd:ac:
ae:00:a0:aa:4f:ef:8e:46:af:ad:69:ae:9b:67:5c:
c2:39:7c:96:5e:fe:aa:df:52:3f:7a:82:78:3d:69:
7d:39:e4:76:40:28:8e:ad:10:2b:11:f4:b6:21:19:
39:e1:1c:8d:10:ec:7b:4b:92:00:d7:02:89:dd:a9:
8b:e9:61:d9:fa:c5:00:a4:da:7c:ef:b5:97:15:9b:
aa:a7:e2:44:d2:ac:53:9b:9f:39:56:dd:24:58:c4:
94:52:5e:86:81:73:a1:15:c0:85:6f:3f:ac:39:52:
ea:1a:aa:5e:30:ee:a8:93:39:44:35:90:dd:4c:6e:
a9:7c:2e:7d:84:b0:24:b5:9c:16:f6:00:e6:ba:39:
94:98:4f:4d:7f:45:2b:31:de:6a:53:4e:ba:35:d6:
c8:4d:40:6f:71:fe:de:91:68:45:92:39:be:49:b1:
3b:17:15:36:f8:e3:30:35:c4:f5:7c:09:98:61:5c:
83:9b:25:c4:ab:f0:2d:cc:71:8d:68:90:aa:8d:cd:
0e:17:6d:e3:46:9a:1b:cb:22:4c:fa:0b:d8:4f:61:
34:9e:c0:28:32:f2:9f:cc:f6:9b:cc:3a:e8:d1:d9:
a2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:55:2B:F3:F6:5A:D7:73:32:64:00:65:AE:C2:1E:2E:D7:E8:AF:15
X509v3 Authority Key Identifier:
keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:96:86:0c:84:02:8d:11:11:7c:2c:69:92:c9:d8:2c:4e:4e:
29:b1:e2:39:e4:f3:9f:ff:3f:92:6b:4e:5f:5d:6c:1e:5c:f5:
53:7e:03:76:46:8b:59:53:06:ee:c7:5d:67:23:52:d6:3e:c7:
12:b5:57:c3:37:b7:48:d5:65:7d:b9:fe:e8:ed:0a:9f:b9:ef:
b8:b4:10:f1:9d:11:eb:90:a3:ce:68:ae:34:81:2e:bb:04:d4:
3b:d6:eb:f3:61:61:bb:66:44:16:0a:db:01:e2:90:c7:d5:dd:
8f:82:96:27:21:4e:01:cf:ba:2a:12:31:73:78:54:04:52:e5:
a8:6c:c4:d8:56:99:15:77:22:fa:cd:b0:04:a5:8a:4b:d8:f4:
7f:05:94:b7:c2:03:8e:bd:84:6e:5c:8e:ae:28:44:04:59:8d:
c3:89:3b:ed:8d:72:0f:79:1b:b9:72:c2:85:d9:b0:e0:e2:ce:
b1:36:27:6b:7b:78:09:d0:a9:17:43:b5:66:4d:06:df:a6:e9:
b4:39:38:9f:0c:a6:21:92:c3:e9:15:20:aa:04:3d:62:1d:66:
0f:1d:aa:98:55:12:a3:05:ec:4b:b6:e1:b5:0f:01:af:64:02:
df:46:56:e7:52:90:60:cd:44:ab:3d:4c:77:9b:71:e2:d8:e8:
ad:87:11:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:51:44 2026 by rpki-client