Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
File: 45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json)
Hash identifier: 5VkLePjGBn4zPQEsboxpFi0u0rryw2ENG5vsJDkYiFc=
Subject key identifier: B9:C3:C6:4C:24:6B:95:D9:FB:67:99:78:C7:36:14:BC:A6:D4:A5:80
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Certificate issuer: /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial: 019CAA8FB08B7A6167A31EAB1140613B78B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:01:09 +0000
Manifest this update: Sun 01 Mar 2026 18:01:09 +0000
Manifest next update: Mon 02 Mar 2026 18:01:09 +0000
Files and hashes: 1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: /QnWtm7PZ9veNcd+ONeyTi2wIDDjXngl3Pdazp8/TKw=)
2: acUHfVCy5j8WfhXBkKrvtIIZ6u4.roa (hash: A0ZoDSyXeoOjiHDBQQXTi7qUdiWgsEQgspWWgoPcjbU=)
3: mY4iCleNhrzf8aXMLmHiJ52ay4A.roa (hash: XzaZ+/TpO1ZESBFBMtwiRlJAL9YVrFYukINjmUNi5KQ=)
4: mflNPwnPi4f5wBAod8r23N6IFVQ.roa (hash: eCHOBETtrQl/yFYeuqvktndVXTn5G2F5otfDMkWdMXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:b0:8b:7a:61:67:a3:1e:ab:11:40:61:3b:78:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Validity
Not Before: Mar 1 18:01:09 2026 GMT
Not After : Mar 2 18:01:09 2026 GMT
Subject: CN=b9c3c64c246b95d9fb679978c73614bca6d4a580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:54:8e:bb:40:d9:99:60:c3:d4:39:59:30:50:
5e:38:23:9e:c6:a2:98:68:4c:a4:e8:75:6a:4f:d7:
fb:79:70:67:f4:e5:ba:d1:c4:e3:66:d6:80:ab:83:
85:0a:a1:dd:82:22:23:27:40:4e:3f:e9:b8:c7:9b:
6d:70:ba:ba:53:ec:f5:9b:5c:20:e8:a7:c7:8e:50:
75:22:ba:dc:4e:13:90:84:2f:1b:ad:eb:37:e0:90:
13:89:d0:06:de:93:5c:a2:f3:41:c7:01:c8:a0:4c:
1f:09:7c:e7:22:74:df:12:c3:40:e7:cd:62:cd:80:
b9:f7:d9:64:bf:ea:bc:7e:a9:6b:df:fc:5d:f7:3e:
92:08:6c:fa:71:ce:6e:75:67:c6:af:29:ec:49:75:
4d:3a:42:5d:7a:e3:ed:27:c4:81:a1:83:8a:11:dd:
df:73:5b:ab:59:c1:ab:fe:25:eb:3a:8f:81:57:f6:
9b:fe:e5:32:e8:b0:2c:78:9b:ec:a9:d7:fd:32:3b:
d7:db:c0:a2:77:b0:2b:b4:ac:21:6c:71:43:12:ff:
a3:ce:b4:8e:b9:e5:e6:c6:10:67:a2:a5:35:5f:5e:
1a:e9:4c:6b:2d:72:90:ba:ca:7b:99:93:bb:89:ca:
2f:32:f5:29:09:f4:2e:20:1c:07:09:b9:6c:c9:d3:
0c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C3:C6:4C:24:6B:95:D9:FB:67:99:78:C7:36:14:BC:A6:D4:A5:80
X509v3 Authority Key Identifier:
keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3a:14:db:0f:de:6e:f5:8b:4a:e6:c3:72:61:25:1b:62:56:
43:f7:61:88:1a:ab:b8:b2:f8:13:41:35:38:6c:dd:0b:d0:ba:
4f:cb:5a:53:78:af:f9:14:95:5c:50:10:fb:fa:35:e2:02:a3:
98:51:c8:9a:a2:33:77:aa:40:2e:39:80:ec:51:ed:57:f2:33:
e3:44:c0:b3:c3:7b:15:37:85:79:ff:a5:be:03:f5:44:90:ec:
46:9c:f4:49:15:fc:44:6d:ca:ea:c7:73:09:e0:bc:cb:02:22:
a6:19:31:33:98:8d:14:fe:54:79:a1:b9:1b:33:f5:7d:86:cd:
3c:d8:8a:3e:74:17:b9:69:e8:ac:9f:3c:7c:f5:7c:08:ac:d9:
82:ab:70:d8:ce:01:eb:7f:c0:1c:9a:3b:39:32:3e:aa:6a:9b:
0b:e4:84:71:e3:6f:41:5b:78:10:72:70:99:54:1f:d2:af:ad:
81:f3:0f:21:bd:e1:b8:ca:9c:c5:b9:ec:b5:ff:9a:e2:48:da:
32:db:d5:69:f8:43:fe:da:46:11:98:44:f7:38:e1:c1:d0:b3:
ef:fc:9c:8a:13:19:01:4e:a4:65:e6:aa:23:58:f9:6a:77:bb:
c8:09:d0:4e:e0:0a:00:dd:e3:35:71:48:11:b7:b4:b5:85:98:
75:66:df:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:30 2026 by rpki-client