Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
File: 45WDhONGlWoAZjpWVQe5bxTMCXM.mft (raw, json)
Hash identifier: +Hfx7Xoc1cJroP+kKABJTpyJv0ga8K7VGwMEMLoS1lk=
Subject key identifier: C5:19:BB:A4:A3:3C:85:27:96:72:ED:4F:D5:E2:C1:9B:80:05:82:7D
Authority key identifier: E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
Certificate issuer: /CN=e3958384e346956a00663a565507b96f14cc0973
Certificate serial: 019D9EC031256559D7766A71E22789E022F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
Manifest number: 01CD
Signing time: Sat 18 Apr 2026 04:01:28 +0000
Manifest this update: Sat 18 Apr 2026 04:01:28 +0000
Manifest next update: Sun 19 Apr 2026 04:01:28 +0000
Files and hashes: 1: 45WDhONGlWoAZjpWVQe5bxTMCXM.crl (hash: iM62NWtTwEwQRvkW7i05ygqfSeqXUbzYMCL/NbXBbI4=)
2: lNbG4oNSHogZj9bUCOksl3sIiCU.roa (hash: QBwKLCWTanLfjj9Ldl11eqQ5vT6OMeNXavMPoAXGH4g=)
3: z__9choePB0hY85a_epZitBsx_8.roa (hash: D+ruSl/X/fPQKsdHA9UXWGBlgo0rGd/gGZDncSpbB5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:c0:31:25:65:59:d7:76:6a:71:e2:27:89:e0:22:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3958384e346956a00663a565507b96f14cc0973
Validity
Not Before: Apr 18 04:01:28 2026 GMT
Not After : Apr 19 04:01:28 2026 GMT
Subject: CN=c519bba4a33c85279672ed4fd5e2c19b8005827d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5d:4d:9c:43:07:d1:44:95:34:93:9a:e3:88:
a3:1a:3c:5d:07:8b:18:b6:07:f9:93:27:f9:64:b6:
02:7a:25:1b:02:77:3d:9a:3f:9a:9a:e2:65:03:b9:
cf:b9:94:8c:dc:38:c1:4a:d6:89:31:42:44:ba:a0:
4d:8a:bb:e4:4c:8b:2e:22:5d:d0:cf:23:08:de:71:
84:bd:e9:d1:fe:8c:a9:eb:12:3c:20:d1:ea:c5:2c:
46:f9:7f:79:dc:a1:23:6f:19:3d:e0:db:3b:15:99:
b7:9f:df:76:21:ad:ce:f6:40:a2:31:2e:92:67:7e:
f5:b8:85:a1:6f:e1:de:bc:af:a7:28:36:59:e9:a1:
eb:84:aa:73:95:8f:4a:81:19:4a:c3:f3:c0:57:f8:
aa:1a:d4:1a:27:27:59:21:e8:f8:24:61:bc:22:6d:
28:e6:f3:49:5f:ab:b5:74:6b:19:49:3a:1f:c7:9c:
ea:68:db:2a:33:23:a9:de:d4:08:e1:20:8e:20:69:
ff:d9:02:49:ed:7d:a3:24:98:e4:63:8b:5e:8c:30:
dc:0b:83:d1:c9:c6:05:3a:1f:9b:c6:14:86:53:77:
a9:02:9a:db:58:f0:cf:e0:5e:a6:39:aa:19:17:d6:
aa:34:97:62:9b:b1:83:3a:ac:8a:cd:d1:8f:71:c0:
df:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:19:BB:A4:A3:3C:85:27:96:72:ED:4F:D5:E2:C1:9B:80:05:82:7D
X509v3 Authority Key Identifier:
keyid:E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:24:77:e6:5d:7a:5b:6e:f5:5a:e0:4f:ba:d5:25:72:22:e8:
3e:49:02:2b:17:d8:83:33:be:32:dd:9c:47:b0:a5:d3:38:8d:
7c:bb:43:c5:9a:7f:fc:30:7c:11:fa:42:ca:16:44:2f:6e:10:
f3:3e:59:d2:b4:cb:c2:e9:e9:26:05:ed:23:62:de:62:f3:ef:
2e:8c:d5:55:ea:2c:df:82:4b:cc:5d:f2:93:ac:22:41:f9:51:
3e:5a:c6:e3:1c:41:02:d0:5a:07:11:da:27:b5:30:e4:cd:f6:
25:3d:3e:02:82:a5:5f:20:74:e8:a5:88:43:4f:58:60:48:e1:
4c:aa:eb:40:9b:8a:04:bc:0b:26:8c:76:cc:fa:79:91:12:e4:
ac:63:a3:e9:e7:72:38:df:c9:a2:e3:0d:89:21:17:6e:6a:17:
9b:f9:4d:36:46:91:af:bc:59:7b:3e:da:e2:1a:e6:23:8e:cb:
77:6a:e7:02:8e:0e:91:c8:6c:df:21:73:e2:c7:15:ae:86:12:
56:5d:23:2b:ca:4c:6d:c5:2b:9a:15:55:76:3d:f6:ce:f3:08:
f4:96:7c:e1:cf:8f:4d:db:05:a5:ea:33:a4:91:20:9c:42:1a:
42:b3:2f:70:06:76:90:b8:10:9e:72:9c:fe:90:6f:e1:e0:0a:
f7:95:ac:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 08:53:34 2026 by rpki-client