Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
File: c45l-wPm1gfYviBDRdbgWkYLmk8.mft (raw, json)
Hash identifier: wBAp0KS75EnukqVGsiOkJuB13ia8LqJxfUOuhPn5JGM=
Subject key identifier: 60:E8:05:18:F0:E8:DF:E8:58:27:61:4F:10:75:21:7A:1D:F8:D9:8D
Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
Certificate issuer: /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Certificate serial: 019D37C01AEFA4EBA058AD510D5EFD87424C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
Manifest number: 1090
Signing time: Sun 29 Mar 2026 04:00:29 +0000
Manifest this update: Sun 29 Mar 2026 04:00:29 +0000
Manifest next update: Mon 30 Mar 2026 04:00:29 +0000
Files and hashes: 1: c45l-wPm1gfYviBDRdbgWkYLmk8.crl (hash: Xk84jMlvTgcrYOXReylmnGNxIZeFan4d2vi0LEJtCTE=)
2: r5XWJBGKNAQjzKjZKPXr5PFoepw.roa (hash: ky24FBG3oozcNo49stCKjgR7t7k44RW8nw/ONOs9Mb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:1a:ef:a4:eb:a0:58:ad:51:0d:5e:fd:87:42:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Validity
Not Before: Mar 29 04:00:29 2026 GMT
Not After : Mar 30 04:00:29 2026 GMT
Subject: CN=60e80518f0e8dfe85827614f1075217a1df8d98d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e8:d4:6c:14:ac:7f:1f:77:30:33:eb:5e:a6:
4b:ec:0c:02:8d:46:27:25:d1:99:3b:17:7b:a4:3f:
7a:9d:e3:02:85:e5:93:a5:c4:36:3a:13:b2:95:1b:
e4:3a:44:ce:eb:18:80:91:7c:9a:b3:7c:92:f2:1b:
c2:a8:26:4f:47:60:e3:ab:03:92:c8:ff:08:7e:c5:
24:dd:45:27:cf:b0:43:94:96:1c:28:6b:22:3c:92:
c3:d0:e6:cf:b0:97:8e:5c:fb:06:e0:bc:ad:e9:1b:
c3:1b:33:9e:1b:53:fa:b5:c9:fd:78:93:9c:e0:7a:
1e:e0:d0:49:db:fb:7e:e1:7d:bf:9c:e3:99:48:10:
c8:6d:5c:58:fc:f3:d0:a0:09:51:09:6f:ac:ba:a7:
20:df:3b:e2:ca:04:58:fc:5a:47:3e:d6:55:40:a2:
86:04:c0:e0:37:08:b7:07:97:83:0e:92:fe:43:ea:
2d:8e:a4:c6:33:2d:72:cc:1c:b2:2d:e5:5e:8a:69:
3d:44:a9:b9:07:48:40:cf:75:2e:7a:83:a4:23:26:
63:f4:ea:21:93:8c:96:48:7a:63:fa:ca:4b:11:af:
16:7e:1b:c2:95:3e:7c:8c:2d:8b:e6:5b:08:65:9f:
83:d9:00:4a:b5:c5:91:e6:21:99:8e:a5:00:40:fe:
4d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E8:05:18:F0:E8:DF:E8:58:27:61:4F:10:75:21:7A:1D:F8:D9:8D
X509v3 Authority Key Identifier:
keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:eb:51:70:92:ff:bb:b4:e3:55:9d:74:60:c8:d6:2d:bb:97:
b6:b1:d9:e6:b3:5a:ed:5b:c9:4e:03:49:11:5c:4d:25:42:b6:
d6:be:0b:85:e9:d9:4d:63:c9:73:c5:cd:14:1e:a6:02:ed:bd:
88:22:db:fc:96:b1:a6:59:4c:a4:65:f2:3b:98:77:50:2f:60:
41:45:ed:72:9e:10:11:ad:09:67:0c:17:40:ff:ab:6c:95:6a:
8e:da:b2:a6:b5:4e:34:20:d2:62:59:8d:09:b9:3c:cc:fe:5d:
26:d9:ed:f3:4a:21:f8:10:f6:50:a0:2a:0a:1e:aa:df:87:d2:
cd:3e:53:6f:71:55:52:f6:8d:bf:bc:64:a8:82:23:30:0e:f2:
a6:b7:cb:f3:ea:aa:84:b4:f8:e3:41:97:85:bd:34:f5:d5:44:
10:22:fc:5c:59:ec:8d:60:a3:bb:fe:6d:b2:50:02:71:fe:3f:
13:08:11:9a:4f:32:e5:2d:10:5f:ae:fd:e7:9a:58:ea:db:31:
d7:df:93:60:30:71:ce:f9:0b:0f:d7:24:96:35:c9:a7:fb:ec:
fc:b0:6a:0f:42:e7:14:33:a9:6e:84:c7:4a:4e:85:b4:02:6d:
27:65:79:96:50:ae:b2:17:c3:0d:6a:5d:2c:0d:84:91:16:f7:
3d:26:a0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:53 2026 by rpki-client