Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
File: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json)
Hash identifier: uCBbBShPT6wHA5cQug6AZC7r0mIH6zFu3gk/sHPzWrE=
Subject key identifier: 48:0F:DF:07:EE:CE:12:8F:CE:06:9A:33:F8:29:BC:67:D5:5B:90:11
Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
Certificate issuer: /CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Certificate serial: 01A13DB7C187E0D4FBEF8843CF6BDDE24E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
Manifest number: 10D0
Signing time: Thu 15 Oct 2026 04:00:14 +0000
Manifest this update: Thu 15 Oct 2026 04:00:14 +0000
Manifest next update: Fri 16 Oct 2026 04:00:14 +0000
Files and hashes: 1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: HXg3w0mFpYzW3REB3ErGIATlE+nZMbJbpPjTiADk7fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:c1:87:e0:d4:fb:ef:88:43:cf:6b:dd:e2:4e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Validity
Not Before: Oct 15 04:00:14 2026 GMT
Not After : Oct 16 04:00:14 2026 GMT
Subject: CN=480fdf07eece128fce069a33f829bc67d55b9011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ec:33:d7:d5:e6:ce:da:88:ae:82:a0:30:4e:
c5:58:3b:19:4a:fc:33:ab:4e:3e:ff:3b:d2:cf:46:
cf:dd:cd:5c:58:8b:5c:7b:ea:0c:bc:bd:c3:46:87:
a7:fc:29:c9:fd:68:13:9a:94:26:28:98:71:a3:83:
1e:1c:b1:b1:e0:2a:d2:51:35:16:eb:c8:76:1c:ef:
85:bc:14:4f:f2:7f:f2:39:1e:44:ac:2e:cf:d4:32:
24:8e:28:91:d5:65:63:05:1c:a9:4f:87:26:f7:20:
93:c1:4a:1d:fb:3d:f0:e9:12:d6:01:95:0e:f7:e2:
65:54:85:6f:68:81:2e:2b:ab:7f:24:bf:bc:9d:1c:
17:eb:95:47:85:e9:63:15:b3:10:3a:4c:e0:d7:7c:
60:2c:c3:95:f3:ab:9f:c8:ac:36:1a:0a:d5:52:6f:
59:cf:a6:d9:ec:a4:80:e8:ea:37:1f:e4:7e:fc:15:
ae:37:64:fb:ae:ca:fc:83:7a:87:e8:2f:47:29:ab:
8f:f4:93:dc:b5:c9:1b:9f:7c:f9:e5:70:48:49:cb:
64:6b:26:5d:2c:ef:b8:90:ca:bf:7e:69:b1:49:02:
89:9c:ed:f8:d6:e9:0c:40:9f:19:8d:b3:56:05:95:
4c:24:ad:70:cb:7f:ca:ca:73:db:13:ae:ff:11:69:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0F:DF:07:EE:CE:12:8F:CE:06:9A:33:F8:29:BC:67:D5:5B:90:11
X509v3 Authority Key Identifier:
keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:ed:4d:c8:96:19:60:a1:66:10:53:b0:fc:da:ad:61:ff:b0:
5c:73:4a:3a:51:49:e9:09:af:bb:17:7c:c8:91:5f:b2:bb:16:
a1:ed:15:3a:90:a9:10:78:94:29:a4:e6:56:d8:39:cb:2e:16:
9d:96:1d:96:8c:1e:f3:b9:b2:09:14:bf:30:e5:97:61:27:3c:
b8:98:c5:e2:48:c3:a8:c8:8d:20:70:a6:02:46:d6:97:51:94:
e4:79:b6:cc:29:07:e9:b1:b7:07:db:23:48:b6:58:2e:c2:1d:
04:59:cb:17:49:a4:dc:1c:b8:00:2d:62:4c:8a:b1:19:e8:23:
31:5d:25:af:3c:cc:27:b5:11:50:3e:1f:4e:a9:50:33:39:c4:
2a:24:9f:a0:24:57:26:c6:91:d0:a5:fa:ec:1a:be:33:eb:05:
4e:ae:6f:8a:7e:2f:fc:9d:c5:17:68:86:00:a7:bd:12:56:85:
ae:dc:97:ea:98:b4:b4:7e:ba:95:08:e3:c8:d7:de:42:03:35:
fd:44:e3:63:dc:48:4c:71:78:b5:e1:2a:47:59:47:03:94:8d:
78:0a:d1:85:f0:76:96:5e:0b:80:f9:50:70:de:d8:d6:d9:3e:
5c:fd:c4:13:2b:77:3d:7a:e3:59:76:4d:61:98:fa:82:d7:67:
1e:28:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:56 2026 by rpki-client