Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
File: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json)
Hash identifier: 57tMXzf+EC4UwgwlkOJQOyigkwqq5YGQlGYqTH2O1sw=
Subject key identifier: 11:7B:E2:87:41:54:1E:90:89:10:55:2D:84:C0:EF:2F:51:48:F3:AD
Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
Certificate issuer: /CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Certificate serial: 019D3865D80D268A747F18556565FFD5A9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
Manifest number: 0EBB
Signing time: Sun 29 Mar 2026 07:01:31 +0000
Manifest this update: Sun 29 Mar 2026 07:01:31 +0000
Manifest next update: Mon 30 Mar 2026 07:01:31 +0000
Files and hashes: 1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: lw4MAk0px9A73Uf6jaWG9x5EgL5A5CGTXvnRanf2Iz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d8:0d:26:8a:74:7f:18:55:65:65:ff:d5:a9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Validity
Not Before: Mar 29 07:01:31 2026 GMT
Not After : Mar 30 07:01:31 2026 GMT
Subject: CN=117be28741541e908910552d84c0ef2f5148f3ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b7:74:b1:4e:a7:ca:22:dc:ac:25:02:12:b6:
49:80:4d:45:0d:43:36:5f:5a:25:2e:1a:a3:62:d0:
2d:56:fc:71:29:82:a1:92:42:4f:a7:b9:13:26:e6:
db:01:cd:99:36:fc:bb:f8:f4:b1:a9:2a:8a:98:da:
e4:ce:b7:09:89:0d:4e:93:6d:4e:2e:0c:8f:b8:12:
1f:79:e9:40:70:a4:42:54:ce:9c:de:87:e8:2f:ca:
8b:c7:b3:45:49:44:68:fd:74:f6:90:95:97:f3:2a:
f5:91:25:a5:35:0d:25:fe:c1:4b:4f:cf:c3:2f:49:
0e:82:b0:f8:6d:79:c0:9e:59:d0:82:74:49:97:84:
5a:d6:13:71:35:94:f8:1b:d5:eb:08:1b:8a:d3:ea:
4f:41:fd:d1:9a:3c:a8:72:a1:a7:ff:d0:69:31:5b:
26:ff:1f:22:2e:78:d7:7e:f5:9b:63:d3:67:35:b2:
55:ae:56:87:40:f9:21:a9:e3:78:83:8f:11:9b:92:
1b:96:1e:07:b3:87:77:19:6f:5b:2b:a9:27:76:8f:
67:07:46:25:df:aa:a2:0f:a4:1f:8e:4f:97:c6:a1:
8c:fd:f2:ad:e8:74:dd:07:30:9f:ed:3f:db:46:f9:
fa:d1:a4:fc:59:08:96:ea:14:30:72:94:8d:b9:17:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:7B:E2:87:41:54:1E:90:89:10:55:2D:84:C0:EF:2F:51:48:F3:AD
X509v3 Authority Key Identifier:
keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:06:42:1a:7a:1d:50:f7:39:d9:66:6f:36:f5:1a:d7:cb:ce:
5d:62:17:d4:dd:a1:6b:34:c1:b9:5f:24:da:bf:d5:05:ed:c9:
09:a1:45:a0:cc:b1:af:b2:66:53:35:0a:fa:3f:87:da:82:4b:
b6:cd:2d:34:82:9c:f0:49:a7:82:b5:6a:8d:74:c4:90:56:8d:
44:dc:a6:f7:27:f2:6d:a9:78:ec:d9:9b:00:1f:48:26:80:47:
23:22:ff:25:1c:22:1d:3d:b7:ec:2f:f2:ec:e0:d7:78:6f:26:
e2:ca:6e:a4:d1:79:5e:63:d7:53:62:ec:1f:4e:e1:73:15:5c:
50:f5:8a:c3:55:d1:e4:81:52:26:b8:04:dd:20:64:34:3d:cf:
98:89:9a:38:7e:b5:22:f5:cd:a7:44:e6:7e:82:43:62:e8:ca:
57:6e:6a:36:c4:9b:b5:7f:61:38:2b:4d:03:98:50:2b:86:62:
85:e6:32:17:ab:02:43:17:5a:f1:82:b6:07:5c:4c:7b:77:bb:
e8:2d:2c:c9:b5:16:78:7d:22:76:a8:b6:7d:dc:0d:f5:9b:2f:
10:f9:26:0f:ce:96:f8:aa:0e:ac:b2:6a:ba:fc:5d:ac:cb:2c:
3b:df:d4:0c:50:72:58:ae:b4:3d:8d:bf:e5:ba:58:f9:85:99:
f2:84:73:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:33 2026 by rpki-client