Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
File: 45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json)
Hash identifier: Kbru6FiuHMz2uUQarcUmnhFuYg9qrgj/6hQAJVYwem4=
Subject key identifier: 7E:D8:B8:18:C2:6B:51:EE:7F:93:B8:FF:7E:01:31:84:D4:93:AE:37
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Certificate issuer: /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial: 019D3977F19E660CDC7B8FEFD7FB08336006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 12:00:55 +0000
Manifest this update: Sun 29 Mar 2026 12:00:55 +0000
Manifest next update: Mon 30 Mar 2026 12:00:55 +0000
Files and hashes: 1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: W0iTWgZidS03CoYMq68srfocW9GdtovRUDYqcvHbM6c=)
2: acUHfVCy5j8WfhXBkKrvtIIZ6u4.roa (hash: A0ZoDSyXeoOjiHDBQQXTi7qUdiWgsEQgspWWgoPcjbU=)
3: mY4iCleNhrzf8aXMLmHiJ52ay4A.roa (hash: XzaZ+/TpO1ZESBFBMtwiRlJAL9YVrFYukINjmUNi5KQ=)
4: mflNPwnPi4f5wBAod8r23N6IFVQ.roa (hash: eCHOBETtrQl/yFYeuqvktndVXTn5G2F5otfDMkWdMXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:f1:9e:66:0c:dc:7b:8f:ef:d7:fb:08:33:60:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Validity
Not Before: Mar 29 12:00:55 2026 GMT
Not After : Mar 30 12:00:55 2026 GMT
Subject: CN=7ed8b818c26b51ee7f93b8ff7e013184d493ae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ce:bb:c8:e5:18:7b:bc:de:01:be:63:d6:9d:
ed:54:f6:c2:f1:a9:f1:2a:f4:44:65:5f:92:66:39:
ab:97:ad:7a:af:52:11:38:1a:f9:cf:c5:bd:7a:e4:
f3:e8:d2:ef:56:d4:88:c3:99:3a:c5:10:e5:16:60:
27:a0:e7:9a:53:e5:0d:fb:58:ba:b6:22:5a:91:ab:
ca:56:a2:71:5c:6a:96:c3:db:d3:95:3e:bf:dc:4c:
04:77:ee:fa:18:81:ab:22:4d:a6:e8:19:e0:98:26:
7b:77:83:6e:1d:b0:c0:e4:1b:a2:df:ad:c8:2b:01:
76:8d:df:5e:ed:6a:29:84:64:06:cc:16:a3:5b:d5:
3e:a0:5c:23:ed:01:46:72:e4:93:89:11:35:e8:67:
a7:0c:19:c0:af:e8:a1:cd:b9:fe:a5:a7:f2:e0:cf:
fe:a3:b5:e3:dc:cf:bc:30:9a:bb:59:c9:b9:fa:26:
0c:63:e4:e4:8f:c3:da:6a:1b:87:6c:d0:e5:e3:93:
9a:7d:1f:f2:bd:53:35:e7:f2:32:6b:26:c5:8f:b5:
9a:d6:43:fe:cf:07:5f:95:cd:51:7c:99:d3:85:02:
7f:3d:11:51:28:a1:48:9f:51:05:35:a7:57:0a:05:
9a:c2:fc:34:0c:1b:94:65:a5:e4:35:75:54:1c:9e:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D8:B8:18:C2:6B:51:EE:7F:93:B8:FF:7E:01:31:84:D4:93:AE:37
X509v3 Authority Key Identifier:
keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:67:d1:50:d5:e8:e7:1e:4f:65:5e:f3:ce:64:b9:1c:6d:2f:
dd:4b:1c:d1:8a:ea:66:7b:7c:31:3f:89:c2:48:7f:11:06:d0:
d8:e3:3a:54:6f:86:3b:c1:6e:bd:fb:a3:6e:a1:d3:37:14:b2:
64:04:0a:bf:67:61:c7:d1:83:49:7d:09:db:a1:6c:b3:87:d4:
02:27:24:3e:0b:90:38:7a:fe:15:0e:0e:2f:c0:5d:1e:38:79:
dd:a7:27:6e:52:9a:aa:bc:44:93:68:f9:e1:be:c9:0a:5d:84:
7b:6e:f5:bc:77:1d:b6:26:fb:09:83:7c:15:b0:0b:9f:a2:2d:
80:bb:ce:58:e8:8a:1b:8b:60:57:de:48:fc:78:ed:a4:73:1f:
ae:fe:81:a0:b8:c1:9d:37:97:67:0c:7b:45:d3:68:13:54:c9:
d6:9d:bb:c1:70:14:96:52:e9:39:2c:ce:fd:b3:36:75:d7:2d:
fd:39:cc:a0:75:e8:f3:04:c3:f6:1e:4c:ba:82:37:f2:11:62:
85:6b:0b:b2:28:4f:10:08:e5:4e:9d:85:42:9b:12:b4:85:07:
d4:3f:8f:2a:fe:ce:40:1b:5f:d2:2d:f8:8e:e4:46:f0:e8:d3:
d4:7d:d4:49:9d:ce:e0:94:f3:b9:6e:15:1a:c6:56:9e:9e:a1:
36:76:91:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d/GeZgzce4/v1/sIM2AGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOTBmMmVlMGE3MGJjYWVmZTAxOTVhM2Q4YjM3N2QzNDI5
N2E5NDMwHhcNMjYwMzI5MTIwMDU1WhcNMjYwMzMwMTIwMDU1WjAzMTEwLwYDVQQD
Eyg3ZWQ4YjgxOGMyNmI1MWVlN2Y5M2I4ZmY3ZTAxMzE4NGQ0OTNhZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc67yOUYe7zeAb5j1p3tVPbC8anx
KvREZV+SZjmrl616r1IROBr5z8W9euTz6NLvVtSIw5k6xRDlFmAnoOeaU+UN+1i6
tiJakavKVqJxXGqWw9vTlT6/3EwEd+76GIGrIk2m6BngmCZ7d4NuHbDA5Bui363I
KwF2jd9e7WophGQGzBajW9U+oFwj7QFGcuSTiRE16GenDBnAr+ihzbn+pafy4M/+
o7Xj3M+8MJq7Wcm5+iYMY+Tkj8PaahuHbNDl45OafR/yvVM15/IyaybFj7Wa1kP+
zwdflc1RfJnThQJ/PRFRKKFIn1EFNadXCgWawvw0DBuUZaXkNXVUHJ7hfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7YuBjCa1Huf5O4/34BMYTUk643MB8GA1UdIwQY
MBaAFOOQ8u4KcLyu/gGVo9izd9NCl6lDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDVEeTdncHd2SzctQVpXajJMTjMwMEtYcVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9hNjA0Y2YtMTk0Ny00YjEyLTlhNmIt
M2ViOTEzNGVjNzlkLzEvNDVEeTdncHd2SzctQVpXajJMTjMwMEtYcVVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9hNjA0Y2YtMTk0Ny00YjEyLTlhNmItM2ViOTEzNGVjNzlk
LzEvNDVEeTdncHd2SzctQVpXajJMTjMwMEtYcVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGfRUNXo
5x5PZV7zzmS5HG0v3Usc0YrqZnt8MT+Jwkh/EQbQ2OM6VG+GO8FuvfujbqHTNxSy
ZAQKv2dhx9GDSX0J26Fss4fUAickPguQOHr+FQ4OL8BdHjh53acnblKaqrxEk2j5
4b7JCl2Ee271vHcdtib7CYN8FbALn6ItgLvOWOiKG4tgV95I/HjtpHMfrv6BoLjB
nTeXZwx7RdNoE1TJ1p27wXAUllLpOSzO/bM2ddct/TnMoHXo8wTD9h5MuoI38hFi
hWsLsihPEAjlTp2FQpsStIUH1D+PKv7OQBtf0i34juRG8OjT1H3USZ3O4JTzuW4V
GsZWnp6hNnaRFQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:53 2026 by rpki-client