Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
File: 45WDhONGlWoAZjpWVQe5bxTMCXM.mft (raw, json)
Hash identifier: 8D1Ec27IzQlr+trqT1SgyQsUqgrN/AHiVmMp4ypw/nA=
Subject key identifier: 4D:D4:0F:6F:D2:4B:C7:8F:54:56:03:1B:7B:F4:6A:30:95:9B:11:3F
Authority key identifier: E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
Certificate issuer: /CN=e3958384e346956a00663a565507b96f14cc0973
Certificate serial: 01A002EFAF4577F08AF26AE73FAF6B195743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
Manifest number: 030A
Signing time: Sat 15 Aug 2026 01:00:57 +0000
Manifest this update: Sat 15 Aug 2026 01:00:57 +0000
Manifest next update: Sun 16 Aug 2026 01:00:57 +0000
Files and hashes: 1: 45WDhONGlWoAZjpWVQe5bxTMCXM.crl (hash: GswVz5qawgGssxNLS815t7YVk7FZKwVwK6WK7yRvDeM=)
2: lNbG4oNSHogZj9bUCOksl3sIiCU.roa (hash: QBwKLCWTanLfjj9Ldl11eqQ5vT6OMeNXavMPoAXGH4g=)
3: z__9choePB0hY85a_epZitBsx_8.roa (hash: D+ruSl/X/fPQKsdHA9UXWGBlgo0rGd/gGZDncSpbB5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:ef:af:45:77:f0:8a:f2:6a:e7:3f:af:6b:19:57:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3958384e346956a00663a565507b96f14cc0973
Validity
Not Before: Aug 15 01:00:57 2026 GMT
Not After : Aug 16 01:00:57 2026 GMT
Subject: CN=4dd40f6fd24bc78f5456031b7bf46a30959b113f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:89:45:ad:48:47:cc:40:23:a0:e1:a2:c0:77:
ac:48:51:3f:3a:ff:4c:36:d7:2c:ca:23:bf:78:d1:
2a:38:73:e5:ae:15:c8:74:09:c1:37:9c:ba:14:df:
89:24:0a:b1:8c:12:81:a4:ec:d4:c4:71:68:bf:40:
b9:ea:86:cb:0f:2e:37:d2:08:04:43:a3:ef:db:4f:
bf:38:a5:b0:dc:a0:50:40:9f:6d:f8:ab:9d:f2:4a:
d2:43:f9:3b:ef:1e:54:bc:8a:5d:23:1a:82:5a:21:
5e:bd:6b:ed:86:16:cd:7a:b0:5d:fa:0e:d5:6c:bd:
a0:99:31:1c:6d:f3:08:aa:26:4f:46:89:8c:a7:f0:
15:d1:3b:ce:36:47:25:10:ab:22:98:e8:d5:39:d9:
88:9d:98:b7:56:72:fb:5b:6d:4d:63:92:68:93:bd:
38:79:2c:07:ab:d4:80:d9:b0:17:1b:40:dc:d3:53:
c5:0f:ba:fb:f7:4b:4b:d9:44:d4:d0:d2:8c:b6:7e:
6b:00:70:b5:ac:d2:5d:e3:ba:6f:80:fb:09:11:63:
27:df:9d:0c:7d:e4:c7:10:e3:02:42:63:33:67:75:
58:f3:ea:c1:3c:3f:49:23:c2:34:d6:e7:bb:15:fb:
1d:4c:58:6e:14:7e:37:6d:46:87:45:69:96:08:0e:
7e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D4:0F:6F:D2:4B:C7:8F:54:56:03:1B:7B:F4:6A:30:95:9B:11:3F
X509v3 Authority Key Identifier:
keyid:E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:12:0f:af:9e:1f:c9:d8:74:6f:8e:e9:87:cc:24:f3:14:a1:
d7:fc:02:6f:09:0e:a6:2e:1c:ee:b8:ec:06:6d:cf:da:be:69:
aa:45:06:01:c6:72:0e:52:8a:f4:af:4d:81:3b:c8:97:ea:68:
6b:9b:b4:f7:96:6b:eb:98:1c:db:50:89:fa:ab:0f:18:07:67:
07:7c:82:c9:7a:32:01:a6:f9:99:d7:b4:92:b7:7d:6f:2d:88:
9c:72:4c:82:d1:69:b6:28:fa:2d:2a:da:70:d7:0e:41:85:cd:
00:73:51:52:15:9e:51:09:49:a8:5f:5e:9e:3b:ad:cf:5d:46:
f6:70:dc:53:c6:4b:ab:b2:ad:0a:e6:ac:ae:55:03:da:65:6c:
2a:63:e1:22:03:61:1e:c3:38:e9:4a:e8:ea:ab:52:cd:61:ee:
d6:c9:1b:de:6e:0f:1f:d5:2f:02:1e:37:30:32:3f:df:5b:c2:
55:d7:8c:98:c9:7d:a8:79:6c:8b:2f:e0:1b:bd:d3:d9:4a:59:
c8:e1:13:b7:cb:f0:20:0d:90:cd:32:69:94:de:31:e8:9c:96:
7f:45:22:d8:fe:ad:09:15:0f:da:9d:28:a1:ff:b8:f6:d0:93:
09:ba:60:63:8c:fe:32:2b:44:cf:99:67:e1:d1:8d:62:8d:e4:
b9:45:bf:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAC769Fd/CK8mrnP69rGVdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOTU4Mzg0ZTM0Njk1NmEwMDY2M2E1NjU1MDdiOTZmMTRj
YzA5NzMwHhcNMjYwODE1MDEwMDU3WhcNMjYwODE2MDEwMDU3WjAzMTEwLwYDVQQD
Eyg0ZGQ0MGY2ZmQyNGJjNzhmNTQ1NjAzMWI3YmY0NmEzMDk1OWIxMTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IlFrUhHzEAjoOGiwHesSFE/Ov9M
NtcsyiO/eNEqOHPlrhXIdAnBN5y6FN+JJAqxjBKBpOzUxHFov0C56obLDy430ggE
Q6Pv20+/OKWw3KBQQJ9t+Kud8krSQ/k77x5UvIpdIxqCWiFevWvthhbNerBd+g7V
bL2gmTEcbfMIqiZPRomMp/AV0TvONkclEKsimOjVOdmInZi3VnL7W21NY5Jok704
eSwHq9SA2bAXG0Dc01PFD7r790tL2UTU0NKMtn5rAHC1rNJd47pvgPsJEWMn350M
feTHEOMCQmMzZ3VY8+rBPD9JI8I01ue7FfsdTFhuFH43bUaHRWmWCA5+4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3UD2/SS8ePVFYDG3v0ajCVmxE/MB8GA1UdIwQY
MBaAFOOVg4TjRpVqAGY6VlUHuW8UzAlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDVXRGhPTkdsV29BWmpwV1ZRZTVieFRNQ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83NDBiMWQtNzUxZC00YWZhLWI3MDAt
MTk0M2JiN2VhZWM3LzEvNDVXRGhPTkdsV29BWmpwV1ZRZTVieFRNQ1hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS83NDBiMWQtNzUxZC00YWZhLWI3MDAtMTk0M2JiN2VhZWM3
LzEvNDVXRGhPTkdsV29BWmpwV1ZRZTVieFRNQ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxIPr54f
ydh0b47ph8wk8xSh1/wCbwkOpi4c7rjsBm3P2r5pqkUGAcZyDlKK9K9NgTvIl+po
a5u095Zr65gc21CJ+qsPGAdnB3yCyXoyAab5mde0krd9by2InHJMgtFptij6LSra
cNcOQYXNAHNRUhWeUQlJqF9enjutz11G9nDcU8ZLq7KtCuasrlUD2mVsKmPhIgNh
HsM46Uro6qtSzWHu1skb3m4PH9UvAh43MDI/31vCVdeMmMl9qHlsiy/gG73T2UpZ
yOETt8vwIA2QzTJplN4x6JyWf0Ui2P6tCRUP2p0oof+49tCTCbpgY4z+MitEz5ln
4dGNYo3kuUW/ZQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:13 2026 by rpki-client