Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
File: 45WDhONGlWoAZjpWVQe5bxTMCXM.mft (raw, json)
Hash identifier: APfbNnjxqM1GCd3MUBSYwOmBEB87IHUzhRRwF/IkH2U=
Subject key identifier: 32:BF:1B:F0:DC:DC:73:75:BE:17:3C:37:0D:C0:FE:C3:3B:7C:33:B8
Authority key identifier: E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
Certificate issuer: /CN=e3958384e346956a00663a565507b96f14cc0973
Certificate serial: 019D38655C3E53BACBF47D45D5B61F19C638
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
Manifest number: 0198
Signing time: Sun 29 Mar 2026 07:00:59 +0000
Manifest this update: Sun 29 Mar 2026 07:00:59 +0000
Manifest next update: Mon 30 Mar 2026 07:00:59 +0000
Files and hashes: 1: 45WDhONGlWoAZjpWVQe5bxTMCXM.crl (hash: z28hpY44mpgNMbADdi8d6ScEaQjooZkP04/WEuIVYN0=)
2: lNbG4oNSHogZj9bUCOksl3sIiCU.roa (hash: QBwKLCWTanLfjj9Ldl11eqQ5vT6OMeNXavMPoAXGH4g=)
3: z__9choePB0hY85a_epZitBsx_8.roa (hash: D+ruSl/X/fPQKsdHA9UXWGBlgo0rGd/gGZDncSpbB5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5c:3e:53:ba:cb:f4:7d:45:d5:b6:1f:19:c6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3958384e346956a00663a565507b96f14cc0973
Validity
Not Before: Mar 29 07:00:59 2026 GMT
Not After : Mar 30 07:00:59 2026 GMT
Subject: CN=32bf1bf0dcdc7375be173c370dc0fec33b7c33b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:4d:55:7d:ac:00:3e:a8:fb:da:8b:25:02:
c5:ce:4e:eb:c0:9b:61:45:b2:95:02:ef:5b:6e:f6:
b9:88:27:f5:a9:e0:14:1c:26:96:49:54:01:d6:35:
47:a1:42:65:0b:ce:b3:dd:9a:3a:1c:50:5d:8a:7b:
4a:39:4b:67:63:d6:a9:36:3a:29:0a:03:79:a7:95:
3c:f8:0a:9f:9b:dd:b7:7e:20:16:55:21:f0:96:6c:
67:35:f7:ac:f4:a9:24:9f:8f:1e:fa:a1:26:6d:13:
57:8e:4c:09:74:76:dd:81:24:b3:56:fa:a5:21:3c:
b4:34:fa:76:14:ea:e3:d3:4e:e9:5c:e6:bf:e5:b6:
b7:d1:c7:09:6b:34:34:54:48:96:c2:24:b0:40:e9:
a6:d2:61:e2:da:7e:9b:a5:7b:8f:c1:42:4c:52:78:
c4:72:bc:ad:96:aa:9e:90:c6:ef:7d:77:35:6d:99:
5b:e7:96:33:a3:9b:21:57:71:1c:59:bb:2d:a9:ef:
d6:a1:4a:3a:84:d9:01:47:a6:14:39:28:fd:f2:ad:
27:d7:23:01:35:8b:5d:8c:bd:0a:ad:05:7a:4c:c8:
91:47:ed:39:93:ff:88:9a:35:72:d3:07:18:08:1e:
fd:7c:cc:9c:a1:5c:3b:e7:af:cb:64:8d:3e:ec:49:
2c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BF:1B:F0:DC:DC:73:75:BE:17:3C:37:0D:C0:FE:C3:3B:7C:33:B8
X509v3 Authority Key Identifier:
keyid:E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:f9:b6:34:fb:69:7f:b2:43:a2:10:e8:47:80:86:b9:01:ea:
11:5f:5f:2d:96:7a:04:39:71:9c:82:c4:3a:69:ea:98:a1:9b:
78:40:f1:0a:28:a0:82:85:3f:4e:15:93:f2:63:9e:63:4b:4d:
44:c4:05:20:85:73:26:14:17:d1:9d:53:63:2d:b0:52:d8:dd:
01:4b:10:db:e6:38:0a:53:f7:65:24:f2:a1:8f:0e:a0:2b:e4:
c3:d6:af:74:12:13:22:3e:2e:61:4b:40:9b:0b:cb:a5:80:6a:
37:24:62:9d:7c:a9:5c:64:1d:9e:39:17:e5:96:11:3a:15:b3:
07:48:8b:46:b7:c1:27:90:52:ff:46:fe:03:53:1f:c5:14:7e:
23:55:6d:90:56:90:f0:4f:61:72:fb:cc:f4:15:d8:50:3f:b2:
cf:26:69:8d:50:53:bc:e3:c5:3c:24:7e:d4:f7:e7:24:c4:37:
58:b3:5d:6a:3d:20:7a:da:04:2d:f7:01:60:f7:59:2b:cb:e0:
8d:26:20:1b:54:8a:ab:dc:f5:75:3b:48:ee:55:a8:9c:86:87:
69:09:07:3c:04:c4:7d:d5:35:76:b5:8f:21:31:86:f3:bb:ab:
8a:fe:b2:2c:6c:f8:4f:ed:34:29:1a:ca:a4:87:45:26:20:ea:
ce:6a:a1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:44 2026 by rpki-client