Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
File: 45WDhONGlWoAZjpWVQe5bxTMCXM.mft (raw, json)
Hash identifier: mHeDIYzjp+jJ25Tz6SjGe3Ivgwty6rJ7qN2j9Pj5q8Y=
Subject key identifier: B4:B5:E4:BD:1A:19:6F:83:AD:54:E9:D8:FD:78:B3:8B:D4:32:1F:DA
Authority key identifier: E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
Certificate issuer: /CN=e3958384e346956a00663a565507b96f14cc0973
Certificate serial: 019E31854ED0897235B944E3F3CD2051DC49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
Manifest number: 0219
Signing time: Sat 16 May 2026 16:01:20 +0000
Manifest this update: Sat 16 May 2026 16:01:20 +0000
Manifest next update: Sun 17 May 2026 16:01:20 +0000
Files and hashes: 1: 45WDhONGlWoAZjpWVQe5bxTMCXM.crl (hash: re7IfTmpO3qX1wJyaOBTkGjYVlfypAo39L4mXZaGI+w=)
2: lNbG4oNSHogZj9bUCOksl3sIiCU.roa (hash: QBwKLCWTanLfjj9Ldl11eqQ5vT6OMeNXavMPoAXGH4g=)
3: z__9choePB0hY85a_epZitBsx_8.roa (hash: D+ruSl/X/fPQKsdHA9UXWGBlgo0rGd/gGZDncSpbB5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:4e:d0:89:72:35:b9:44:e3:f3:cd:20:51:dc:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3958384e346956a00663a565507b96f14cc0973
Validity
Not Before: May 16 16:01:20 2026 GMT
Not After : May 17 16:01:20 2026 GMT
Subject: CN=b4b5e4bd1a196f83ad54e9d8fd78b38bd4321fda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:de:6f:08:32:a3:8c:74:05:37:42:22:cb:84:
05:cb:dc:ed:71:d8:0a:8a:8c:5a:a2:98:cd:03:39:
93:fe:95:d5:bb:36:9f:35:c5:80:9f:62:cc:07:60:
89:46:2a:d0:b9:9a:70:b7:43:81:db:a0:95:6d:53:
d4:77:46:91:18:6e:b7:a0:41:ab:a7:47:89:36:b7:
4d:9d:70:ff:7f:f7:31:a4:65:fc:db:70:88:10:2c:
db:26:3a:e2:41:43:40:80:35:8b:0e:63:ae:72:5b:
fd:ca:49:46:17:e0:77:31:51:c2:59:9c:ad:51:c1:
0e:3f:69:ad:3e:09:cc:c7:a6:3f:ce:03:b7:55:a3:
05:a1:ff:3c:fe:1b:4d:4d:b8:5b:38:21:33:4f:bb:
85:ee:16:ee:a0:2e:d3:0d:f1:18:56:be:4a:45:27:
f5:5d:42:21:fc:ef:63:13:9a:68:f4:da:c5:2d:58:
d3:78:bb:89:77:b6:56:3a:31:7c:6e:b3:0f:43:e0:
0c:eb:c1:95:20:75:18:6f:4d:37:ae:7b:6e:e2:a5:
66:f0:b0:2c:4e:18:53:d4:fb:ec:82:a3:83:70:2c:
6a:91:64:f6:f8:79:67:10:ea:fe:a2:8d:3f:f1:74:
84:34:fa:d6:e7:24:aa:b7:00:58:cc:55:8d:82:8b:
92:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B5:E4:BD:1A:19:6F:83:AD:54:E9:D8:FD:78:B3:8B:D4:32:1F:DA
X509v3 Authority Key Identifier:
keyid:E3:95:83:84:E3:46:95:6A:00:66:3A:56:55:07:B9:6F:14:CC:09:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45WDhONGlWoAZjpWVQe5bxTMCXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/740b1d-751d-4afa-b700-1943bb7eaec7/1/45WDhONGlWoAZjpWVQe5bxTMCXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cd:87:19:87:9c:d9:a9:14:6c:bf:16:b7:1c:a0:c1:29:c6:
90:4b:d3:76:48:f3:d1:6d:db:34:91:0b:6c:d2:ca:61:3d:91:
72:fa:43:70:44:1d:16:8b:04:67:b6:99:97:41:d6:43:d9:43:
11:d9:16:7e:44:92:21:65:4d:82:70:9b:5b:8a:da:7e:9a:be:
55:42:13:04:9c:5a:d3:3a:47:80:5e:f0:1d:c2:ed:3a:64:f0:
54:0d:68:22:66:68:1d:1f:2e:c2:aa:64:20:18:a1:98:4a:03:
80:e4:22:dd:98:9a:23:0e:88:2c:a8:b3:90:95:2b:00:97:b0:
d4:e6:62:6c:8d:c4:e7:4c:9e:34:29:3c:11:0b:34:95:de:6b:
64:5f:ac:aa:40:1c:2d:90:97:59:9d:05:7f:f7:4a:f0:9b:bf:
a2:9f:78:e3:8d:96:7e:19:f6:39:97:6a:67:ed:b6:04:94:f0:
f7:8e:5e:94:70:4f:2e:9a:d2:b3:3b:5b:64:88:9d:35:18:ef:
06:fe:e9:ca:e5:56:11:51:71:e8:60:68:49:51:f2:f8:92:ea:
ec:90:02:b6:f5:ed:d4:23:0f:33:14:a0:32:bd:be:8a:4b:c3:
cb:a5:7d:a5:6d:3d:af:0b:3d:0f:af:18:31:7c:24:f8:bc:94:
56:b6:bc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 01:11:57 2026 by rpki-client