Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/aafe7a-e179-4d6d-9d62-9da36e9173a3/1/45R9MIiPTYgtNYTtyKcPt2YV5fo.mft
File: 45R9MIiPTYgtNYTtyKcPt2YV5fo.mft (raw, json)
Hash identifier: s6PDMkt+QAUdvZfKb1CK3+4o+4n7kyNFWVl0GzDwK0Q=
Subject key identifier: 3D:19:0C:7F:64:79:72:0D:9E:85:FC:A0:0F:09:88:74:67:9A:8F:B9
Authority key identifier: E3:94:7D:30:88:8F:4D:88:2D:35:84:ED:C8:A7:0F:B7:66:15:E5:FA
Certificate issuer: /CN=e3947d30888f4d882d3584edc8a70fb76615e5fa
Certificate serial: 01A0CBC7D094D1819B1016A992A7ABF5E0E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45R9MIiPTYgtNYTtyKcPt2YV5fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/aafe7a-e179-4d6d-9d62-9da36e9173a3/1/45R9MIiPTYgtNYTtyKcPt2YV5fo.mft
Manifest number: 02AE
Signing time: Wed 23 Sep 2026 01:01:04 +0000
Manifest this update: Wed 23 Sep 2026 01:01:04 +0000
Manifest next update: Thu 24 Sep 2026 01:01:04 +0000
Files and hashes: 1: 45R9MIiPTYgtNYTtyKcPt2YV5fo.crl (hash: uSUEoy5nci6e4xLmEPuTLW3Ubvq4gaqKZmlOjQFN3Fc=)
2: GTC6u_8Z9gd4xadpdKdM5XAZSl8.roa (hash: 0yWQwDQexpIwRL0OkehWTxguFnP2RgOpylnrHqYuR9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/aafe7a-e179-4d6d-9d62-9da36e9173a3/1/45R9MIiPTYgtNYTtyKcPt2YV5fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/aafe7a-e179-4d6d-9d62-9da36e9173a3/1/45R9MIiPTYgtNYTtyKcPt2YV5fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/45R9MIiPTYgtNYTtyKcPt2YV5fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:d0:94:d1:81:9b:10:16:a9:92:a7:ab:f5:e0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3947d30888f4d882d3584edc8a70fb76615e5fa
Validity
Not Before: Sep 23 01:01:04 2026 GMT
Not After : Sep 24 01:01:04 2026 GMT
Subject: CN=3d190c7f6479720d9e85fca00f098874679a8fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:77:95:6f:40:81:11:79:f1:ca:f6:d1:ac:
10:9c:e0:aa:0c:d6:9c:40:07:f5:4c:0b:f5:e6:77:
3c:69:b8:d9:f9:2d:9b:21:b4:6e:51:94:88:33:a9:
57:eb:74:0c:4c:f5:74:bb:42:3d:1d:09:fc:fa:5e:
41:4c:c1:23:a7:b2:b6:fb:40:94:eb:31:20:b5:2a:
79:ed:11:fc:dc:99:41:c9:0a:55:b7:9e:89:62:35:
a9:d8:67:3e:c7:ee:1a:ba:31:6c:18:a3:aa:93:a3:
4c:65:94:c1:03:90:ae:fd:69:0b:4e:be:a7:1b:b7:
ae:a2:38:ad:c1:7e:42:50:f7:7d:b4:ad:20:eb:88:
af:02:04:4e:7b:56:f4:9a:cc:53:b9:c0:33:c9:a8:
2d:ac:75:20:11:d4:0b:4c:c4:8f:7a:9e:26:80:cc:
91:a4:6c:2c:e5:1d:d9:94:d9:ca:2c:3b:4e:d0:62:
4e:b6:53:49:64:99:5c:7d:0b:95:6c:e5:0c:50:38:
f7:a4:39:82:90:44:12:65:f0:c7:8e:fa:3f:31:4b:
53:ad:a7:a5:d7:dc:1f:ac:1d:ef:70:39:f0:cf:f3:
41:de:f6:67:f2:2a:66:2d:e2:33:86:87:b1:8e:7f:
7d:1f:e6:9c:9c:19:a5:da:45:ec:4a:72:e7:33:90:
fa:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:19:0C:7F:64:79:72:0D:9E:85:FC:A0:0F:09:88:74:67:9A:8F:B9
X509v3 Authority Key Identifier:
keyid:E3:94:7D:30:88:8F:4D:88:2D:35:84:ED:C8:A7:0F:B7:66:15:E5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45R9MIiPTYgtNYTtyKcPt2YV5fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aafe7a-e179-4d6d-9d62-9da36e9173a3/1/45R9MIiPTYgtNYTtyKcPt2YV5fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/aafe7a-e179-4d6d-9d62-9da36e9173a3/1/45R9MIiPTYgtNYTtyKcPt2YV5fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:69:95:96:7a:0b:05:a8:09:b1:e4:9f:05:6d:f8:eb:74:4e:
78:3f:6a:32:0a:24:24:91:ac:da:e0:68:46:c6:7e:f5:a9:17:
01:71:69:32:2c:8b:69:09:ab:26:a0:7c:ce:68:e8:c6:78:b3:
fa:ed:e6:da:f8:03:ef:b9:b6:70:60:dc:20:7b:05:cc:91:32:
c8:e2:3d:81:a8:f0:03:b3:13:9e:af:37:30:75:e8:f5:91:fa:
79:81:ff:f0:70:4c:a5:31:64:bb:fd:1e:85:9f:f6:c5:d8:ea:
01:74:a9:26:0c:22:b9:f8:7f:cf:88:fd:08:ce:5a:48:3a:91:
60:b1:d0:a0:c6:50:45:86:36:fe:3f:f8:f6:77:6b:37:28:09:
28:0d:66:f0:72:29:58:db:9c:ab:21:76:ef:18:7d:d7:fe:41:
e7:e6:63:34:6b:25:98:50:8b:34:ee:4c:42:e9:45:26:1a:a2:
5e:dd:cb:51:82:73:76:6c:59:71:90:8a:e9:2b:15:ab:b9:3e:
3f:02:16:f6:49:66:99:27:57:6b:71:92:b8:4d:fa:e9:30:49:
be:92:a4:bf:94:63:f1:28:33:4c:39:cd:2d:c4:40:e9:9e:0b:
6e:24:99:ae:91:4c:17:1c:1c:f5:52:0c:db:17:44:ea:13:96:
ca:9e:ce:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:31:19 2026 by rpki-client