Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
File: c45l-wPm1gfYviBDRdbgWkYLmk8.mft (raw, json)
Hash identifier: VolDAS10alskLhJWxhH5p1I6YbI/JI6d8FP8XVgslPM=
Subject key identifier: DC:73:F3:90:B6:95:A1:A3:5B:80:2F:6A:C9:C9:07:8D:1C:E8:2D:FE
Authority key identifier: 73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
Certificate issuer: /CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Certificate serial: 019D284E539427154A5E5A0BAB2497C4D95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
Manifest number: 1088
Signing time: Thu 26 Mar 2026 04:01:54 +0000
Manifest this update: Thu 26 Mar 2026 04:01:54 +0000
Manifest next update: Fri 27 Mar 2026 04:01:54 +0000
Files and hashes: 1: c45l-wPm1gfYviBDRdbgWkYLmk8.crl (hash: r26gmZCv8/7Q3ozgW4ViMYNnCU+MXkTYH0jPc1EL77E=)
2: r5XWJBGKNAQjzKjZKPXr5PFoepw.roa (hash: ky24FBG3oozcNo49stCKjgR7t7k44RW8nw/ONOs9Mb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:53:94:27:15:4a:5e:5a:0b:ab:24:97:c4:d9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738e65fb03e6d607d8be204345d6e05a460b9a4f
Validity
Not Before: Mar 26 04:01:54 2026 GMT
Not After : Mar 27 04:01:54 2026 GMT
Subject: CN=dc73f390b695a1a35b802f6ac9c9078d1ce82dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7a:9e:5c:e8:32:55:66:42:69:37:06:71:a7:
8c:94:70:d2:6d:b1:f0:ce:32:dc:e6:0d:88:13:f4:
36:9c:07:62:dd:c9:2b:7a:e6:a2:9d:43:6a:f3:2a:
9d:66:bc:54:01:2f:f5:50:03:3f:53:62:fc:19:47:
03:0c:cf:2f:9a:a4:0a:01:56:92:5b:c9:e1:8a:b8:
cd:98:62:cc:84:05:c4:bc:01:f7:7e:42:96:72:e3:
37:3d:cd:2e:8e:61:e5:92:ea:47:28:1e:e0:47:13:
c5:94:2b:93:26:61:39:71:a0:d5:e7:d4:07:ee:53:
2f:7d:6c:c0:88:2b:3e:e9:e2:a2:87:db:fb:61:0f:
22:89:1b:ce:0a:aa:fb:ee:78:35:bd:5c:96:28:d7:
4a:06:9d:e1:38:e5:bf:87:cc:56:8d:22:c5:c7:21:
87:02:ab:44:9c:e8:8e:98:92:63:18:f6:16:b6:bf:
25:d5:c5:f1:83:9e:b3:18:11:64:fc:9a:1c:99:2f:
9e:96:1f:2b:a1:dd:94:4a:1a:65:d4:be:cf:34:6c:
df:86:e0:f5:97:fe:2e:c9:60:d6:a1:f5:6c:3e:cc:
fb:33:80:56:ee:64:2f:9a:64:74:af:42:20:c9:49:
59:a1:64:34:61:16:66:ff:9d:a7:90:85:25:a6:a8:
c8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:73:F3:90:B6:95:A1:A3:5B:80:2F:6A:C9:C9:07:8D:1C:E8:2D:FE
X509v3 Authority Key Identifier:
keyid:73:8E:65:FB:03:E6:D6:07:D8:BE:20:43:45:D6:E0:5A:46:0B:9A:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c45l-wPm1gfYviBDRdbgWkYLmk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/ba61ce-9c86-42ef-90fb-dd515e63cfcb/1/c45l-wPm1gfYviBDRdbgWkYLmk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f4:fd:d7:2f:07:f3:9d:d2:bb:60:ee:7e:5f:c7:23:3b:33:
58:a5:1e:5c:6d:64:2e:9f:0e:34:65:a2:f3:28:53:30:7b:4f:
f3:92:c8:1a:40:9c:03:b3:66:5a:7e:44:65:fb:7e:87:85:7b:
f7:ba:88:6e:90:ae:9c:7f:ff:10:6b:92:c5:8e:f3:e6:7f:0c:
42:56:77:94:0f:45:27:f1:ef:82:a3:0a:90:f2:dd:e9:00:3b:
d0:c8:39:50:14:9f:dc:97:67:d4:4c:65:bb:7e:52:41:53:cb:
0c:7c:4e:5e:89:ca:3b:d5:c7:1a:22:6d:8b:7a:30:6b:e1:89:
fe:b0:94:c5:c3:68:32:53:19:e4:cb:ee:78:95:78:d8:b6:84:
60:7a:7d:0f:e3:48:18:9f:a9:de:e4:35:5d:23:77:a3:24:5a:
64:0c:c6:4e:47:83:41:21:0a:c6:56:7b:b4:03:55:e3:60:87:
36:59:88:2f:8e:49:9b:b4:96:d3:cf:5a:9d:26:d0:64:86:0a:
e5:01:c8:98:3b:0a:34:cf:ed:57:e0:c9:b9:e8:da:48:39:ba:
38:6c:9f:44:60:cc:3e:61:0d:5d:93:77:a1:02:23:41:7e:2e:
bb:76:dc:c5:78:f3:b9:02:01:8c:7d:81:a1:0e:24:db:f4:8e:
16:ea:ac:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:34 2026 by rpki-client