Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
File: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json)
Hash identifier: hKgTYenELni5OEXkv20qAo8JtX4Q3SH8wO9ci6e4WGY=
Subject key identifier: 3F:C1:D9:52:30:89:A7:2E:D4:E8:22:3C:24:1B:EE:89:07:1A:DA:DF
Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
Certificate issuer: /CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Certificate serial: 019D28F33CAFCF7A6874417524A7638395F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
Manifest number: 0EB3
Signing time: Thu 26 Mar 2026 07:02:02 +0000
Manifest this update: Thu 26 Mar 2026 07:02:02 +0000
Manifest next update: Fri 27 Mar 2026 07:02:02 +0000
Files and hashes: 1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: MHSoCSGliSnITAoZTkk9+bwrLTiBL2snwubdFPMs1gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:3c:af:cf:7a:68:74:41:75:24:a7:63:83:95:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Validity
Not Before: Mar 26 07:02:02 2026 GMT
Not After : Mar 27 07:02:02 2026 GMT
Subject: CN=3fc1d9523089a72ed4e8223c241bee89071adadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:3c:ba:0a:6f:97:47:62:77:80:ff:a6:17:
ae:50:34:be:18:1e:34:9b:0d:5c:06:81:bf:d3:86:
90:17:f4:ec:58:74:90:6b:03:1b:15:be:be:8a:72:
75:33:d7:39:87:5d:65:0e:80:5d:32:1e:9e:c9:86:
1c:1b:42:d5:2e:19:4a:88:cf:6c:29:23:ea:14:bd:
8a:93:8d:78:d4:fa:89:e3:bb:c3:ae:f8:f8:b5:61:
3b:b6:24:ae:33:9f:63:eb:9f:ab:47:97:f1:6e:fc:
63:ad:ca:7e:03:2f:14:dc:71:16:2a:50:c8:04:27:
0e:b7:2d:a3:c6:35:3c:e8:9c:6f:56:fa:20:8f:ae:
69:92:d7:c5:e1:9e:18:20:9a:3b:3e:8d:cb:4e:6b:
64:9c:44:f5:2f:52:43:34:e3:df:d2:0c:4f:a0:f1:
d9:ef:91:ee:0a:1e:2f:34:5d:57:73:19:71:0c:e2:
2c:ed:dd:a5:b7:ff:03:dd:13:08:1f:af:cc:cb:21:
ff:6d:5d:6c:f5:d4:16:c0:7e:3c:13:a7:a8:0d:fa:
6c:78:71:dc:76:78:dc:be:f6:b7:a7:e6:0f:af:5b:
49:14:08:4c:28:b8:c3:e4:45:2d:dc:65:74:3e:b5:
d3:ba:e8:bd:db:b4:a3:4b:0e:f0:52:f5:ae:d0:93:
78:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C1:D9:52:30:89:A7:2E:D4:E8:22:3C:24:1B:EE:89:07:1A:DA:DF
X509v3 Authority Key Identifier:
keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:11:4f:7e:64:de:32:52:48:f5:23:37:d9:aa:6c:05:a1:45:
63:60:38:5b:ac:3a:43:85:dd:bb:b0:b4:a0:db:ca:9d:22:42:
16:40:15:13:ab:2d:7d:c4:b9:ef:52:8f:19:31:31:8d:bc:fe:
10:ed:33:36:c2:1c:db:43:c6:a0:5b:ee:64:11:cf:5e:23:f2:
db:ed:ba:39:0b:7b:7f:b8:cf:19:27:1b:b1:a0:0b:24:0a:59:
55:5d:1b:26:b9:d2:5f:99:a0:ea:aa:b6:6e:c4:dc:55:45:1a:
8c:0a:b6:b6:db:9e:77:75:e1:19:6e:17:7a:9f:ab:ad:e1:90:
14:f9:46:19:20:7c:02:21:d9:f5:18:2d:e2:90:c8:81:1a:4e:
56:b2:6c:cd:1c:41:0b:78:4d:59:16:ee:9e:ad:2c:b3:38:37:
26:37:9f:27:99:bf:e7:21:84:63:82:55:78:4d:e9:15:8a:d9:
de:88:79:ec:ff:c7:53:59:b7:3d:b2:e4:d7:37:7c:43:f7:9e:
0f:64:ee:7c:b3:59:30:e0:1a:78:c8:b0:ee:43:40:65:8c:49:
31:2a:47:c6:de:78:b1:4d:2c:2e:41:d7:b3:8f:f2:8e:86:8e:
e4:a8:5c:c4:3c:5f:ff:74:48:32:c5:48:db:4a:b5:48:15:80:
f2:f6:e9:c5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ0o8zyvz3podEF1JKdjg5X4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOGU2MGU1NjM5OWZmOTM0NjBiMzQyN2NkNTUyNzRiNWE4
M2U3MjYwHhcNMjYwMzI2MDcwMjAyWhcNMjYwMzI3MDcwMjAyWjAzMTEwLwYDVQQD
EygzZmMxZDk1MjMwODlhNzJlZDRlODIyM2MyNDFiZWU4OTA3MWFkYWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuI8ugpvl0did4D/pheuUDS+GB40
mw1cBoG/04aQF/TsWHSQawMbFb6+inJ1M9c5h11lDoBdMh6eyYYcG0LVLhlKiM9s
KSPqFL2Kk4141PqJ47vDrvj4tWE7tiSuM59j65+rR5fxbvxjrcp+Ay8U3HEWKlDI
BCcOty2jxjU86JxvVvogj65pktfF4Z4YIJo7Po3LTmtknET1L1JDNOPf0gxPoPHZ
75HuCh4vNF1XcxlxDOIs7d2lt/8D3RMIH6/MyyH/bV1s9dQWwH48E6eoDfpseHHc
dnjcvva3p+YPr1tJFAhMKLjD5EUt3GV0PrXTuui927SjSw7wUvWu0JN4swIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFD/B2VIwiacu1OgiPCQb7okHGtrfMB8GA1UdIwQY
MBaAFPuOYOVjmf+TRgs0J81VJ0tag+cmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS00NWc1V09aXzVOR0N6UW56VlVuUzFxRDV5WS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvYzY0Y2ViLTg2MTAtNDBlOS04MmFm
LWVlYjZjZGQ2ZmNmZi8xLzEtNDVnNVdPWl81TkdDelFuelZVblMxcUQ1eVkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FlL2M2NGNlYi04NjEwLTQwZTktODJhZi1lZWI2Y2RkNmZj
ZmYvMS8xLTQ1ZzVXT1pfNU5HQ3pRbnpWVW5TMXFENXlZLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRFP
fmTeMlJI9SM32apsBaFFY2A4W6w6Q4Xdu7C0oNvKnSJCFkAVE6stfcS571KPGTEx
jbz+EO0zNsIc20PGoFvuZBHPXiPy2+26OQt7f7jPGScbsaALJApZVV0bJrnSX5mg
6qq2bsTcVUUajAq2ttued3XhGW4Xep+rreGQFPlGGSB8AiHZ9Rgt4pDIgRpOVrJs
zRxBC3hNWRbunq0sszg3JjefJ5m/5yGEY4JVeE3pFYrZ3oh57P/HU1m3PbLk1zd8
Q/eeD2TufLNZMOAaeMiw7kNAZYxJMSpHxt54sU0sLkHXs4/yjoaO5KhcxDxf/3RI
MsVI20q1SBWA8vbpxQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:58:27 2026 by rpki-client