Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
File: 45Dy7gpwvK7-AZWj2LN300KXqUM.mft (raw, json)
Hash identifier: G31Lm8HRr3N2BZ9b+QNT1bOR53hkp+O7ekmMLQKxDhA=
Subject key identifier: 47:77:7C:5B:A7:B1:49:5F:8E:AC:66:EC:36:09:E7:FC:73:0D:F8:54
Authority key identifier: E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
Certificate issuer: /CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Certificate serial: 01A0D6824C6B6C4FAF2DA89856DB9CF7B395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 03:00:58 +0000
Manifest this update: Fri 25 Sep 2026 03:00:58 +0000
Manifest next update: Sat 26 Sep 2026 03:00:58 +0000
Files and hashes: 1: 45Dy7gpwvK7-AZWj2LN300KXqUM.crl (hash: 6gYrHRM0YNIEVJFDIRslN+mW/1iKlLKqHMCVFWuD8u8=)
2: acUHfVCy5j8WfhXBkKrvtIIZ6u4.roa (hash: A0ZoDSyXeoOjiHDBQQXTi7qUdiWgsEQgspWWgoPcjbU=)
3: mY4iCleNhrzf8aXMLmHiJ52ay4A.roa (hash: XzaZ+/TpO1ZESBFBMtwiRlJAL9YVrFYukINjmUNi5KQ=)
4: mflNPwnPi4f5wBAod8r23N6IFVQ.roa (hash: eCHOBETtrQl/yFYeuqvktndVXTn5G2F5otfDMkWdMXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:4c:6b:6c:4f:af:2d:a8:98:56:db:9c:f7:b3:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e390f2ee0a70bcaefe0195a3d8b377d34297a943
Validity
Not Before: Sep 25 03:00:58 2026 GMT
Not After : Sep 26 03:00:58 2026 GMT
Subject: CN=47777c5ba7b1495f8eac66ec3609e7fc730df854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:22:4a:55:7f:fb:7e:05:43:fa:60:7e:a7:98:
b0:37:c5:3a:e9:c9:9a:6b:6b:b0:2d:ad:e8:e1:ce:
d8:e9:2d:f8:f1:d1:e1:16:12:d9:31:d0:48:5e:7b:
05:72:4a:b5:e2:5e:d2:01:49:a6:9e:b4:20:4e:0c:
5c:2b:25:89:ba:d3:70:35:f4:8f:f5:ed:54:64:0b:
06:51:f2:2b:42:fb:66:da:1a:5e:5d:d2:62:ea:dd:
5b:64:73:c0:0d:7a:16:09:cb:71:1b:f8:5a:02:9b:
dd:c8:01:b4:b3:5f:80:d4:38:00:15:c9:b1:ae:d0:
6a:b3:96:7f:e9:1b:16:9b:9b:cf:11:27:34:82:ef:
d0:e2:e7:bb:4c:a8:26:85:59:11:ed:54:c3:62:58:
9d:79:6c:b7:85:ac:c5:98:e8:37:4e:f4:bb:86:de:
9b:47:91:b7:06:f9:3c:7a:48:84:da:d5:f8:e2:80:
1f:ad:97:7b:f3:29:9f:8d:3e:78:5f:25:76:02:78:
3c:a4:a1:e8:55:db:79:42:84:ee:eb:55:d2:29:0f:
e3:fa:f4:e2:90:81:dd:c8:42:eb:4c:a8:95:89:35:
f8:5e:7e:70:b3:48:fd:07:11:4d:ae:b3:66:ba:52:
b5:a1:82:54:df:6b:03:97:d6:74:9c:bd:97:0f:70:
d1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:7C:5B:A7:B1:49:5F:8E:AC:66:EC:36:09:E7:FC:73:0D:F8:54
X509v3 Authority Key Identifier:
keyid:E3:90:F2:EE:0A:70:BC:AE:FE:01:95:A3:D8:B3:77:D3:42:97:A9:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45Dy7gpwvK7-AZWj2LN300KXqUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a604cf-1947-4b12-9a6b-3eb9134ec79d/1/45Dy7gpwvK7-AZWj2LN300KXqUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:df:71:6e:3d:37:d4:55:ae:79:b9:9e:12:bc:6e:64:7c:c0:
b4:06:4b:cf:4e:18:fa:14:9d:0a:0c:7a:1b:04:ea:55:c3:38:
84:99:77:8b:f5:1b:35:d2:23:ad:3a:5f:b8:27:f0:3b:ef:40:
a6:f2:c1:00:fa:a4:b2:03:91:66:38:d8:d6:e6:77:0e:6d:9c:
33:bc:cb:8c:4c:84:c3:65:78:75:fc:80:4e:de:1d:65:29:f2:
9f:7f:54:bb:fe:51:c5:25:9f:41:6d:03:08:c0:69:63:18:46:
b5:bf:ca:21:f6:8d:40:e8:5e:40:fd:97:97:1a:03:e1:d1:b3:
d9:8c:9e:16:b3:38:c4:a1:51:a7:db:56:2c:3d:56:73:30:91:
fa:bf:8e:43:7c:73:e1:e9:fa:03:f7:b1:58:00:2c:98:bf:7f:
13:fa:4e:01:81:14:9e:2a:89:d2:d1:b4:21:d5:56:c0:dd:9c:
01:b9:78:38:28:93:df:ac:8b:31:56:bf:8b:09:d9:f0:a2:2d:
61:a6:3c:97:76:9b:43:c6:db:2b:82:f2:3d:bf:07:7e:02:da:
43:5e:b0:49:85:40:e4:1f:ba:e7:98:fc:22:a2:fa:cc:d5:aa:
e2:b4:6b:8f:c3:c5:96:c8:fb:ce:58:4f:77:8f:e3:ce:77:28:
26:b1:fe:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:27:41 2026 by rpki-client