Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
File: 45VXJQVD5Edq-IxGEtSolTExO1c.mft (raw, json)
Hash identifier: m4ZpvJbsn+yurSuI2CMg2zC22BMph5BXk2SljYcL2KU=
Subject key identifier: 53:06:78:68:8C:2B:2D:B1:E8:5F:26:58:79:8F:BD:26:B7:32:53:BA
Authority key identifier: E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
Certificate issuer: /CN=e39557250543e4476af88c4612d4a89531313b57
Certificate serial: 019D284DAEE0F14E7D7C8495E0988D0B4A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
Manifest number: 042A
Signing time: Thu 26 Mar 2026 04:01:12 +0000
Manifest this update: Thu 26 Mar 2026 04:01:12 +0000
Manifest next update: Fri 27 Mar 2026 04:01:12 +0000
Files and hashes: 1: 2F4RMUmq0lpAOhiDCB5e-Y1vbfk.roa (hash: l3nVP84qgAebXZ45df8F6skmyfbFKhUrmvG9dZuwE7o=)
2: 45VXJQVD5Edq-IxGEtSolTExO1c.crl (hash: xqMuXkVNc/vILzi0QVRQHn80vrxlzjVuSq+wQXFjr2M=)
3: Iacpz7QDqdYmpPkWqkjxU0vWlw0.roa (hash: Egal+mT8M6xP1Rl+/8TQk/EbX4bTommbuReOlbLDzcc=)
4: aiFineB_gxGIrcZvhU1Nu9cj4A0.roa (hash: AkbNmkpqMmin2o1u61DaHLTarr56+ivukYMQYGh0IcA=)
5: d9AXTVr2vRRCUzg4PpWPZA9-G3Y.roa (hash: 4Ee4Ao/K0Ut8uGSYkeeEJIsMyx7D4XFRo3U7gWI9B3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ae:e0:f1:4e:7d:7c:84:95:e0:98:8d:0b:4a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39557250543e4476af88c4612d4a89531313b57
Validity
Not Before: Mar 26 04:01:12 2026 GMT
Not After : Mar 27 04:01:12 2026 GMT
Subject: CN=530678688c2b2db1e85f2658798fbd26b73253ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:38:64:c3:16:74:22:8e:01:1b:84:b1:6d:
b8:d8:6b:de:00:2c:ba:a3:26:99:6f:09:37:66:ee:
f5:d7:c7:38:d3:d0:32:f2:43:be:5e:0c:77:e3:7a:
d4:51:58:5f:fb:49:e2:5e:fb:5b:5f:ad:27:2d:f9:
fb:53:17:3b:8f:48:a0:75:5a:09:83:8b:f4:19:ef:
4e:fe:84:37:b1:94:db:22:d7:3f:ba:90:ca:a7:0d:
83:ec:8b:68:a8:15:2e:fa:b8:43:99:de:fb:2b:93:
c1:11:62:aa:0a:4d:46:73:80:73:0e:bb:dd:61:64:
56:3f:dd:01:ef:f5:b3:9e:86:94:45:e6:58:9d:c5:
8a:57:79:ad:45:4e:a0:6b:12:82:d3:9c:fe:b0:12:
37:f8:d1:72:e9:af:a2:47:3c:bd:88:88:56:8b:04:
2a:ff:06:78:cf:75:09:ee:1e:56:0a:57:4c:94:1b:
95:88:fe:7c:02:df:59:8e:31:ef:8f:46:9a:10:07:
d2:a7:57:0d:3b:80:eb:87:44:9c:65:eb:03:22:81:
ad:44:21:0e:6c:95:e9:7b:05:9b:d1:3f:ac:58:9b:
11:e0:13:71:a1:ad:fd:f7:01:e6:4b:1f:df:f7:83:
de:f6:42:4a:b8:ac:c0:c9:cf:d9:26:47:3f:5a:05:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:06:78:68:8C:2B:2D:B1:E8:5F:26:58:79:8F:BD:26:B7:32:53:BA
X509v3 Authority Key Identifier:
keyid:E3:95:57:25:05:43:E4:47:6A:F8:8C:46:12:D4:A8:95:31:31:3B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/45VXJQVD5Edq-IxGEtSolTExO1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/29d264-b941-47a4-9ec5-20695193ac07/1/45VXJQVD5Edq-IxGEtSolTExO1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:9f:ad:0f:3d:11:22:03:81:0f:0a:f5:c7:62:95:e6:2d:37:
fb:79:8f:91:f7:34:cc:83:5f:57:16:17:e8:02:8c:62:c7:29:
0f:dc:17:2e:3c:28:ac:bb:2a:a1:d9:82:32:55:c2:8f:72:e4:
8e:85:47:dc:95:ff:5e:f3:71:5b:85:69:10:e8:9b:45:63:a0:
35:62:1a:c9:f8:15:65:c7:b7:6d:27:aa:10:8e:a8:f5:84:88:
92:4c:82:73:ef:6c:df:cc:4a:fd:cd:36:a9:bd:6b:8b:e6:af:
01:24:4e:c9:0c:d0:7e:ec:ae:4d:2a:55:96:a5:f2:54:23:48:
24:37:5c:e5:c2:4c:d6:19:fd:6a:ef:4c:4d:a2:69:14:c1:c0:
8f:45:d2:1d:b4:38:6a:4c:55:ff:c2:af:f0:a6:fc:62:49:72:
21:8d:67:9c:36:84:7d:bd:d0:48:2a:e4:d2:dd:48:21:90:8f:
fb:ec:0b:a4:f9:6a:b5:77:57:ea:1b:30:c8:66:7c:f6:d3:99:
b7:8e:39:5f:09:29:2d:eb:d6:50:10:ec:47:78:4e:93:0e:ba:
f5:da:63:2d:d6:bb:d2:55:2b:6d:00:31:8f:f5:cc:d8:ea:5a:
01:7d:f4:41:e3:02:21:7a:bb:76:47:d1:88:57:ae:81:49:96:
de:5b:b9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:41:42 2026 by rpki-client