Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier: clkgLWkfmv1UMCv3CFSfRutpz3ik4tZv7CEk87N6mAY=
Subject key identifier: BD:24:9D:8A:5E:C9:58:AB:AB:E4:3C:2E:A9:D7:32:83:30:83:AE:44
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial: 019FA906E6BCE367663B8674CCA6F47ED0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number: 16AE
Signing time: Tue 28 Jul 2026 14:00:29 +0000
Manifest this update: Tue 28 Jul 2026 14:00:29 +0000
Manifest next update: Wed 29 Jul 2026 14:00:29 +0000
Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: C2YA2umJdiZ8+FJ+gw2t5LZRF/n7S+uTBS6A4sbIdwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:e6:bc:e3:67:66:3b:86:74:cc:a6:f4:7e:d0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Validity
Not Before: Jul 28 14:00:29 2026 GMT
Not After : Jul 29 14:00:29 2026 GMT
Subject: CN=bd249d8a5ec958ababe43c2ea9d732833083ae44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8b:bf:00:6e:3e:45:07:5c:48:02:db:23:27:
cb:52:20:ae:c7:16:71:6b:c0:44:a1:f2:3a:0c:fd:
19:19:bf:a5:2e:67:8b:82:af:2b:6b:de:dd:f1:c8:
c6:93:d3:55:f9:ff:2d:13:a4:e9:af:9e:62:17:54:
03:95:ac:ad:60:6b:ca:82:87:68:eb:a8:2b:1b:57:
b3:3c:ef:d8:84:fe:12:49:41:cf:cd:c2:61:0c:44:
d1:82:f8:4f:d5:34:81:61:07:e3:aa:00:0f:a5:45:
a4:43:69:3a:d4:25:48:44:c9:84:6c:e6:88:36:84:
94:ca:de:d5:5d:99:7d:ce:c0:1f:be:23:66:c7:f9:
16:64:f8:9a:b0:87:f1:39:fc:a7:b7:10:60:06:38:
7f:88:47:6e:be:72:5e:8e:14:1a:a1:31:bd:ff:a4:
93:96:47:25:3a:99:e7:42:df:e5:aa:db:09:8b:71:
2b:8b:78:8c:fd:d9:b7:9b:88:79:d0:03:0b:95:0b:
42:54:c2:08:b5:59:55:59:75:f8:3c:ac:14:ee:ca:
d4:12:02:e8:eb:dd:10:5e:49:a6:1b:1e:32:b1:c4:
24:d4:3c:69:31:06:7f:ab:fb:54:01:64:33:a1:3a:
e1:58:b3:a6:03:4e:e6:2e:f9:29:26:29:88:48:18:
86:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:24:9D:8A:5E:C9:58:AB:AB:E4:3C:2E:A9:D7:32:83:30:83:AE:44
X509v3 Authority Key Identifier:
keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:85:c5:9c:34:2c:96:02:1d:cf:dd:07:15:ad:d4:ec:17:62:
b1:4d:41:00:06:b1:82:a0:8d:52:a4:05:7b:be:a9:79:d6:e8:
f7:c7:42:d1:b9:aa:6e:39:51:24:14:2b:c0:2c:25:c9:83:6b:
89:6a:d8:3b:b2:f5:52:0f:45:d6:9e:23:50:e1:80:74:ef:e5:
49:41:49:68:75:08:15:88:df:37:24:b2:d0:94:85:7a:7b:71:
db:dd:59:e3:b2:03:01:23:d7:44:b7:57:0d:82:a3:b4:46:0b:
0a:cb:61:1e:f0:04:f0:a4:3a:bb:dc:d4:4d:3e:2b:23:b0:11:
ba:55:44:55:c0:04:89:39:e4:ad:56:f8:b5:23:7f:1a:11:eb:
2e:fa:17:5a:05:03:42:9f:60:e1:52:1c:9e:6b:92:5b:43:1a:
f5:84:04:4b:60:08:cb:1f:90:49:26:88:fb:7e:35:8a:6e:44:
1c:ce:a8:61:b5:ab:a0:ba:25:59:e6:a2:c4:34:31:af:aa:0d:
77:b0:79:59:1f:48:e7:ac:52:50:11:44:09:48:61:d8:5f:6c:
fb:b6:be:24:a2:5c:d3:93:72:95:9d:ce:ac:25:ea:de:b6:d9:
34:69:9e:de:d1:c5:d9:91:0f:dd:96:12:29:95:4f:d0:44:6d:
23:54:db:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:56:10 2026 by rpki-client