Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier: fnCZuqlpic6MpHIGyVE3JzeLkHKkHGubfQ0jovUJvEk=
Subject key identifier: 2E:81:51:67:7A:CC:BF:34:BD:82:7A:DF:0B:3B:46:9E:74:38:74:8D
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial: 019CAA58B6296341B0ED06B55F9FBDE18351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number: 1521
Signing time: Sun 01 Mar 2026 17:01:06 +0000
Manifest this update: Sun 01 Mar 2026 17:01:06 +0000
Manifest next update: Mon 02 Mar 2026 17:01:06 +0000
Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: tMKhbVQ6qfnsfvMXc8YlweR6Qawu08maNGBdPEj2pGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:b6:29:63:41:b0:ed:06:b5:5f:9f:bd:e1:83:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Validity
Not Before: Mar 1 17:01:06 2026 GMT
Not After : Mar 2 17:01:06 2026 GMT
Subject: CN=2e8151677accbf34bd827adf0b3b469e7438748d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:46:b6:ba:58:36:d2:ec:0e:ab:8f:fc:3e:80:
b9:1e:d4:0a:7c:24:fb:ec:04:ee:7c:67:8f:87:43:
81:f0:77:c0:ad:4f:f7:8d:c4:b9:1e:14:aa:e8:a1:
6c:9e:18:74:4b:f2:9f:11:82:13:69:4e:8c:a2:94:
06:80:3e:87:1a:a8:09:d3:0f:f4:42:9f:1e:68:31:
7e:f4:9a:c9:8a:7e:cf:fe:fb:ec:31:5a:be:9d:6b:
fb:3f:1c:da:34:54:30:31:12:81:bd:fa:b2:6d:cd:
1f:62:36:be:28:bb:c2:81:a2:d0:c6:23:c4:e5:f4:
25:ae:f0:a2:dc:e4:64:46:87:b1:45:de:1a:65:8b:
d8:b0:62:a3:6b:9b:4c:f6:9d:5d:ce:92:1d:55:3e:
56:c9:2e:bc:db:49:0e:97:29:dc:9d:9b:5a:f5:e4:
ee:11:f3:08:92:04:99:cd:ab:38:fc:e3:34:65:3f:
93:11:ae:bb:c0:c2:ba:db:ce:fd:88:8d:83:f9:98:
d3:de:79:e8:a7:07:b3:f1:f6:bc:ba:66:c6:bd:f5:
13:6f:64:95:df:a4:78:a1:50:e8:fd:1f:48:25:6c:
ad:41:d9:6a:b1:57:45:35:9d:0f:a9:71:fc:6f:58:
9c:2a:e8:a0:c0:b5:01:5c:c0:1c:d7:d5:0c:5c:43:
f8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:81:51:67:7A:CC:BF:34:BD:82:7A:DF:0B:3B:46:9E:74:38:74:8D
X509v3 Authority Key Identifier:
keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:78:6d:8b:2d:5b:2e:34:f2:f7:0e:25:13:c3:e4:da:23:8d:
3f:88:ec:eb:51:96:76:c2:99:1d:6a:94:71:29:ff:9e:f6:a9:
30:e1:9b:51:78:ff:d4:e8:5a:58:5d:9e:0b:5b:96:61:d6:8c:
d4:a0:bd:74:ae:31:49:f4:bd:01:85:c0:71:ab:97:06:89:8f:
d2:e9:00:3c:08:e3:e9:7d:5f:f6:c8:78:ea:80:05:98:ef:97:
e3:92:c6:ee:73:30:04:dd:e0:6f:4e:6a:cd:e4:73:4a:ab:7c:
88:b4:72:cc:26:6d:86:44:80:1a:c2:a4:06:65:95:18:99:ec:
71:9f:c3:9b:9a:25:78:ea:09:c9:f2:9c:1b:f7:4d:a2:9a:b8:
06:74:94:5a:97:e1:49:f6:94:c8:6e:1c:09:4e:46:8c:da:00:
8c:87:c9:48:e6:09:a3:13:97:98:6b:05:39:f3:a6:d0:63:b3:
46:fc:55:4f:b1:cc:1c:3e:de:48:6f:1c:c4:ec:bb:35:0e:f3:
73:30:e5:ac:82:c4:bb:87:69:44:bb:99:d5:df:37:ee:64:24:
cf:48:73:ae:62:8a:b0:34:34:2b:f1:0b:5f:d2:5e:fd:62:f7:
55:f1:63:81:d1:9c:73:74:48:8f:98:e1:0f:db:ee:48:51:a9:
ef:80:21:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:30 2026 by rpki-client