Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier: wzBRF+Zh3aVGV7fl8r5XIAyL3yJKfyTeEMoeRcZZ1uc=
Subject key identifier: 43:85:BD:36:FE:2C:F9:3C:3A:B8:AB:48:90:4E:3E:19:50:72:8F:E9
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial: 019DA377F007945FF45B6B38C46166F78D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number: 15A2
Signing time: Sun 19 Apr 2026 02:00:39 +0000
Manifest this update: Sun 19 Apr 2026 02:00:39 +0000
Manifest next update: Mon 20 Apr 2026 02:00:39 +0000
Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: IOMqFtrbjj9iZ5DveOJgmLnwGCrNPIUweS2vOiRSBYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:77:f0:07:94:5f:f4:5b:6b:38:c4:61:66:f7:8d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Validity
Not Before: Apr 19 02:00:39 2026 GMT
Not After : Apr 20 02:00:39 2026 GMT
Subject: CN=4385bd36fe2cf93c3ab8ab48904e3e1950728fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:ba:9d:5d:67:a4:00:e2:4f:8b:a9:75:46:
4f:f2:3e:8a:cd:7c:ac:5d:aa:0c:53:2c:52:96:19:
81:5b:f0:60:c6:81:ff:00:d7:e4:f9:4e:0e:39:5d:
41:45:26:9b:8a:1c:b5:3f:d6:65:4c:d0:d9:f1:32:
c3:1a:e5:61:14:c2:50:32:e6:7e:03:eb:a4:39:be:
8b:b1:45:5d:1a:51:1b:25:c6:a7:73:76:4e:5f:ef:
6d:f3:b9:d1:63:0f:4f:66:7e:fd:cd:87:b8:55:14:
d0:87:02:dc:1f:5b:be:ae:69:88:03:50:b4:bc:8f:
17:33:1d:82:71:d2:dd:9a:57:b9:a0:2b:96:69:a6:
bd:7c:27:34:b6:08:30:02:3d:13:f4:6e:02:ce:37:
39:39:bf:e0:18:b2:13:73:fa:df:84:e2:06:30:4e:
38:d1:c0:c3:31:a1:a6:6c:0c:fa:c5:bd:87:ce:f5:
b0:2f:cc:7a:98:54:ca:3c:74:2f:62:67:42:9e:84:
3c:6b:61:6e:e3:43:72:ef:49:ee:cb:43:5f:2c:29:
62:f6:96:63:65:ca:b9:b3:8b:c1:5c:74:d1:f7:2e:
24:a5:a5:da:7d:ba:71:5a:e0:74:f2:a8:58:05:92:
6e:7a:96:06:3a:a0:a8:7f:7b:38:ac:35:d8:c0:ae:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:85:BD:36:FE:2C:F9:3C:3A:B8:AB:48:90:4E:3E:19:50:72:8F:E9
X509v3 Authority Key Identifier:
keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:26:ef:bc:dd:90:8c:cd:f9:f5:10:14:3f:07:c0:f6:26:90:
8a:22:47:c6:46:2a:0c:ee:86:24:8a:24:79:e8:8b:a6:1f:bd:
d8:2e:07:34:c8:8c:75:9b:99:b5:77:20:5d:9d:89:e1:ed:3c:
59:05:5d:6a:d1:31:a8:bf:e4:fd:b5:ea:0b:ba:f1:e2:95:f2:
34:92:02:b2:df:02:a8:1c:71:2e:33:63:f0:56:51:0c:38:64:
fa:24:d1:8e:39:41:8f:3f:fb:18:43:b0:ab:7d:c5:e8:24:c4:
d7:24:64:c3:c7:4e:a3:42:c8:92:11:cd:77:ab:b8:79:77:73:
3f:44:c2:17:e5:13:96:01:b0:fa:6d:4e:d4:c3:48:6d:8d:2d:
da:8e:48:d2:ec:75:64:41:33:a1:77:ff:89:53:71:24:ff:86:
c8:bb:03:93:04:6e:fd:7e:f5:41:f4:2e:f6:b7:5e:29:9b:ec:
70:14:bc:63:05:08:98:43:3e:24:37:d3:83:89:0a:8f:9f:77:
d0:22:d2:90:06:96:08:c3:06:ee:3e:aa:fb:6e:71:6a:84:94:
06:8f:ac:e9:5f:1f:2e:40:9d:dd:b0:4d:40:9e:e1:4d:63:55:
99:75:1b:11:e5:34:7b:fa:23:10:3e:99:ae:7d:5a:9d:08:d6:
d0:7d:57:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:41 2026 by rpki-client