Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier: A0fUBLr0D15vhffwFkkZkXNgw+RAvnRwgIYHLuUwsHM=
Subject key identifier: 7C:28:0A:78:C6:FB:13:92:42:C2:F6:0E:99:8C:8E:D9:6C:09:D7:90
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial: 01A1DCF0178D2B9524461874EA466F07BE4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number: 17D2
Signing time: Sun 15 Nov 2026 02:01:24 +0000
Manifest this update: Sun 15 Nov 2026 02:01:24 +0000
Manifest next update: Mon 16 Nov 2026 02:01:24 +0000
Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: d93BIKFPK9/986zs6xdgbmj0tisSljW1pXVUXNel2WM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:17:8d:2b:95:24:46:18:74:ea:46:6f:07:be:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Validity
Not Before: Nov 15 02:01:24 2026 GMT
Not After : Nov 16 02:01:24 2026 GMT
Subject: CN=7c280a78c6fb139242c2f60e998c8ed96c09d790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3f:bd:eb:3c:c4:33:c7:18:5d:22:09:b9:b7:
ea:12:bb:b2:65:6c:db:2d:6f:4d:8e:03:77:45:bd:
34:45:52:b9:37:ca:4a:94:87:fb:f4:25:d3:48:e6:
b8:13:f9:d0:d2:b9:be:d1:1f:06:93:6e:75:a9:ec:
78:ce:48:2a:73:af:c2:77:bf:d2:a8:8d:0d:fa:6c:
05:0f:27:12:08:ed:c0:60:8b:83:f7:ed:f9:09:2b:
95:67:ec:77:54:36:a1:ef:b5:68:20:67:5f:b7:18:
fd:f1:00:58:61:c0:9c:67:14:b3:2f:8f:63:c0:07:
16:3e:bf:e1:71:96:a3:6c:d4:9d:d5:37:73:ed:97:
07:19:f4:86:36:36:a7:be:2a:8c:da:ad:4f:8d:81:
02:e1:ce:44:e8:b2:9e:a9:59:ec:cc:0f:74:c3:32:
cb:27:3c:ab:f7:5b:ab:40:05:f6:36:63:dc:94:12:
54:5a:36:9c:b5:80:17:19:c9:7d:41:57:15:5f:ae:
36:fb:be:96:0e:df:f6:4e:95:ea:dc:e9:3e:4f:03:
f0:9d:04:53:e3:b2:77:1d:d7:4d:5b:e6:c8:21:7c:
3c:71:60:0a:35:49:15:a3:1f:b3:e6:bb:09:d1:10:
d2:d3:f1:b9:09:41:6d:f6:51:bc:19:73:46:a0:48:
ca:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:28:0A:78:C6:FB:13:92:42:C2:F6:0E:99:8C:8E:D9:6C:09:D7:90
X509v3 Authority Key Identifier:
keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9b:fa:a6:e2:8f:9e:9f:b9:52:bd:7f:74:5b:9b:f7:9b:b4:
86:03:d1:22:c1:ac:2a:50:54:01:78:de:82:33:81:9f:bf:ae:
91:6b:ad:40:91:df:18:fd:da:2b:f1:f6:7d:8f:83:a6:65:e4:
aa:55:ab:be:71:5f:21:59:63:61:ee:98:d4:ff:0a:2b:85:5f:
ea:8d:ec:e9:e4:71:df:07:96:2e:bf:1c:a1:5e:18:65:2a:8f:
3f:f3:2c:22:e0:bd:93:d3:45:a6:c0:05:de:bf:4a:5a:ad:83:
26:9a:3a:54:ed:c0:f3:15:ff:0f:94:21:38:d5:02:0c:7b:da:
84:7c:fe:c0:eb:ea:2b:80:42:20:74:c9:46:64:1f:83:e1:91:
84:85:eb:a6:3d:80:59:9f:18:89:07:b9:55:8f:2d:52:e1:d1:
07:b1:2d:57:8a:b1:e5:08:7f:3a:c1:f4:67:ab:8a:d6:1d:5e:
35:b0:38:64:f5:26:e2:fd:4b:78:6a:ea:eb:1a:d2:66:26:26:
ae:7e:25:74:e5:9c:38:76:0f:c9:4c:ea:85:3e:21:b9:5a:84:
cd:35:7a:3a:30:a6:6f:0f:d3:dc:7b:61:2e:4c:2a:9f:e8:25:
be:a8:a6:4a:8d:64:f3:90:a0:c2:4b:f2:4b:95:3d:75:39:e0:
68:11:38:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:15:15 2026 by rpki-client