Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier: Ye2VFFEz+eCJqee9KdKU+44kwIBZnuvDVVMnLn54ADw=
Subject key identifier: AB:FB:B3:D6:E7:40:CF:B7:C8:DA:59:ED:48:F2:36:A4:13:F2:EE:E6
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 019D97AA993288826B72C59E46019B608AD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number: 0A09
Signing time: Thu 16 Apr 2026 19:00:33 +0000
Manifest this update: Thu 16 Apr 2026 19:00:33 +0000
Manifest next update: Fri 17 Apr 2026 19:00:33 +0000
Files and hashes: 1: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: 49gl7tXwTc9L7U2IjKfGY/AGcklytGT5xGhI32Of3ms=)
2: UyoOwt_mkkio7rcKttEYqMqc4tE.roa (hash: 3ZPFWtYV3D6s10XCwOHklQ6Iqj8jHJrAUWODxNNBQcY=)
3: u7wi03kSUsP8y2tILiBs4RyN014.roa (hash: pYeJLWg472+6gUx7OvkaeELMhWeboOiwVGtw7KA43sM=)
4: uaEkmuhb7WRqiclbUmM34EjbO5o.roa (hash: h2MPog8U0B3WrxFfdEojnmYSGAZiWQIlg+muWLvtr1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:99:32:88:82:6b:72:c5:9e:46:01:9b:60:8a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Apr 16 19:00:33 2026 GMT
Not After : Apr 17 19:00:33 2026 GMT
Subject: CN=abfbb3d6e740cfb7c8da59ed48f236a413f2eee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:e9:7a:bd:29:61:1f:23:d4:09:ae:cc:30:
ea:ff:89:e0:33:03:17:1c:20:48:77:66:72:ba:b4:
d1:3c:df:86:62:fc:a6:6d:04:91:5e:4d:60:d8:87:
e0:d7:b7:9a:b3:07:ce:b9:e2:66:83:a8:44:a2:e8:
42:f8:d9:a9:a5:9b:00:11:69:44:79:ad:69:57:f9:
ae:9f:d2:5d:19:0c:90:91:ef:b1:25:57:c7:c1:15:
41:32:4d:96:3d:3f:f3:03:67:e3:17:c1:e1:0a:92:
ad:63:70:11:4d:52:49:4b:14:02:75:d0:29:8b:38:
52:91:31:97:ba:94:0b:d8:85:7b:fe:6d:d2:0b:3e:
c2:77:86:95:3f:d1:b9:f4:58:de:fd:bf:d0:e8:16:
41:95:5d:f3:87:25:62:1b:74:94:f4:04:27:3f:0c:
5e:f4:dd:38:e1:41:58:45:89:25:bb:27:08:45:f0:
53:13:b3:62:49:2b:0a:46:25:1b:48:a6:2f:ce:1c:
1a:6a:fc:29:f8:dd:02:6f:ed:69:dd:94:a9:f0:53:
bd:09:67:c3:00:a0:af:a5:df:3c:03:f0:11:85:5e:
2f:97:dd:f0:02:ee:7b:95:fc:ad:cd:6f:97:17:97:
cb:e2:a5:99:a9:92:79:cb:f0:c1:5d:fa:b1:2a:38:
45:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FB:B3:D6:E7:40:CF:B7:C8:DA:59:ED:48:F2:36:A4:13:F2:EE:E6
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f3:da:4a:27:5e:a6:40:ac:dc:58:78:c9:94:d3:59:3e:c3:
2e:56:e7:46:0a:13:27:4a:b9:9a:66:b9:14:9e:76:03:86:03:
1a:03:56:0b:f3:9f:dc:e1:79:b9:9d:e2:70:c5:45:83:e2:a5:
15:a1:3b:4d:b1:13:69:d0:ad:d5:aa:49:a6:49:e5:30:6c:c7:
4f:7d:fd:2d:62:c2:c0:2f:66:ec:84:62:60:58:2f:48:5c:9a:
05:99:51:51:03:3a:ad:94:95:61:29:42:76:45:18:37:78:81:
f5:69:69:d9:ac:1b:b7:bd:6c:44:bb:a1:71:5a:d3:21:f5:85:
8b:5c:f3:96:d2:15:c3:f6:67:24:02:fb:a7:a6:4b:83:19:75:
8d:6e:d3:d7:82:8a:23:04:ed:f7:4b:e4:d7:40:9e:fa:cb:5f:
94:b2:1a:1e:8a:7b:a4:e5:5b:6c:3e:50:10:ed:18:5e:f2:ca:
98:03:0e:c1:49:c5:34:54:11:f7:80:46:ce:34:52:28:07:8c:
87:d4:76:25:09:35:9b:18:6f:0c:44:44:d5:55:21:22:e2:ef:
6b:c4:4e:21:53:14:0e:84:e8:fc:62:7a:b2:35:36:90:9d:5c:
1e:bf:29:6f:f4:10:f0:00:52:6a:62:82:64:99:b4:ef:c3:70:
2d:59:6a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:21 2026 by rpki-client