Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier: W660i7adIghyAOFEI55UyzNEuyn3FTVno8ysQJMM/vs=
Subject key identifier: 4A:F6:D5:B9:02:8E:D1:C0:07:CC:55:ED:CC:87:E4:23:C4:2F:3E:4D
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 019EBF2370FF4CA07F100485CA4CE3413A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number: 0AA2
Signing time: Sat 13 Jun 2026 04:00:31 +0000
Manifest this update: Sat 13 Jun 2026 04:00:31 +0000
Manifest next update: Sun 14 Jun 2026 04:00:31 +0000
Files and hashes: 1: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: jVGQQxTys+sWCi1AmChjP4O67wpXf/vxcu33SnWCVQI=)
2: UyoOwt_mkkio7rcKttEYqMqc4tE.roa (hash: 3ZPFWtYV3D6s10XCwOHklQ6Iqj8jHJrAUWODxNNBQcY=)
3: u7wi03kSUsP8y2tILiBs4RyN014.roa (hash: pYeJLWg472+6gUx7OvkaeELMhWeboOiwVGtw7KA43sM=)
4: uaEkmuhb7WRqiclbUmM34EjbO5o.roa (hash: h2MPog8U0B3WrxFfdEojnmYSGAZiWQIlg+muWLvtr1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:70:ff:4c:a0:7f:10:04:85:ca:4c:e3:41:3a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Jun 13 04:00:31 2026 GMT
Not After : Jun 14 04:00:31 2026 GMT
Subject: CN=4af6d5b9028ed1c007cc55edcc87e423c42f3e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:3a:68:19:c4:ce:0c:2b:3f:1f:64:05:06:
eb:79:c9:f1:10:c0:32:0a:2d:01:d6:fc:66:af:d2:
a9:6b:f7:92:bb:2d:9c:24:15:09:a4:9b:15:25:ee:
d8:15:b1:3e:79:08:b4:3c:0b:50:46:7f:00:b5:a6:
87:5b:99:6b:ce:9a:b1:90:01:e3:7c:22:63:5f:0f:
fd:df:cf:b0:79:30:c9:c1:64:20:62:21:4c:fc:c3:
9d:21:ef:03:4b:38:aa:55:c7:4b:d4:1e:e0:ac:46:
2b:e5:b2:cb:29:90:01:55:85:9a:7d:6f:1d:d3:ea:
f0:d9:bc:49:07:80:1b:8d:bd:59:4f:7c:9b:6c:9e:
7c:11:32:16:a1:18:bd:2f:64:e6:3f:8d:95:dc:5b:
7a:c1:66:b9:e9:ea:50:9b:94:2d:bc:9d:93:d3:70:
e9:fe:e6:c4:b6:c5:7a:ab:c2:95:1a:c6:f4:84:4a:
21:c2:27:be:f5:13:94:3e:7d:4d:24:ec:81:f8:48:
a6:14:60:2d:af:2e:30:11:78:e2:63:60:54:db:8c:
16:e3:79:95:b7:f8:54:d5:38:fb:f2:a8:fc:ec:b3:
5b:d2:a9:de:1d:55:39:66:7d:af:eb:35:69:d5:44:
8b:ca:a3:d8:2e:69:94:e5:f7:f3:37:82:97:78:41:
3d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F6:D5:B9:02:8E:D1:C0:07:CC:55:ED:CC:87:E4:23:C4:2F:3E:4D
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:89:44:32:60:69:c4:3e:72:fc:2b:b8:59:aa:00:91:55:1d:
27:f0:f7:b4:08:a5:83:30:14:78:7f:e7:7d:b4:23:65:44:2a:
3f:88:53:cb:5e:69:83:be:c8:df:5e:c5:34:a3:62:64:06:bd:
23:c5:fb:fe:4f:c8:f3:e6:dd:d9:85:1f:54:dd:61:81:6b:5e:
03:7e:9d:34:4b:33:05:a1:ae:54:74:52:4f:63:70:36:98:a5:
17:f7:b9:c4:28:f7:ad:20:80:1f:dc:e8:90:c4:5f:9b:38:a1:
ea:8b:bd:aa:19:9b:40:79:14:de:f8:f1:a5:1c:20:60:c4:2f:
13:fc:94:a5:8d:53:3c:c9:cb:79:67:83:2e:d4:41:45:16:58:
93:63:f4:cd:05:0a:a4:59:c8:63:62:54:2e:02:d4:9d:13:19:
41:cc:59:83:69:61:ee:75:69:1d:b5:59:23:2f:ff:b2:be:7f:
5e:17:b7:36:95:8e:b9:01:1f:a6:c1:9e:cc:73:b8:c0:3b:23:
a1:a7:d0:40:88:8c:f9:c1:0c:91:4c:fd:16:09:36:0e:f1:16:
b1:e9:aa:76:ec:53:f2:34:8c:b2:a1:8b:42:88:ec:6a:57:52:
5a:b3:07:24:bd:40:26:1d:f4:2a:b4:36:79:14:b5:b8:4a:31:
59:a2:9d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:29:14 2026 by rpki-client