Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier: o/B4igFlwOYLCo2jpdSYvGSs9n5+t4WEojDnzlU8SWQ=
Subject key identifier: 03:7A:2D:84:41:80:02:76:BB:3F:D2:C5:BF:74:4F:1B:3F:AF:EA:DA
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 019CAA21762C8462D4C7B48B2A6047DA9702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number: 098E
Signing time: Sun 01 Mar 2026 16:00:45 +0000
Manifest this update: Sun 01 Mar 2026 16:00:45 +0000
Manifest next update: Mon 02 Mar 2026 16:00:45 +0000
Files and hashes: 1: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: P7tOhMQ49utmcgq84xlPef639NXY7ydxXQ6GNoQIyYg=)
2: UyoOwt_mkkio7rcKttEYqMqc4tE.roa (hash: 3ZPFWtYV3D6s10XCwOHklQ6Iqj8jHJrAUWODxNNBQcY=)
3: u7wi03kSUsP8y2tILiBs4RyN014.roa (hash: pYeJLWg472+6gUx7OvkaeELMhWeboOiwVGtw7KA43sM=)
4: uaEkmuhb7WRqiclbUmM34EjbO5o.roa (hash: h2MPog8U0B3WrxFfdEojnmYSGAZiWQIlg+muWLvtr1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:76:2c:84:62:d4:c7:b4:8b:2a:60:47:da:97:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Mar 1 16:00:45 2026 GMT
Not After : Mar 2 16:00:45 2026 GMT
Subject: CN=037a2d8441800276bb3fd2c5bf744f1b3fafeada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:12:ff:19:79:4d:12:08:d3:8d:db:9a:e2:db:
ca:97:66:04:85:4a:01:c6:d2:bf:34:1f:da:c6:30:
06:ef:c5:e2:ef:76:2e:b6:e7:7d:f0:06:c3:6f:1f:
cf:c4:e3:a9:57:09:99:3c:12:d1:46:32:b5:01:69:
4c:fb:00:0b:62:60:23:51:c3:e6:24:19:bb:dc:b8:
8e:3c:59:97:f6:7a:00:3c:d3:3d:fe:b3:a3:37:cf:
9a:da:ed:ef:cd:57:4b:5c:31:40:1a:f5:a6:c7:38:
f4:dc:14:48:c5:f0:ca:7c:6d:4e:46:eb:dd:42:2c:
47:9a:01:92:80:d2:40:c3:98:4e:3a:d4:ff:17:cb:
c4:25:08:46:9a:13:94:e7:24:ad:e7:43:f6:c2:e1:
0e:05:8a:4f:7e:c2:5f:5a:fc:96:c6:fa:75:84:f4:
94:31:f3:82:fa:70:29:2f:6e:7f:3d:a2:e6:7e:5e:
e4:1a:0e:1c:86:f3:07:76:ec:a0:9a:50:ff:75:a6:
55:bd:49:e7:3c:fa:fb:9f:dc:f8:d0:f9:f1:98:59:
ea:58:9d:9b:58:6f:53:62:42:5c:f0:32:3f:1e:b6:
30:0c:14:40:b9:4e:7d:d0:5a:e4:6c:6a:a8:d0:82:
cd:44:74:cd:12:6e:0a:aa:0e:41:50:ab:3d:e7:46:
24:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7A:2D:84:41:80:02:76:BB:3F:D2:C5:BF:74:4F:1B:3F:AF:EA:DA
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:58:e0:c6:15:f7:e9:77:c8:9c:e9:f4:f8:c2:de:53:8d:7e:
d1:96:70:9d:2f:cf:37:d1:63:78:38:dd:be:46:e0:3c:df:0a:
16:7d:85:b5:1f:ac:d4:cb:6d:f5:f1:90:8a:a6:26:9f:5d:14:
47:99:4c:82:cf:4e:66:7d:b0:c5:5f:f3:00:d9:61:c3:ae:e2:
72:61:ad:ef:51:e1:52:26:94:84:4e:7d:b6:11:a4:0a:0a:68:
c0:70:bf:cf:30:c7:36:a2:42:ad:21:de:0b:5d:c3:40:1a:98:
1f:ff:6d:3d:ca:2b:b2:f4:1f:9a:51:c5:c5:cb:3b:31:17:47:
c9:45:3a:28:07:1c:da:aa:ef:7c:b9:fa:f4:c5:c9:af:9f:fb:
60:e4:46:cb:f8:82:de:3a:6e:98:f0:25:94:3f:31:e5:19:0e:
81:3b:42:2f:96:3c:cb:32:0a:00:be:cf:32:f0:03:ee:67:21:
25:da:71:e6:ba:e0:f7:3e:81:ce:de:b0:fd:42:8c:36:a1:aa:
d1:8a:88:8e:c2:8b:07:5e:6c:46:ab:2c:56:c5:ef:ab:30:ff:
3c:34:9b:e6:d4:21:ce:4d:ca:4c:c4:ca:1b:a2:3c:af:6a:57:
2e:06:80:9b:cf:53:a5:8d:55:d6:8a:c9:d0:41:76:51:e7:d7:
a1:5e:22:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:55:16 2026 by rpki-client