Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier: +Io5d09dhphujazyLeKRnkhJUznmmvLbCwKqjhRUUak=
Subject key identifier: A8:03:BD:FC:A0:A5:7D:A4:B4:00:21:23:3D:15:71:5B:39:47:4F:A0
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial: 019EBEB5BD8762A1F3E7E3D58B5FC61B130A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number: 0E78
Signing time: Sat 13 Jun 2026 02:00:41 +0000
Manifest this update: Sat 13 Jun 2026 02:00:41 +0000
Manifest next update: Sun 14 Jun 2026 02:00:41 +0000
Files and hashes: 1: 6PvsgVwbpjjge_V2egl4nj0Eov4.roa (hash: U1ac2CnvIyxkgh4LffLq2pt3hg9vUAszqogwRbgBBLY=)
2: INbvbexKikJqE06AvP-OgH6xyns.asa (hash: 6+8nON8zORmJVsBb/5wLz53qepNYird7lFy9z0e2zr0=)
3: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: HL5ptFXWnnBx5BCpxKhGCrzRNnE40cHV+lW2klp1t8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:bd:87:62:a1:f3:e7:e3:d5:8b:5f:c6:1b:13:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Validity
Not Before: Jun 13 02:00:41 2026 GMT
Not After : Jun 14 02:00:41 2026 GMT
Subject: CN=a803bdfca0a57da4b40021233d15715b39474fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:4a:c9:9e:1a:2b:44:d6:fc:2d:ba:68:9e:
80:b5:5b:4e:b1:6a:5c:12:5e:73:66:10:95:27:8b:
b2:13:f8:61:4a:7a:eb:bc:4c:da:d0:cf:f3:ba:1b:
ef:98:f4:66:6f:40:ad:9b:9b:b3:58:92:47:29:ee:
cd:b1:95:cb:4d:41:08:67:e8:ef:91:82:78:ea:87:
8e:25:80:24:61:e8:b9:ae:c3:15:79:ba:7b:64:ca:
88:87:aa:db:3d:00:84:cb:24:45:d1:c9:e8:e6:0e:
82:09:57:30:d4:7f:94:79:b0:7a:67:55:cd:37:a8:
8e:e2:a0:cc:d7:99:f2:c8:52:0d:83:58:14:04:0f:
73:a0:f2:9b:48:ee:10:84:c0:70:db:5d:d7:06:ae:
59:cc:01:7e:7b:38:73:6f:1f:66:7c:3d:47:82:70:
7f:8f:dc:b1:ac:70:ea:c8:23:f3:51:5a:86:bf:65:
51:c7:75:17:88:e8:3b:6f:71:aa:26:31:77:61:28:
61:d9:09:c1:46:33:c7:09:7a:3e:95:83:15:94:48:
34:8f:d7:7d:08:d6:42:e2:38:de:73:9a:1a:9a:dc:
3b:9c:62:e9:25:98:c3:a3:df:c0:8a:8a:11:bd:88:
0a:2f:0c:78:ee:92:7d:81:bc:a0:8a:76:21:6e:de:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:03:BD:FC:A0:A5:7D:A4:B4:00:21:23:3D:15:71:5B:39:47:4F:A0
X509v3 Authority Key Identifier:
keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6d:2e:85:00:73:81:8c:4d:d8:82:ec:f7:bf:bc:36:f8:67:
d3:24:93:a5:d1:0d:21:73:9e:24:d9:c7:de:4b:64:ca:09:bf:
69:0e:7c:f9:df:3a:aa:6e:48:e8:3a:df:f9:b2:bd:f0:7c:1b:
84:40:2c:61:ff:72:37:59:44:ce:40:4a:2c:77:7f:8c:cc:9b:
11:b9:07:c7:0a:0c:ea:89:54:f3:9e:dc:cf:48:2d:63:fe:6d:
f4:af:7a:17:6b:66:32:2c:ab:f5:af:97:42:ca:c6:be:54:41:
73:ab:99:4c:72:57:c0:95:db:5e:b6:12:48:f8:be:04:c9:66:
e0:6f:de:71:8b:03:c9:5d:47:0e:52:7a:d7:a7:93:9a:98:ee:
be:35:d0:30:44:6e:5c:9e:fe:16:c2:f2:07:4a:1b:26:4d:2a:
03:63:f7:e4:e1:df:7a:b7:a3:d1:a2:cd:0c:d7:b9:18:b1:b3:
b0:81:3a:68:00:fd:f2:b2:2e:82:0e:52:b7:5e:9a:06:f1:5c:
bd:21:e2:5e:bf:cb:86:de:bf:05:a3:f4:2e:1a:77:6c:da:4c:
8c:03:3c:de:28:d8:c4:f9:5a:bc:0c:c3:fc:39:c2:71:3d:0d:
71:bd:d5:24:01:ea:1e:26:4f:d7:02:e8:fc:87:b4:4c:7f:ea:
b0:b4:3f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:30:34 2026 by rpki-client