Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier: NYnjy2rP/Rj8H4ThAnmLGVvEpBxsKqvV8GPjTqBe2AU=
Subject key identifier: 66:9D:18:DC:D5:32:8E:A4:C5:8D:3D:E8:49:E3:64:C6:17:EA:9A:D6
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial: 019D992B57344A6E64EFFE741EBCCC20A006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number: 0DE0
Signing time: Fri 17 Apr 2026 02:00:47 +0000
Manifest this update: Fri 17 Apr 2026 02:00:47 +0000
Manifest next update: Sat 18 Apr 2026 02:00:47 +0000
Files and hashes: 1: 6PvsgVwbpjjge_V2egl4nj0Eov4.roa (hash: U1ac2CnvIyxkgh4LffLq2pt3hg9vUAszqogwRbgBBLY=)
2: INbvbexKikJqE06AvP-OgH6xyns.asa (hash: 6+8nON8zORmJVsBb/5wLz53qepNYird7lFy9z0e2zr0=)
3: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: bGmlQ6yfC+tFPSupaT0ZWVjFjmsU8KsYuWR90/roeCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:57:34:4a:6e:64:ef:fe:74:1e:bc:cc:20:a0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Validity
Not Before: Apr 17 02:00:47 2026 GMT
Not After : Apr 18 02:00:47 2026 GMT
Subject: CN=669d18dcd5328ea4c58d3de849e364c617ea9ad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8b:ec:3d:cb:d7:87:7f:b3:76:eb:bc:e8:fd:
50:45:c7:56:c8:da:81:0b:c4:e2:f7:1b:0e:4c:ef:
9a:8a:e6:05:da:d9:8b:be:fc:cb:21:4c:ae:4d:10:
c8:45:53:52:6c:3b:34:08:93:2e:74:33:29:de:76:
c6:2f:5e:a3:c0:05:3c:e8:8e:f2:f8:f6:54:f9:22:
fd:5f:a9:b5:74:ea:b5:d8:3b:c0:53:4c:c4:e1:55:
28:f9:74:08:1d:10:5a:2f:40:17:a7:7d:cb:c5:4d:
38:df:fb:fe:11:ec:5b:f0:f7:9c:67:0b:07:57:05:
fc:df:ed:43:4a:85:cf:88:30:5a:b4:85:10:9e:1f:
a2:84:37:3b:08:77:08:8a:2e:d2:69:d9:e9:0b:aa:
c7:6b:23:3d:bb:88:20:ef:c8:af:07:d0:ac:02:75:
af:ec:e4:b8:e7:dc:4a:cd:05:59:b3:50:17:07:9b:
39:3c:1e:91:4c:12:e6:9a:46:60:75:79:30:fb:6a:
a3:7f:a0:c6:ca:5b:ea:08:c6:ea:67:19:7d:18:6f:
cd:35:59:71:66:97:74:58:b4:1e:66:69:9f:2b:75:
ca:53:71:fa:58:a2:39:6a:16:1d:59:a2:ce:54:20:
01:26:ef:ad:bb:54:14:9a:eb:d4:93:0e:2f:52:d6:
01:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9D:18:DC:D5:32:8E:A4:C5:8D:3D:E8:49:E3:64:C6:17:EA:9A:D6
X509v3 Authority Key Identifier:
keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:cd:57:8f:21:a1:34:6f:4e:b8:5c:9e:37:9e:0b:ee:91:b2:
53:3f:b8:1c:0d:db:f8:6a:86:17:7c:97:6e:cd:c2:23:44:78:
cd:96:9f:39:35:82:1a:27:52:96:b3:22:13:07:44:7d:72:dd:
52:01:77:76:ef:45:74:d6:0d:28:7b:c6:c9:d9:11:05:5f:55:
67:90:cb:e0:fb:1c:75:51:f3:f1:d2:33:cb:3e:15:08:88:a9:
fa:d9:84:aa:c2:0a:8c:d1:ef:35:b7:9c:2c:93:95:03:13:cb:
1d:36:59:19:63:f3:11:fd:51:52:03:80:5b:e9:72:5b:bf:bb:
5f:c8:7c:a2:fe:c3:64:b5:44:0f:ff:99:c6:b4:c2:47:34:54:
e7:73:d0:34:0a:c1:57:3d:82:8f:d2:56:4e:8b:18:35:38:8a:
44:2f:de:64:c0:cf:2c:e0:7a:03:38:f4:b7:2f:ce:bd:a5:4b:
fb:22:c3:65:16:19:70:af:a8:0a:ef:0d:ad:e9:27:36:db:47:
d7:fe:56:65:b8:18:66:3c:68:9c:32:85:b4:9c:46:7b:48:64:
6b:67:90:2a:50:fa:46:e0:45:33:b9:bb:0f:79:33:d9:63:52:
31:85:c0:de:96:23:04:0b:98:3e:96:0a:6a:da:8e:3f:d9:d3:
3d:f3:9c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:53 2026 by rpki-client