Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier: EY+lKe6Vo0qiEK03mniOWLSrR7iv0OSnEgkhTnwlHRI=
Subject key identifier: 22:E2:17:DA:E2:FC:7F:C5:DD:F7:A6:42:35:D4:B8:B7:3F:31:9D:DB
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial: 01A0BEB0832F8E7E10F75E9577A53BE69ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number: 0F82
Signing time: Sun 20 Sep 2026 12:00:33 +0000
Manifest this update: Sun 20 Sep 2026 12:00:33 +0000
Manifest next update: Mon 21 Sep 2026 12:00:33 +0000
Files and hashes: 1: 4hpP6F9Wk_D0BrQ0W0jMsekS0sE.asa (hash: LoVQALkE5ii1io18aQx/XHtpWUH22jurmHwu9Ab8L28=)
2: 6PvsgVwbpjjge_V2egl4nj0Eov4.roa (hash: U1ac2CnvIyxkgh4LffLq2pt3hg9vUAszqogwRbgBBLY=)
3: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: bbbXZXWErIo8vKE1xl9RdPKvTGc1ZifUBrHAbNIM7ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:83:2f:8e:7e:10:f7:5e:95:77:a5:3b:e6:9e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Validity
Not Before: Sep 20 12:00:33 2026 GMT
Not After : Sep 21 12:00:33 2026 GMT
Subject: CN=22e217dae2fc7fc5ddf7a64235d4b8b73f319ddb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:82:85:dd:d8:3f:6e:34:18:f4:9c:98:d6:
b7:bf:e2:b6:71:ec:ee:d9:2e:82:0f:4a:2c:63:c0:
0f:fb:23:83:4b:e2:f3:82:db:47:47:4c:88:e3:19:
94:d4:5c:83:bb:7d:7b:66:7f:cb:2b:34:fc:25:9e:
b6:0d:66:12:e9:67:f7:ef:58:1a:fe:e3:20:51:fb:
fb:0a:14:9f:80:4e:4f:01:a9:ec:67:b4:0c:5b:91:
e5:a9:84:87:cb:18:bf:16:1c:a1:48:76:5a:ec:48:
00:67:33:5f:71:b5:64:66:89:57:c1:f3:7c:6b:16:
83:0c:0f:ef:3a:84:53:4a:43:0d:8b:99:85:82:75:
fb:64:b3:a9:3f:95:2f:df:1c:a9:eb:cf:c6:2c:c9:
c6:bd:aa:a7:47:39:09:4d:17:26:42:6a:14:6d:ac:
ee:aa:d6:6f:65:1b:ca:49:ba:c2:34:4c:73:84:b5:
a2:37:f8:96:2f:d2:b6:f5:b8:03:cd:c8:1c:d8:1b:
d8:b8:bb:e5:2d:8c:20:88:71:8c:5c:8d:b4:f7:ee:
a2:39:8d:22:a3:cf:49:c4:18:98:8a:9a:c6:37:3b:
98:d5:9f:f4:28:35:a0:8c:d3:d9:6c:91:5e:db:c5:
89:6b:d3:83:b6:29:ce:24:99:49:97:59:c3:7c:2e:
3b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E2:17:DA:E2:FC:7F:C5:DD:F7:A6:42:35:D4:B8:B7:3F:31:9D:DB
X509v3 Authority Key Identifier:
keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cd:46:c2:25:c2:e5:16:98:3f:fd:2b:50:df:63:ec:b1:d2:
db:a7:c3:40:cb:ed:13:fe:f3:6c:40:c3:e7:27:c6:e5:13:75:
78:15:17:85:a4:f0:41:7f:b3:27:09:da:a5:dd:4e:1d:bc:c3:
27:c8:3b:bb:a2:f3:d2:be:37:1b:96:62:0a:64:c9:61:71:07:
5e:23:91:9f:3d:e3:72:58:ab:40:6d:c7:f1:65:2b:f1:ac:62:
ca:ae:82:2e:a2:7b:8f:08:4b:77:d2:ea:d2:f3:9a:95:cb:fc:
c6:40:d1:e4:42:27:f4:66:0f:96:f3:a7:74:c8:32:30:38:af:
34:7e:eb:6c:d1:12:b1:c5:95:59:17:bb:c8:c7:26:91:bd:16:
eb:2f:1c:15:21:c0:dd:07:d3:6e:a4:5b:60:c1:ad:be:73:21:
55:6c:bf:11:34:01:50:c2:c3:65:c2:b3:49:96:74:e9:a5:3a:
e9:d1:1d:b6:fb:5e:2b:60:d6:5a:77:f8:1d:42:74:9a:cb:1d:
11:ad:79:9a:95:75:28:7b:b8:f8:db:9a:76:20:49:9e:9d:10:
1c:12:3a:fa:fe:79:e6:c0:f0:55:46:38:15:8d:81:26:e8:4e:
62:b2:84:de:31:b9:95:a2:7b:60:98:42:ab:65:f3:cb:50:a3:
f8:5b:ed:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:57:20 2026 by rpki-client