Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/CeldrxY5x0VJFflMPn3X2pZDBYo.mft
File: CeldrxY5x0VJFflMPn3X2pZDBYo.mft (raw, json)
Hash identifier: v9WVF25+zwbNg7w+hElcsHkqiF2nHi2IxrksPdHJAvg=
Subject key identifier: CE:BB:18:C8:41:80:8D:6D:42:4A:C8:4C:33:9F:30:3C:5B:EE:AA:EC
Authority key identifier: 09:E9:5D:AF:16:39:C7:45:49:15:F9:4C:3E:7D:D7:DA:96:43:05:8A
Certificate issuer: /CN=09e95daf1639c7454915f94c3e7dd7da9643058a
Certificate serial: 01A0C557D4BB0BD3A09ADCF07BE3FD4AE193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeldrxY5x0VJFflMPn3X2pZDBYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/CeldrxY5x0VJFflMPn3X2pZDBYo.mft
Manifest number: 3B
Signing time: Mon 21 Sep 2026 19:01:02 +0000
Manifest this update: Mon 21 Sep 2026 19:01:02 +0000
Manifest next update: Tue 22 Sep 2026 19:01:02 +0000
Files and hashes: 1: 5bswdSPkzISiUjsgGvs8he7FLw0.asa (hash: kwdjlAqoJ5mD2gTxZB6y6A/f+ih4d96A7fnxQTfDQUA=)
2: CeldrxY5x0VJFflMPn3X2pZDBYo.crl (hash: IkpGzUieldGFuaZF6GP/LHykZOUa5S8B9V4xR7cO/8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/CeldrxY5x0VJFflMPn3X2pZDBYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/CeldrxY5x0VJFflMPn3X2pZDBYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeldrxY5x0VJFflMPn3X2pZDBYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:d4:bb:0b:d3:a0:9a:dc:f0:7b:e3:fd:4a:e1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e95daf1639c7454915f94c3e7dd7da9643058a
Validity
Not Before: Sep 21 19:01:02 2026 GMT
Not After : Sep 22 19:01:02 2026 GMT
Subject: CN=cebb18c841808d6d424ac84c339f303c5beeaaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:25:8f:3d:b7:65:7b:bb:04:59:4e:19:14:ec:
22:77:05:5a:2a:c2:5d:64:9b:74:58:e8:47:77:9c:
a1:35:d2:29:79:a1:25:1f:dc:7f:b2:7f:11:d5:26:
67:ff:71:ef:9d:63:b5:7e:f6:09:84:f4:c8:44:b7:
00:cd:89:0e:bd:68:85:8f:63:72:7a:18:cd:7f:70:
63:d7:d9:c1:01:54:3a:92:1c:c6:79:fd:26:66:0c:
84:e2:a9:b9:15:84:79:6c:c7:29:c7:25:28:fb:87:
2d:07:95:6a:bc:37:b1:e2:06:ef:6e:57:61:66:cb:
ea:01:06:46:b7:b6:3f:c6:7e:1c:2c:f9:47:f9:04:
14:8c:d0:5d:dd:01:75:53:de:80:a2:e9:8b:bc:68:
cf:77:6d:b2:cb:8e:f7:a1:45:30:cb:75:23:0c:d2:
5f:30:62:d2:6d:68:94:f1:ab:f5:21:9a:ca:88:76:
b8:d0:33:35:71:cf:8a:b7:59:98:69:47:d3:54:6b:
51:80:bc:7d:a5:22:50:32:58:65:be:45:12:c1:17:
11:07:63:db:2a:fc:91:ce:a7:cd:ca:f1:ea:a4:fc:
df:fd:b3:db:c6:bb:de:1b:ea:53:b1:fb:05:99:0e:
32:ce:c9:2f:92:67:0d:e6:b6:8c:6d:fb:8f:bc:85:
85:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BB:18:C8:41:80:8D:6D:42:4A:C8:4C:33:9F:30:3C:5B:EE:AA:EC
X509v3 Authority Key Identifier:
keyid:09:E9:5D:AF:16:39:C7:45:49:15:F9:4C:3E:7D:D7:DA:96:43:05:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeldrxY5x0VJFflMPn3X2pZDBYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/CeldrxY5x0VJFflMPn3X2pZDBYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/CeldrxY5x0VJFflMPn3X2pZDBYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:97:02:ee:a4:4e:32:b2:97:56:24:17:14:66:78:ca:dd:63:
33:cd:cd:9e:0b:73:20:69:5a:d9:1d:79:27:58:d2:f3:45:b1:
07:7e:bb:6f:68:01:74:a5:29:d2:30:ec:e7:60:6f:d8:a8:ff:
b8:1b:7a:84:f4:03:77:90:03:db:02:00:c1:d8:c1:65:e6:9e:
b9:ec:79:07:1b:45:26:d0:6a:40:6f:68:11:1a:aa:c1:b3:d6:
21:b3:f8:b4:7e:14:41:95:35:63:ed:26:d0:cc:d1:70:14:dd:
18:79:b9:e5:d2:80:f7:94:53:dc:8f:d6:3a:69:c7:e7:78:d1:
77:a6:46:1b:a3:06:e3:da:ca:a5:e2:85:4c:8c:38:3d:00:e8:
8a:2c:8b:a5:48:50:3e:b2:65:ee:10:03:9e:72:10:37:c8:38:
a1:9d:f6:03:31:08:51:da:24:aa:3f:c4:48:1f:c2:b9:e4:20:
fb:32:56:05:40:e6:ab:12:78:c5:2b:86:50:29:d3:9c:f0:e6:
61:ca:89:f9:9c:63:1b:f2:c5:2f:25:c4:b1:1d:40:c6:c6:ac:
b3:b2:f8:62:19:e4:ca:5c:8c:c6:cc:d6:e4:95:13:90:23:35:
19:cd:b0:d7:c8:31:a3:3c:a7:d7:66:25:9b:b9:81:1b:f0:fc:
f6:9a:40:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:02:23 2026 by rpki-client