Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: obJxjBl2YpgjN+S9iV+M5ZOLoO4YltX5ljD3wjAI9Ms=
Subject key identifier: FF:99:4C:BB:47:55:1E:1D:59:50:AC:BC:AE:16:D3:86:9D:4E:FE:49
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 019D97E19520F2CDA37949A69440B8A95727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 05B4
Signing time: Thu 16 Apr 2026 20:00:36 +0000
Manifest this update: Thu 16 Apr 2026 20:00:36 +0000
Manifest next update: Fri 17 Apr 2026 20:00:36 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: DZyUVYbz5smgrW01g5JwmpZ3eI0e1r0Jn26V160rRes=)
2: Db42gVIOc-r6U0XdkPGEkaUQ_F8.roa (hash: +dorelrzD6UM9OjrHdBTn8xKkODdpeZOExmq1+y6uHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:95:20:f2:cd:a3:79:49:a6:94:40:b8:a9:57:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: Apr 16 20:00:36 2026 GMT
Not After : Apr 17 20:00:36 2026 GMT
Subject: CN=ff994cbb47551e1d5950acbcae16d3869d4efe49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:45:a3:b4:b0:c8:de:f1:a0:7b:62:ee:10:d6:
cb:20:c9:0e:7d:75:85:84:d7:7c:84:95:8a:a5:5f:
4b:a7:b7:37:93:7d:4f:c1:46:a1:53:0f:22:e1:71:
19:46:e2:ec:b7:b5:d9:d8:4b:ad:07:8e:0a:12:10:
75:b2:b4:a6:49:d5:80:52:6a:ae:0f:85:75:f1:a8:
f5:95:f5:a8:fe:d2:15:14:e2:b2:6e:26:a7:45:7d:
ac:7d:ad:f8:be:89:be:8d:37:3d:20:46:6e:82:83:
2f:f6:9c:88:d9:b5:03:9d:86:c7:5a:f1:f5:b9:76:
b5:94:0e:6d:ec:5a:f7:8f:8a:c1:b1:06:3a:a6:c3:
dd:a3:0e:74:38:31:b7:f6:e4:c1:dd:0a:d1:3b:dc:
7d:ea:d4:6b:a2:d9:98:1c:3f:5c:9e:fe:5e:50:fa:
04:f8:5d:73:67:72:41:d3:1a:65:d4:f5:ed:35:8e:
1f:db:c3:4f:c5:4d:0f:7d:2a:ba:e5:3e:dd:87:3b:
ce:e7:1c:43:ee:44:98:a2:31:96:a0:ac:a2:3f:a0:
02:4a:f5:a4:39:36:55:5b:70:7c:2f:13:96:a0:15:
7c:ab:53:7b:76:fb:87:f5:25:02:a9:27:eb:6e:ea:
19:3f:d4:84:0a:6b:84:66:a1:f8:92:b9:d0:5f:f4:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:99:4C:BB:47:55:1E:1D:59:50:AC:BC:AE:16:D3:86:9D:4E:FE:49
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:32:54:33:90:e1:34:22:a2:2e:44:da:02:5b:c6:0e:f5:11:
cf:d7:9b:73:5d:10:b4:d5:fb:ce:13:c5:13:71:73:ce:fd:a6:
23:f2:34:c8:67:88:0b:e8:56:05:da:a6:64:3f:7d:03:3d:33:
57:37:73:34:36:46:cd:f1:f1:87:52:fd:4c:4b:8f:ad:e9:89:
c8:04:59:1f:51:3c:33:82:76:db:b6:4d:77:9e:bd:15:c7:c7:
92:bb:dd:76:5a:7d:b6:70:4b:0a:a5:26:61:0e:e0:19:9c:73:
47:68:01:e1:47:1d:cd:2f:08:9b:50:00:8d:8d:4e:fe:0c:91:
4e:7d:cd:73:7b:42:16:79:5c:17:f7:c4:ff:56:d1:04:8c:b9:
ab:a9:60:23:a1:eb:6b:2b:c8:96:c4:54:00:f0:09:99:15:ed:
d4:86:7a:f6:a3:7a:5f:96:53:ea:f8:7b:ce:31:3f:2a:4f:39:
45:17:dc:1a:0b:3d:14:8e:9b:5b:89:02:3e:5d:fc:64:66:73:
c2:d0:b1:73:05:c5:58:64:5a:a4:b4:b4:84:ce:2e:ad:8b:f3:
de:94:ae:d2:8c:d6:3a:8a:17:41:85:8d:8f:5e:4c:86:cb:2e:
75:6e:2d:f3:e8:83:79:2e:88:00:31:cb:2f:91:52:90:a5:9a:
b3:7a:7d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:04:51 2026 by rpki-client