Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: oVGWGc2NV8SfxNb7xt+4gbwD/d/e7OBxXxlRxuYc0mo=
Subject key identifier: A1:16:9D:1F:9E:D6:4D:C2:31:53:C0:45:D6:2D:B3:89:D6:77:90:9D
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 01A0C8C60C0445DD99A7DDE5336F62F87EAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 075B
Signing time: Tue 22 Sep 2026 11:00:17 +0000
Manifest this update: Tue 22 Sep 2026 11:00:17 +0000
Manifest next update: Wed 23 Sep 2026 11:00:17 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: mccYV3rm6f+hYqYSqxSTIe4QVJsygqrUhFbBtmvEqKg=)
2: Db42gVIOc-r6U0XdkPGEkaUQ_F8.roa (hash: +dorelrzD6UM9OjrHdBTn8xKkODdpeZOExmq1+y6uHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:c6:0c:04:45:dd:99:a7:dd:e5:33:6f:62:f8:7e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: Sep 22 11:00:17 2026 GMT
Not After : Sep 23 11:00:17 2026 GMT
Subject: CN=a1169d1f9ed64dc23153c045d62db389d677909d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f0:e7:10:1d:37:61:9c:a2:f2:1f:49:92:af:
43:8f:f7:ff:83:44:25:ab:75:f5:32:dd:dd:97:f3:
9c:27:4d:de:e2:ae:84:25:a4:de:8b:87:59:16:02:
18:54:fe:5e:0b:22:c8:9c:e6:10:2b:0f:37:66:aa:
4d:08:10:95:a5:4e:09:cd:74:1c:05:33:23:50:ca:
56:59:e7:82:27:bf:ca:35:5d:7a:47:a9:5c:a3:51:
14:b2:80:44:75:c7:66:ca:46:0f:fb:31:f9:0f:fb:
18:57:6c:f8:63:fb:08:27:bd:70:e7:9e:97:e8:39:
0e:54:3c:04:eb:25:c6:8c:bb:1b:49:0d:aa:bf:00:
26:c1:11:3e:d3:1b:da:56:56:10:74:61:72:a7:b0:
37:0a:04:47:e9:25:fc:9c:c5:54:53:d3:0b:79:00:
39:3a:41:13:66:23:b5:6c:85:2f:d4:ba:14:2f:9e:
1b:3a:5d:82:f9:54:b6:3b:c4:02:0a:6d:6d:a7:57:
50:96:c6:88:c3:3f:e8:76:ba:43:7e:2b:58:8f:e9:
83:c9:89:0c:a9:a9:78:de:ec:91:a2:92:96:57:1c:
7c:09:af:a5:83:05:aa:3d:4c:a8:bf:bb:40:ab:fb:
aa:90:6b:07:1c:7d:71:e2:9a:3a:5e:3e:de:98:1c:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:16:9D:1F:9E:D6:4D:C2:31:53:C0:45:D6:2D:B3:89:D6:77:90:9D
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:65:74:f2:91:6f:3e:a9:1e:e8:1c:13:21:8e:01:ee:43:d9:
b9:08:72:08:50:75:ec:1e:35:1e:ae:aa:46:8e:07:a4:85:22:
26:63:03:35:d5:23:7d:e6:12:33:ec:64:d0:06:b8:89:22:c0:
34:d2:a3:82:73:4e:a4:93:c4:ce:16:4c:70:de:99:db:4d:e1:
66:e3:6d:38:9a:61:2c:0d:4d:da:27:3a:af:c8:fd:ad:ee:e5:
8d:06:4a:74:48:ac:fa:03:92:50:bd:12:25:f6:69:2e:ac:7a:
b5:a9:54:05:68:bc:eb:ba:70:ac:3c:61:af:10:ca:e2:17:dd:
27:c7:cc:c3:08:f6:fa:2f:88:2e:ca:31:92:8e:3d:78:d6:a2:
36:7a:87:85:d7:54:2b:ad:18:9e:b7:e4:2e:8a:80:ff:50:93:
eb:17:cc:69:9b:73:80:35:ed:3b:36:dc:22:1e:c6:3b:55:7b:
9a:dc:87:a3:4d:b7:3d:54:93:c6:f8:83:79:98:2b:be:a2:f8:
52:df:e5:58:93:23:e6:2a:34:a0:5f:55:63:49:d8:89:c5:b7:
83:d5:17:27:a5:d0:49:d7:e6:3f:fc:a6:00:c8:bf:1e:9b:95:
d9:1e:e2:22:c0:34:a0:f7:0a:01:5d:91:5a:68:fc:46:9d:cb:
74:4a:fc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:16:43 2026 by rpki-client