Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
File: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft (raw, json)
Hash identifier: rvo6fjRSlQUEwbY9eUWBGmH/ITYEMpIGIceWxsd1Z+Q=
Subject key identifier: BF:D8:88:7F:9C:6E:1A:9F:1B:92:AB:05:89:0C:15:8D:9F:E2:8F:65
Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
Certificate issuer: /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Certificate serial: 019D992B531D4A6F12447D71EE8F631EBAE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
Manifest number: 1539
Signing time: Fri 17 Apr 2026 02:00:46 +0000
Manifest this update: Fri 17 Apr 2026 02:00:46 +0000
Manifest next update: Sat 18 Apr 2026 02:00:46 +0000
Files and hashes: 1: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl (hash: 9RcmZzqvLOkOzYNFI8X3lfULBwv4Gfv/SBDBZH/gnmM=)
2: _LogJ5TTm-YKHsd3WnMm0NAuJ3w.roa (hash: O4S4fljr93AbzCU3et6i3bfKYTRHViAV0Kj/p7btiD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:53:1d:4a:6f:12:44:7d:71:ee:8f:63:1e:ba:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Validity
Not Before: Apr 17 02:00:46 2026 GMT
Not After : Apr 18 02:00:46 2026 GMT
Subject: CN=bfd8887f9c6e1a9f1b92ab05890c158d9fe28f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0c:08:cb:4d:be:6d:15:e2:bb:9d:73:6e:dd:
15:e3:1c:2e:d4:0b:14:b0:a1:34:45:e0:24:4e:5a:
5c:b7:a7:ac:a7:e7:3f:7a:02:e6:2a:2f:b1:06:c0:
d6:bb:1d:13:c5:e8:2c:1f:81:9f:00:fe:82:63:fd:
db:4f:22:d5:eb:33:fe:80:3e:dd:71:bf:fc:4b:32:
71:92:1f:fc:b5:8d:0c:79:ce:4b:0e:74:36:a4:1a:
5a:fe:b9:37:86:24:60:d7:eb:87:b6:96:ec:a4:86:
78:05:33:93:f5:78:18:41:1b:2d:ff:53:f5:f3:aa:
65:50:a7:74:bc:89:ac:2f:86:99:4d:88:d0:12:e1:
cb:ca:03:30:51:50:9f:66:89:00:65:ee:a7:67:a1:
0a:d7:97:78:c9:bb:73:09:51:09:70:56:5d:36:89:
32:63:39:cd:29:5a:64:bf:a7:e5:6a:0b:2c:11:a7:
5b:9f:fb:9e:a6:46:d8:27:cd:9a:7f:6f:ec:41:79:
fe:df:a8:5b:15:78:e4:28:2e:3e:ef:2c:57:d6:89:
d4:77:63:da:02:7b:73:85:8a:29:52:7a:9c:70:19:
c7:ac:a1:99:f1:b5:c5:c6:35:a3:6e:35:47:0e:26:
ac:12:77:12:01:bb:1c:57:61:b7:60:ee:60:25:4b:
f4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D8:88:7F:9C:6E:1A:9F:1B:92:AB:05:89:0C:15:8D:9F:E2:8F:65
X509v3 Authority Key Identifier:
keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:45:9b:ab:2a:ac:5b:64:8e:2e:d4:f6:2f:36:35:b3:48:46:
73:fb:fa:a9:86:42:c8:ff:86:a3:8d:65:38:9a:23:19:26:57:
3b:a3:86:41:2a:bb:0c:9a:7c:08:f9:cf:06:4c:f7:29:f2:96:
db:1d:9a:0c:02:22:70:ba:44:fa:23:58:c0:39:49:fb:50:cb:
5b:3e:f0:e0:68:b6:5c:86:4d:2a:61:20:ee:6c:e5:d3:75:0a:
8f:ae:11:51:c0:00:88:e3:e2:d2:07:af:93:52:dd:9a:1b:d2:
1c:c7:9e:25:28:9b:56:09:3c:8c:fe:9d:46:0a:62:c3:fa:1b:
1d:ac:7b:ef:26:c8:23:40:cc:03:37:64:46:c4:28:55:10:35:
ca:36:96:f7:c6:5d:72:52:85:f8:b5:cf:87:54:b2:be:5f:ef:
36:9b:da:30:ee:a9:d8:61:77:27:36:3a:b9:73:99:36:60:df:
61:9e:7b:5f:32:c1:16:1b:e2:5c:59:1f:c1:af:1d:27:cb:eb:
34:19:58:c0:6c:25:81:56:a5:d6:b0:0d:93:ac:8d:70:a8:9e:
10:0a:91:79:d9:00:1e:c3:40:91:c0:b6:49:b5:13:c6:28:04:
c0:30:35:58:c9:29:09:a1:ed:80:ab:a2:7b:bb:c2:ea:42:6b:
40:d4:80:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:38:13 2026 by rpki-client