Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
File: CeKvCM9uEuIwT7O97GTPvO2qhSI.mft (raw, json)
Hash identifier: +ALaG4V55GB6edMcN9eFEUS4BUNukr+EkDbfbuWQJ54=
Subject key identifier: 50:E7:0C:0E:93:3C:4C:0E:85:9D:2D:C1:66:67:AA:DD:93:4A:E5:D3
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 019CABD9D19F0A0AF1C3273AB28C1B4BE54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
Manifest number: 12BC
Signing time: Mon 02 Mar 2026 00:01:44 +0000
Manifest this update: Mon 02 Mar 2026 00:01:44 +0000
Manifest next update: Tue 03 Mar 2026 00:01:44 +0000
Files and hashes: 1: 44Stl3msveF1YCvCfN2G3HepMdM.roa (hash: iIzD2FPw/U9HcxD97jOSbgMNqhLuJ3ohKRTz9ioUa1s=)
2: CeKvCM9uEuIwT7O97GTPvO2qhSI.crl (hash: VS/Tr87GAY9vYq91+pf3RFHVQ9yTdx8HZVyvvCnP2to=)
3: oOxUVzAK0hDvaSyyxd4ItdCNzlk.roa (hash: z2hGxtDc3xsCMxUAYZ0wzFuiPIpWeNKitXxT4Qhak2E=)
4: qWMcoazuJWd0mzovPbjclSWnCpk.roa (hash: nWdd8YlV26SHwkLvSuGYiscACa3svh/Yxd8Z+LoR89Q=)
5: r2dMo2_D-Dbh-yqi6VAZ1meJk-s.roa (hash: ICU0J+ujal+UqVKVSbOsudUv0G3UkLSD3WQWpN8VVhQ=)
6: tjYT-uHNpnFgFGTdE6itSftZVqY.roa (hash: KHqysYVsduT2z29K9pGLDzRY8wOYildZ8N84ngXiOeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:d1:9f:0a:0a:f1:c3:27:3a:b2:8c:1b:4b:e5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Mar 2 00:01:44 2026 GMT
Not After : Mar 3 00:01:44 2026 GMT
Subject: CN=50e70c0e933c4c0e859d2dc16667aadd934ae5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a0:eb:df:f6:0b:00:e5:a0:76:c5:6d:e9:24:
52:9e:a7:b5:da:ad:a2:60:a3:b6:a2:7c:01:80:6d:
b8:18:1c:67:b4:4a:39:fe:64:ad:bc:2b:83:cb:96:
ff:3a:5f:ae:35:19:dd:e2:db:63:b1:59:28:5f:46:
a0:09:ea:17:b3:0a:94:9f:68:e5:50:6e:8d:a0:2d:
2a:8e:a5:9d:70:ea:64:5f:4f:4a:27:b2:18:38:a5:
31:48:70:c6:f2:c0:e5:6b:6f:b1:c1:1d:12:c5:2f:
12:f1:fb:32:17:11:05:bc:34:0b:b2:6f:c1:65:52:
66:8b:d6:e9:e9:f6:d2:2e:16:42:79:43:f7:ae:f6:
22:73:04:33:e2:a0:9b:98:d2:8a:22:6f:82:58:e7:
e8:66:fd:78:e0:bd:8a:48:cc:b7:9b:8b:3d:ec:e0:
e3:23:cf:6c:8f:79:b4:34:91:fc:21:78:c2:7c:b2:
0e:62:5a:45:b5:38:5b:1a:d2:4a:5e:09:f1:55:f8:
bb:f8:c1:f2:e0:0d:b9:54:30:9e:89:45:98:3b:dd:
4f:ab:c0:30:76:ae:99:27:56:f2:67:8e:d4:ff:31:
44:f5:ae:03:19:22:17:5e:e7:51:53:bb:97:04:7a:
e1:8c:7b:aa:79:22:74:ab:3a:3c:5f:d3:b3:3d:80:
eb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E7:0C:0E:93:3C:4C:0E:85:9D:2D:C1:66:67:AA:DD:93:4A:E5:D3
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:20:e8:4b:7a:44:3a:0f:d0:44:9e:5f:84:42:ab:b2:e1:84:
cf:da:fc:5a:b4:fe:1e:d9:d3:b9:fc:58:ac:47:f7:77:01:46:
40:02:c7:9d:86:fb:ee:8d:17:19:1c:76:9c:25:36:b4:c8:65:
3a:94:d1:81:d3:a3:a5:25:62:f6:09:55:83:6d:60:ac:47:4f:
73:c7:2e:63:a5:fa:89:ef:c2:ac:bf:29:1a:83:d6:c8:b1:9f:
99:0e:8c:e5:c9:65:64:ba:ab:a0:12:2c:ae:eb:ca:f0:4a:cc:
23:4a:6a:cf:49:bb:a1:00:e8:28:fc:80:81:dd:51:7f:1c:b6:
0a:66:57:63:4b:15:0a:57:2e:e1:1e:69:c0:7f:e9:d3:29:86:
8e:78:db:7b:b1:d6:ac:d6:80:05:60:97:13:cf:38:92:8c:74:
23:5b:ff:fd:3b:00:c5:ee:6d:c0:8d:4b:c1:5c:29:cf:04:d1:
94:2a:b5:a1:67:16:de:41:9b:71:95:78:eb:00:c9:60:e8:23:
e9:8d:b3:0f:9d:21:03:ac:c1:2e:bd:ac:4a:06:7b:cc:14:2e:
fb:2b:5c:51:f6:82:dc:5f:88:cf:8a:cb:72:c6:ef:70:7a:48:
1d:f6:97:9a:fd:6c:a5:fe:df:40:73:3f:71:6c:80:d6:c5:7d:
5c:89:e9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:48:31 2026 by rpki-client