Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: NoSqgLwWJU1W+m9zJAqLHkrL19Oi872C0q/0ekjJ3BE=
Subject key identifier: 1A:18:0D:A7:04:87:1B:31:5E:7B:2A:20:77:10:88:03:64:6A:C1:F5
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 01A0C40D7AD7BA4A85C7D2FF141A6C0DF340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 145E
Signing time: Mon 21 Sep 2026 13:00:12 +0000
Manifest this update: Mon 21 Sep 2026 13:00:12 +0000
Manifest next update: Tue 22 Sep 2026 13:00:12 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: FzxejRgWedzcGAg8K1Yr/4I7bT/DWrnRYxwK/c8Iotc=)
2: PiR6PkVQRFqEfm9lMFMx7R_IaDM.roa (hash: 2obqgsdNVnsgyNIGbMXRSD+tRQgkX3zupnny+MExpEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:7a:d7:ba:4a:85:c7:d2:ff:14:1a:6c:0d:f3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Sep 21 13:00:12 2026 GMT
Not After : Sep 22 13:00:12 2026 GMT
Subject: CN=1a180da704871b315e7b2a2077108803646ac1f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:44:c7:11:a2:c9:5a:cf:ab:f6:96:82:bb:
d1:d8:ce:08:ce:c5:d1:0a:ba:12:fc:f3:cc:eb:bc:
ed:8d:f4:49:d1:43:d1:55:3f:c9:7b:6c:7f:f5:0a:
57:e4:a8:b3:9f:51:86:be:b0:56:3e:1d:b8:a5:df:
fc:f6:8e:e7:3e:3b:a5:e2:0f:dd:00:3e:c7:3d:d3:
8c:a2:1f:9f:f7:cc:a1:4c:71:eb:41:a8:89:12:67:
b5:e0:8e:f2:30:9b:3f:da:80:9c:d3:c3:81:d2:c5:
71:6b:85:29:22:8b:d3:7f:3a:34:77:67:cd:9d:7e:
db:57:e8:af:a9:6b:55:fa:5a:fc:0f:46:2a:08:6f:
82:8f:de:26:72:3d:27:c0:57:3d:7b:39:6b:f0:b7:
73:fb:2e:c0:07:74:9c:7b:15:41:cc:de:b6:dc:9e:
6f:a5:2d:46:d4:e3:61:6c:e7:8b:ea:1e:e4:4e:c4:
7b:94:06:82:cb:5d:a1:8b:bb:96:07:d2:a8:25:91:
27:60:2e:c1:a3:de:20:79:08:45:61:94:d6:cd:92:
0a:70:58:9b:b1:91:2c:3d:b6:9c:24:e0:d0:ea:a9:
2a:90:ee:1f:f1:d7:cb:7b:29:79:22:04:a7:8f:ed:
fb:f7:ee:64:6c:d3:09:ed:f1:eb:74:94:4c:cb:4e:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:18:0D:A7:04:87:1B:31:5E:7B:2A:20:77:10:88:03:64:6A:C1:F5
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b7:55:4e:62:ae:e0:56:60:44:86:32:a8:85:67:07:1b:7e:
67:2c:35:00:9f:36:f4:ea:70:b5:9c:fa:af:51:77:06:2a:86:
c3:9b:c7:78:73:89:b6:8f:f4:5f:21:d7:24:54:ff:24:27:ee:
e0:f1:e1:2c:e8:58:74:27:f7:1a:ef:4d:35:80:8d:a2:b5:8b:
95:fd:2a:43:dc:2d:d9:73:34:23:00:4a:cf:73:78:03:b9:21:
46:de:c2:b9:fd:6b:a9:42:66:8e:e5:1a:12:2d:ee:cc:3b:47:
1d:70:db:b9:7e:59:91:83:3d:9a:8f:22:bc:07:43:08:bb:2d:
9f:e5:c2:fd:33:7b:3f:38:cf:83:2c:da:f4:9b:43:56:a1:61:
42:ce:38:f0:99:76:e4:cd:c5:12:af:db:f6:21:a4:c8:43:b0:
af:d0:1c:0d:af:d1:31:12:33:86:e0:1e:10:8c:fe:ad:e2:3d:
e8:86:fb:9b:c9:86:09:0c:a6:94:58:0a:d2:97:7f:38:ce:74:
70:69:33:45:d5:36:9a:fa:a0:f9:6a:de:65:14:73:4a:3a:3f:
aa:87:bd:55:57:09:e2:28:33:8d:be:47:ce:ee:d5:6b:24:d2:
69:cb:82:18:81:1e:ea:c9:b2:99:9a:63:27:21:db:f8:2a:20:
51:9b:2d:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDXrXukqFx9L/FBpsDfNAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTU1MThlNjg0NjdiNDI5MGMzNTA5MjY4YjZkNmQ2NjQ5
NjJjODYwHhcNMjYwOTIxMTMwMDEyWhcNMjYwOTIyMTMwMDEyWjAzMTEwLwYDVQQD
EygxYTE4MGRhNzA0ODcxYjMxNWU3YjJhMjA3NzEwODgwMzY0NmFjMWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKpExxGiyVrPq/aWgrvR2M4IzsXR
CroS/PPM67ztjfRJ0UPRVT/Je2x/9QpX5Kizn1GGvrBWPh24pd/89o7nPjul4g/d
AD7HPdOMoh+f98yhTHHrQaiJEme14I7yMJs/2oCc08OB0sVxa4UpIovTfzo0d2fN
nX7bV+ivqWtV+lr8D0YqCG+Cj94mcj0nwFc9ezlr8Ldz+y7AB3ScexVBzN623J5v
pS1G1ONhbOeL6h7kTsR7lAaCy12hi7uWB9KoJZEnYC7Bo94geQhFYZTWzZIKcFib
sZEsPbacJODQ6qkqkO4f8dfLeyl5IgSnj+379+5kbNMJ7fHrdJRMy06OXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoYDacEhxsxXnsqIHcQiANkasH1MB8GA1UdIwQY
MBaAFAnlUY5oRntCkMNQkmi21tZkliyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUt
ZTc0NTk0ODk4M2VkLzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUtZTc0NTk0ODk4M2Vk
LzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLdVTmKu
4FZgRIYyqIVnBxt+Zyw1AJ829OpwtZz6r1F3BiqGw5vHeHOJto/0XyHXJFT/JCfu
4PHhLOhYdCf3Gu9NNYCNorWLlf0qQ9wt2XM0IwBKz3N4A7khRt7Cuf1rqUJmjuUa
Ei3uzDtHHXDbuX5ZkYM9mo8ivAdDCLstn+XC/TN7PzjPgyza9JtDVqFhQs448Jl2
5M3FEq/b9iGkyEOwr9AcDa/RMRIzhuAeEIz+reI96Ib7m8mGCQymlFgK0pd/OM50
cGkzRdU2mvqg+WreZRRzSjo/qoe9VVcJ4igzjb5Hzu7VayTSacuCGIEe6smymZpj
JyHb+CogUZstLQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:09:41 2026 by rpki-client