Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: pd99oKueT51u19YVZ+DA55pqD+dwMWOCwNux0wDyql4=
Subject key identifier: 70:E0:6C:20:EE:36:C7:24:22:38:4E:74:71:AB:D8:29:54:97:42:53
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 019FA82B5CD60FAE8FE1631AA848E4695953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 13CB
Signing time: Tue 28 Jul 2026 10:00:41 +0000
Manifest this update: Tue 28 Jul 2026 10:00:41 +0000
Manifest next update: Wed 29 Jul 2026 10:00:41 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: h+rwvW9Zk2Glo8VBWrry4E+x/CxHvAvVnxEhkRQFFC8=)
2: PiR6PkVQRFqEfm9lMFMx7R_IaDM.roa (hash: 2obqgsdNVnsgyNIGbMXRSD+tRQgkX3zupnny+MExpEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:5c:d6:0f:ae:8f:e1:63:1a:a8:48:e4:69:59:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Jul 28 10:00:41 2026 GMT
Not After : Jul 29 10:00:41 2026 GMT
Subject: CN=70e06c20ee36c72422384e7471abd82954974253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:60:45:c0:5e:d8:a7:e7:f5:bd:08:31:59:
76:18:31:1b:fc:38:af:38:b9:e6:a8:ec:59:c8:44:
59:24:c3:0b:c4:de:9b:46:82:c5:db:0c:a4:15:03:
d9:7c:91:d1:91:84:97:da:97:25:2a:df:67:f4:8d:
65:76:37:34:9e:2d:e6:a1:58:78:45:8b:29:4f:eb:
e5:d0:43:f6:3a:4b:8e:88:bb:20:ed:b3:f9:f7:aa:
0d:02:d0:be:1c:ba:35:28:4e:79:e4:7a:d1:5a:27:
57:d1:4b:c8:33:07:9b:e4:ff:2d:69:7d:64:7b:20:
20:d8:c7:94:65:81:4d:72:da:f5:78:9f:ea:3e:5e:
be:93:dc:b2:af:d1:81:74:82:ab:f2:95:1a:45:2a:
79:14:e1:d7:a8:1c:4c:a8:ad:1f:7e:51:0a:92:f4:
d2:7c:e1:7f:33:2b:97:bd:47:3a:82:05:9e:9a:16:
29:86:8c:06:81:04:df:39:e3:6d:22:66:5c:bb:fe:
2b:dc:24:5d:e2:21:c9:0d:33:58:8e:48:5b:d0:3d:
14:c9:60:f4:5b:88:f7:7b:12:2c:9d:e0:eb:4f:3c:
59:32:a3:ea:6c:3a:60:c7:63:1a:38:e4:20:b3:7b:
ef:0f:73:1c:ab:cc:ab:d9:62:9c:09:53:1b:7d:44:
13:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E0:6C:20:EE:36:C7:24:22:38:4E:74:71:AB:D8:29:54:97:42:53
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:25:ba:e9:60:58:3b:2e:9a:66:91:c5:7d:15:10:27:c4:5c:
cc:7f:ae:5a:3b:d8:b1:c8:db:e9:13:74:c3:d2:56:d3:6c:2e:
a3:b0:d1:36:63:ec:6e:aa:28:76:3a:81:d3:fe:26:dc:d6:f9:
cf:83:7a:e6:da:60:0c:ad:75:eb:c9:b1:0d:cb:99:dc:ed:a6:
74:e5:e0:40:f7:7e:fd:b8:ff:46:1d:9c:94:f7:da:a4:3e:b8:
05:66:21:77:30:78:a7:82:a3:82:ef:a1:f1:2b:88:bc:79:bb:
28:79:cc:12:1c:61:af:d2:a2:e3:a9:10:f4:3d:f9:bd:b9:7d:
75:f4:b8:3f:7e:fa:e3:c5:55:47:43:c9:09:c3:bb:21:5d:45:
cc:27:80:4b:eb:81:e1:ed:a5:b1:ea:22:de:34:29:62:a5:c6:
eb:01:bb:12:ac:a4:cb:88:5a:c7:c9:a4:20:2f:ee:a9:19:cd:
4c:9e:4d:35:a4:34:60:d2:6c:40:b5:9e:6f:f3:6f:34:8a:f9:
11:0c:ab:fe:1e:30:e8:4f:ae:b1:dd:f5:8d:39:c0:86:b2:3c:
85:50:88:c5:6c:97:6b:f1:17:c8:94:3a:68:8f:a7:09:63:f3:
39:f8:0d:e1:1d:bc:7e:f2:ae:3f:b9:6f:c7:e1:1f:2f:00:51:
2a:8e:c4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:09 2026 by rpki-client