Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: G8w/RV+y+AW8ZhgetAKUFY6SIu5PVblwIF1oO/PWAEw=
Subject key identifier: CE:71:85:5B:36:34:82:F9:DE:4F:4D:9C:7C:D6:FD:ED:82:DF:67:B5
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 019CABA215B118157A8B1E0C48BC5320B360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 123F
Signing time: Sun 01 Mar 2026 23:00:52 +0000
Manifest this update: Sun 01 Mar 2026 23:00:52 +0000
Manifest next update: Mon 02 Mar 2026 23:00:52 +0000
Files and hashes: 1: 1TUQTU00MEl499XUdrSRL1I8LFk.roa (hash: LR0SWWMB8Awe+6NzalLAwpz6bv1tNIh3m2MbySdjLTs=)
2: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: bgcMR/AzTXv6Vmov0i97/JaKifJ7EOMqHV1LwcOsFyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:15:b1:18:15:7a:8b:1e:0c:48:bc:53:20:b3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Mar 1 23:00:52 2026 GMT
Not After : Mar 2 23:00:52 2026 GMT
Subject: CN=ce71855b363482f9de4f4d9c7cd6fded82df67b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:61:70:36:25:68:47:ae:14:68:e9:e7:0d:14:
90:8c:aa:a9:4f:4d:5d:73:16:c2:e1:da:bb:47:94:
07:5a:92:4a:12:32:02:60:d9:4a:73:bb:66:5a:8d:
4c:98:e3:13:be:ed:9b:71:f3:b5:94:04:ce:d9:51:
6c:62:b8:93:0c:ea:de:08:78:e7:dd:44:f1:f9:40:
e8:ce:74:26:bb:4b:d0:69:ee:cb:d3:05:5e:28:ad:
0e:c0:13:74:c1:97:dd:05:4d:71:d3:f4:6f:9d:fc:
4a:56:12:04:fb:87:26:c7:89:ae:63:d8:f0:ce:0c:
a2:74:f3:15:2c:5f:c7:e6:01:3d:89:89:3e:c9:32:
79:4b:13:be:db:67:9d:b7:8b:64:94:70:2b:84:21:
b7:31:31:96:a7:42:1a:4c:fa:71:09:cb:96:9c:e5:
d3:64:c1:9e:d5:94:29:e0:96:93:20:39:c9:37:5b:
55:4f:c8:36:2d:ee:4a:9d:33:1f:cf:b4:98:bb:a7:
9c:3d:9e:c1:0b:26:b9:f3:04:ba:33:60:87:2a:50:
f2:a3:ce:75:30:99:8d:f0:2a:23:36:a8:cc:58:7b:
34:fc:5f:c3:fb:9f:2f:4b:60:51:c3:70:8e:6a:e7:
74:0a:e1:ea:91:d5:3d:ed:b9:a2:bd:16:b6:fc:f0:
6d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:71:85:5B:36:34:82:F9:DE:4F:4D:9C:7C:D6:FD:ED:82:DF:67:B5
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:44:e4:3c:d5:d9:0f:67:e1:86:cb:00:53:ba:fd:35:ba:15:
da:f5:eb:df:a5:c8:de:e8:1d:de:cd:1c:ea:97:3a:7a:98:5a:
58:dd:a6:5b:c6:89:44:66:3f:9d:38:51:8e:31:3d:9f:94:4b:
f9:91:8b:6e:1a:42:55:e7:0e:5f:c6:10:55:f8:9f:6a:94:0d:
c0:46:ea:8e:27:40:89:9f:a9:03:f6:6c:c3:b1:03:f1:6a:79:
7d:62:ff:f7:7a:7d:59:90:a3:c7:33:bf:34:17:8e:50:24:3d:
a4:af:eb:3e:a9:c9:e6:ce:dc:73:97:e9:51:51:18:22:cd:84:
24:bc:89:af:33:a3:aa:bb:ee:2f:3d:f7:15:58:66:e8:0b:09:
1a:da:9a:4f:49:29:bc:55:a4:13:63:74:28:cf:90:47:b3:4d:
3b:dd:f6:85:4a:cf:d0:3b:e2:01:74:4c:72:ea:4a:7a:0a:8d:
e4:d1:2b:10:d3:22:b3:2c:9c:dd:64:10:30:4d:b4:22:18:87:
6a:84:4f:10:b6:14:19:01:5c:a7:de:9f:75:d8:97:1a:55:34:
6d:b5:45:0a:26:19:49:44:92:6b:b2:81:54:55:90:a7:57:cd:
27:4f:0c:cd:8e:cc:13:a9:16:db:b6:a8:b0:8c:8e:f2:db:9c:
79:e2:29:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:28:28 2026 by rpki-client