Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: LLglVio4RmoJUqwfW+tcXetB4RuMIEgznk2iHSNNUAk=
Subject key identifier: F8:10:C9:61:A6:45:5C:2A:97:54:46:17:E8:9C:23:6E:04:45:19:BB
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 01A1C10A72362F8DA1681D5F6582131615AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 14E3
Signing time: Mon 09 Nov 2026 16:00:49 +0000
Manifest this update: Mon 09 Nov 2026 16:00:49 +0000
Manifest next update: Tue 10 Nov 2026 16:00:49 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: ZR+Gy13lvvpofKMKojtVWTUHVn6TLo/Ve9VFG8GhHb4=)
2: kYXxc9kN_b_GIXTl_UJBrpB9O60.roa (hash: Vox/MzBDeHhsPb0IJMly5kcnp/IEEHRUT1ACAP0+pe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:0a:72:36:2f:8d:a1:68:1d:5f:65:82:13:16:15:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Nov 9 16:00:49 2026 GMT
Not After : Nov 10 16:00:49 2026 GMT
Subject: CN=f810c961a6455c2a97544617e89c236e044519bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:97:73:04:1c:35:ca:96:42:64:53:28:b9:45:
d7:1c:51:2c:57:49:a3:bd:c2:d0:9e:9b:36:01:53:
4a:8c:53:6c:18:aa:8a:83:a7:8f:30:7e:dc:f2:99:
5e:73:21:49:51:96:9b:86:80:ad:ae:b3:ed:0d:1e:
a5:86:36:6f:99:2a:f0:5b:3c:76:60:d5:e5:4e:45:
d6:32:f8:8b:63:92:1b:76:9a:9e:a1:62:ca:df:5f:
9f:b9:39:47:33:c8:1d:f5:1d:5c:07:c1:d2:e5:37:
e4:b6:d6:c5:25:b0:e4:fe:32:0f:bb:8f:c1:65:e5:
2b:07:ee:fb:7b:e5:5e:9a:ef:0b:d1:30:f4:28:7f:
20:e3:74:cd:42:10:26:e1:fa:90:ed:ba:1c:bb:43:
bb:0d:4f:be:0e:b5:6b:1c:6a:ba:93:ba:d7:df:41:
71:35:65:6b:ca:d6:ef:cc:5a:29:58:40:2b:b4:b8:
85:c3:41:02:37:94:5f:c1:ea:43:ce:22:cd:d3:e5:
34:c4:9b:6b:ae:81:3f:39:2b:8f:b6:70:0c:3a:70:
1c:db:d5:43:da:30:d9:1a:1a:4b:fb:ae:61:66:24:
4d:a4:69:40:eb:64:37:ae:5a:d4:40:fa:48:53:16:
a2:b1:84:3a:5e:5a:e9:67:57:57:97:35:96:9e:1d:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:10:C9:61:A6:45:5C:2A:97:54:46:17:E8:9C:23:6E:04:45:19:BB
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:91:f9:95:93:46:9b:1b:e8:af:ca:3d:b1:ae:7f:ea:b6:59:
fb:04:ee:af:a7:db:5c:73:f0:ae:48:e9:a6:ec:b5:db:12:86:
23:73:4d:c1:3d:36:d9:c1:b8:80:4a:38:db:61:64:bf:b0:0b:
c9:94:f5:21:03:ee:a8:1f:d3:bd:38:13:c7:88:ef:3a:1a:cf:
6c:60:a0:c6:55:85:6e:32:07:9b:e4:66:db:48:93:e4:c0:c6:
5c:b4:eb:78:ef:32:22:60:d6:97:93:bd:68:e6:b1:01:29:42:
03:a3:88:a3:07:02:ab:74:07:56:fd:16:5e:bb:74:3b:e3:0a:
6e:f9:7f:e1:0e:7e:fb:0b:15:51:ba:25:e2:83:39:85:c2:6b:
32:82:07:ff:d2:4b:1e:a7:b6:19:aa:5a:fe:97:c1:70:2d:73:
12:fc:87:82:f8:ea:37:ca:dc:5f:3e:cd:9b:94:fb:5f:23:34:
c4:40:08:96:51:d1:ea:1f:72:7a:2a:00:c4:38:76:78:08:12:
ce:65:ba:c7:9f:4f:94:54:41:2c:82:cf:75:a5:28:5c:41:48:
1a:73:f5:01:1e:1c:e8:d0:b6:45:f3:e8:a7:9a:ec:60:5d:d7:
53:fd:d1:c3:a8:bb:2a:b3:0a:ce:57:78:d0:46:dc:a5:2d:77:
16:a2:1b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 20:09:47 2026 by rpki-client