Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: Fy/yHeEPg9hUdybB4fmhiIh5dkZrQMDcfRSe3b+7tlg=
Subject key identifier: FC:BF:08:5C:78:75:E3:53:A0:7B:F0:27:78:FD:25:3C:71:D8:05:95
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 019DA2D38F3869A3911E27EE4785B1BAF6E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 12BF
Signing time: Sat 18 Apr 2026 23:01:06 +0000
Manifest this update: Sat 18 Apr 2026 23:01:06 +0000
Manifest next update: Sun 19 Apr 2026 23:01:06 +0000
Files and hashes: 1: 1TUQTU00MEl499XUdrSRL1I8LFk.roa (hash: LR0SWWMB8Awe+6NzalLAwpz6bv1tNIh3m2MbySdjLTs=)
2: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: AVkXbajISsI8VEulucz7hLHaN/ZwMXSjcGBpJo2dHVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:8f:38:69:a3:91:1e:27:ee:47:85:b1:ba:f6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Apr 18 23:01:06 2026 GMT
Not After : Apr 19 23:01:06 2026 GMT
Subject: CN=fcbf085c7875e353a07bf02778fd253c71d80595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:89:b3:ea:7a:06:be:75:33:45:c6:d9:48:
e9:ce:d6:ff:67:3f:84:cc:c5:5e:f7:7b:8d:f8:e0:
2b:2c:eb:54:8e:e4:d4:08:c5:cf:bb:ec:e3:ce:91:
4f:b6:52:83:95:b7:c6:06:47:c5:86:f4:d3:f7:e0:
df:55:d1:78:72:9c:da:08:89:a7:66:fc:08:c1:2f:
ad:c4:06:de:1a:78:be:28:89:06:25:11:61:de:eb:
62:45:2f:35:42:49:1e:2d:c5:a6:64:bf:0f:ea:6e:
3c:4f:63:4e:e8:35:48:7c:55:4d:43:35:ea:78:74:
ea:1c:01:39:17:0d:42:35:c9:be:3d:09:9e:15:d6:
5e:cf:49:30:c0:5e:15:4a:c7:f1:2f:b4:34:35:26:
3c:69:e2:b7:71:a7:00:f7:35:ae:aa:25:33:93:72:
90:84:a2:11:3c:c6:cb:09:33:07:d6:da:c4:c6:4f:
2c:78:7a:2c:67:57:90:0f:70:87:97:c9:e4:83:f9:
be:d5:da:a6:b0:5f:a3:c9:9b:5a:7a:00:cf:c2:33:
fa:53:d1:84:af:e6:bb:15:5c:65:db:ed:33:ea:d0:
4b:74:81:2c:a9:8b:f6:cf:a1:ff:ca:a6:a5:bd:35:
9f:01:5e:bd:3d:49:7c:ee:55:15:79:c4:90:ad:f2:
86:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:BF:08:5C:78:75:E3:53:A0:7B:F0:27:78:FD:25:3C:71:D8:05:95
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:99:ee:8a:09:7e:d8:bf:94:66:a7:f5:d9:a4:c9:cf:50:6e:
ac:f6:f7:b5:31:ff:c1:7a:26:d5:9a:e7:29:4f:b0:e4:0a:14:
27:7b:91:bb:66:39:31:43:3e:c5:72:61:b3:00:37:20:7f:2e:
da:b4:69:ff:03:10:20:79:bd:7c:67:92:19:22:4c:e2:ea:96:
cd:b5:37:58:c4:87:3b:72:5a:04:a4:fb:a4:a4:4d:a6:b6:d7:
68:ac:70:c4:d9:c5:0e:a0:7f:a7:e3:70:e1:2e:b5:1b:35:a5:
81:55:5c:66:d8:67:01:33:ed:7f:aa:a2:77:a3:8a:93:4c:fe:
b5:be:08:66:78:39:ac:50:2e:d0:2e:53:b0:8e:68:99:a8:d2:
ac:1c:c4:a9:b9:12:f3:e0:a0:b8:ab:ff:5f:74:66:99:0b:6f:
62:e7:b4:e1:b1:c7:7d:4f:4b:1c:3d:4e:99:42:b6:1c:d3:fe:
a7:b1:db:eb:84:cd:36:52:98:0c:f1:52:67:c8:ba:f4:3c:d2:
6c:9a:8f:3c:7b:c9:f6:4f:4b:0d:be:85:f4:e1:04:bf:e3:a2:
be:f7:dc:f1:31:9a:fb:27:2c:6e:47:22:65:c0:cc:f0:63:c7:
1c:f4:e6:55:89:5f:75:d6:43:45:be:e2:73:83:0d:2b:6a:ed:
70:66:ee:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:38:03 2026 by rpki-client