Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier: E0xzXYBxZAxx/Vd72fx+k4JMYfXb268h4EBry28BEZc=
Subject key identifier: 9C:40:AA:5D:50:86:0D:80:15:58:07:0C:58:41:0C:D4:7F:22:D8:31
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial: 019E1D226899E8583223489F5398DF35678C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number: 15E1
Signing time: Tue 12 May 2026 17:00:54 +0000
Manifest this update: Tue 12 May 2026 17:00:54 +0000
Manifest next update: Wed 13 May 2026 17:00:54 +0000
Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: CoUFNbN3x2M/p8dXg7KERY9OpX2njy1JQqoH6N5T2tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:68:99:e8:58:32:23:48:9f:53:98:df:35:67:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Validity
Not Before: May 12 17:00:54 2026 GMT
Not After : May 13 17:00:54 2026 GMT
Subject: CN=9c40aa5d50860d801558070c58410cd47f22d831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6f:14:0f:b7:ce:a7:0f:69:2a:00:7f:32:80:
88:30:8d:74:62:77:30:9f:fd:cb:99:3d:b2:58:df:
a2:20:14:9c:7b:d5:31:41:1a:cb:c6:bf:4a:d1:f4:
3e:66:6a:0f:03:46:0c:c1:ab:32:b2:d4:c5:99:78:
e8:28:f8:a4:44:91:dd:4e:2d:06:5f:6b:e7:ed:36:
b8:f6:51:27:8f:c2:e8:0d:de:61:3e:aa:2b:4f:da:
22:25:a6:09:2b:8c:b6:ab:3c:8e:1f:8b:ab:11:f8:
fe:ab:b2:f2:e6:50:5f:cd:2a:cf:cd:fe:24:2c:d5:
bc:6e:69:89:79:75:c1:12:dc:1f:30:91:9c:8c:e4:
c0:90:a2:04:d9:11:b8:60:ef:d1:dc:dd:7c:bc:41:
e4:62:02:83:95:49:42:4c:0a:a9:aa:1d:92:95:8f:
62:19:29:e0:94:14:07:7c:e4:c6:02:19:6f:bc:49:
8b:7e:9a:2c:c2:f0:72:ef:aa:bc:76:82:79:93:f3:
f9:5a:77:4d:88:94:3c:d9:33:fd:1a:90:c0:7c:64:
37:39:40:90:c3:ff:49:3a:65:95:3b:dc:2e:c5:91:
74:a9:c4:9a:c6:65:62:35:f6:a7:07:18:37:02:be:
bc:4a:95:a8:7a:3e:86:15:04:eb:60:d8:a0:3f:92:
a5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:40:AA:5D:50:86:0D:80:15:58:07:0C:58:41:0C:D4:7F:22:D8:31
X509v3 Authority Key Identifier:
keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:2c:f5:54:61:66:c7:19:47:9f:96:ea:26:58:ab:15:e5:b3:
29:a4:43:f8:07:af:6c:b2:77:98:9f:f6:f8:14:38:b1:cf:83:
49:47:bb:d8:92:96:5c:5e:c7:ae:19:a3:4f:d2:7b:d6:31:85:
e5:b9:bd:46:3a:73:84:eb:76:12:72:80:f3:ea:05:45:63:32:
ea:48:95:fc:63:ae:0b:ae:0b:33:44:99:e0:d9:85:eb:b2:78:
a4:35:ed:73:15:81:e2:53:96:88:c0:72:b6:8e:87:60:ad:0c:
3c:82:a4:1d:f7:02:a7:21:50:9d:60:c4:84:bd:c6:23:41:28:
b0:60:6e:4d:d9:31:33:91:9a:c1:0b:a8:1f:28:7d:fb:a6:2b:
7c:d2:33:2c:56:34:14:d2:32:85:87:10:01:58:a7:6a:90:79:
75:06:41:c1:73:0d:4a:d7:4c:33:4f:97:26:45:60:68:db:ff:
d1:b5:71:69:24:2e:3d:75:4a:cf:c9:51:ff:db:9a:1f:04:d2:
e9:b9:f2:ec:97:50:43:ba:98:b6:4a:b7:2e:94:29:05:81:66:
a8:46:bb:bb:bc:c1:51:6c:2d:76:95:4c:83:26:ba:43:7f:79:
28:b8:ea:87:d0:dd:54:2b:2c:b7:6e:46:54:61:f3:19:a1:ba:
0f:b1:66:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:13 2026 by rpki-client