Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier: fbzbWdfHsivDDiN8tPTHNZSOPbfvYYHaPr2gHBw/5bQ=
Subject key identifier: 72:F6:67:F6:43:E1:1C:B7:B6:F2:E1:32:B4:DF:E8:51:90:C9:12:46
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 019D27A88B739B656F627529E82FE1D587E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number: 09CF
Signing time: Thu 26 Mar 2026 01:00:50 +0000
Manifest this update: Thu 26 Mar 2026 01:00:50 +0000
Manifest next update: Fri 27 Mar 2026 01:00:50 +0000
Files and hashes: 1: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: akKCYNaXzfQeYNailCJGGuzsLjqDWT7f54uN9pPMHpo=)
2: UyoOwt_mkkio7rcKttEYqMqc4tE.roa (hash: 3ZPFWtYV3D6s10XCwOHklQ6Iqj8jHJrAUWODxNNBQcY=)
3: u7wi03kSUsP8y2tILiBs4RyN014.roa (hash: pYeJLWg472+6gUx7OvkaeELMhWeboOiwVGtw7KA43sM=)
4: uaEkmuhb7WRqiclbUmM34EjbO5o.roa (hash: h2MPog8U0B3WrxFfdEojnmYSGAZiWQIlg+muWLvtr1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:8b:73:9b:65:6f:62:75:29:e8:2f:e1:d5:87:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Mar 26 01:00:50 2026 GMT
Not After : Mar 27 01:00:50 2026 GMT
Subject: CN=72f667f643e11cb7b6f2e132b4dfe85190c91246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:9b:17:6c:67:86:95:7b:b8:d5:f7:d5:ef:
01:c4:5a:68:4b:39:37:36:91:8b:e4:5e:3c:9b:e7:
0d:44:5d:da:3e:7e:f9:21:40:df:df:79:e9:53:02:
62:cc:f3:2b:a7:d9:a0:d9:15:2f:97:26:22:eb:72:
76:fa:35:b6:55:2b:f9:69:e4:5c:16:7f:7b:e5:46:
c9:a7:06:aa:1e:c7:8b:ee:8d:78:d7:fc:ba:89:c0:
c8:a3:0c:a0:a9:ec:1e:f8:9b:bf:30:f0:49:d4:02:
78:cc:60:1e:0d:b1:85:6a:b9:15:cf:fe:60:16:98:
bb:ec:cf:06:37:e3:87:50:25:20:c1:fd:e5:ad:dd:
d9:3e:98:77:4d:ef:0f:5e:c6:7c:9d:89:1b:ec:c5:
c9:7b:ae:96:fd:b8:97:a1:6d:7d:88:5c:d5:07:29:
27:d9:92:7f:ff:7d:8f:1a:fb:5a:b3:4e:38:69:2b:
51:33:0b:26:54:8f:9c:ed:ee:45:f1:08:8e:32:07:
a9:93:68:2f:54:d7:c8:a2:80:d9:fa:af:21:20:bc:
53:bf:fa:15:2b:64:28:1d:bf:65:29:27:d5:02:ab:
b7:a0:41:8e:f7:09:18:d3:da:34:be:3e:f4:57:06:
c7:23:1e:85:2d:bf:a9:ea:c4:34:de:a2:b0:4f:17:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F6:67:F6:43:E1:1C:B7:B6:F2:E1:32:B4:DF:E8:51:90:C9:12:46
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:fd:d8:c1:ac:c6:b0:cf:26:e0:bc:6f:89:71:3b:01:d5:37:
f0:dc:12:af:08:26:01:95:42:6a:3d:92:26:b4:f1:02:44:89:
6e:38:ad:a3:14:cc:fa:91:42:0a:55:2b:fd:ff:09:a3:58:15:
c7:25:24:c2:74:54:7d:9b:30:cd:ba:09:17:0b:b5:dc:39:23:
57:1e:2b:65:c1:f6:5a:16:eb:4e:da:f1:a4:ba:41:a5:3c:5a:
e9:4c:0f:9a:8a:dd:c3:f6:28:9d:8d:c4:dd:2b:23:dd:03:fe:
a0:87:5b:bb:15:12:56:00:69:9d:65:24:18:6b:38:0f:f9:05:
49:49:63:47:3b:4f:68:38:66:2c:f9:0c:c7:c5:79:0c:80:68:
e8:a5:ee:70:f9:5c:6a:53:bc:bd:90:1e:28:12:33:df:22:70:
9e:68:68:a7:85:fc:40:78:fe:63:28:4f:d5:3d:c5:29:eb:a7:
3c:ac:d7:6e:3a:af:3c:1a:16:57:9e:14:55:53:12:59:5f:1a:
02:d2:e2:06:21:e0:6d:e8:d0:b1:89:58:ed:28:a9:06:5d:a2:
f4:9d:4b:05:46:3c:60:a1:f6:1d:8f:b0:d9:91:d4:dd:52:3b:
a7:1a:f9:fb:a2:03:15:2b:b3:44:3c:4c:ff:85:f0:f1:57:0a:
c2:16:28:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:42:52 2026 by rpki-client