Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier: bHKHId9Wt8eu3aOMT4pNxBlq3nVCbaTurqA13kgACgE=
Subject key identifier: 71:A1:71:18:9C:DF:0A:D4:CD:C2:9E:D7:F8:D4:90:09:40:DF:0B:CF
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 019D2997404FB6868016E77932A36EFC11B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number: 09D0
Signing time: Thu 26 Mar 2026 10:01:11 +0000
Manifest this update: Thu 26 Mar 2026 10:01:11 +0000
Manifest next update: Fri 27 Mar 2026 10:01:11 +0000
Files and hashes: 1: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: 0fYt9tV2t39UqLuubOiibVEZ8wAyhQYgFWJ4f9qZcno=)
2: UyoOwt_mkkio7rcKttEYqMqc4tE.roa (hash: 3ZPFWtYV3D6s10XCwOHklQ6Iqj8jHJrAUWODxNNBQcY=)
3: u7wi03kSUsP8y2tILiBs4RyN014.roa (hash: pYeJLWg472+6gUx7OvkaeELMhWeboOiwVGtw7KA43sM=)
4: uaEkmuhb7WRqiclbUmM34EjbO5o.roa (hash: h2MPog8U0B3WrxFfdEojnmYSGAZiWQIlg+muWLvtr1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:40:4f:b6:86:80:16:e7:79:32:a3:6e:fc:11:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Mar 26 10:01:11 2026 GMT
Not After : Mar 27 10:01:11 2026 GMT
Subject: CN=71a171189cdf0ad4cdc29ed7f8d4900940df0bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d0:3b:ae:73:c1:9c:92:4c:f0:1f:89:82:c8:
96:a1:31:91:1e:22:0c:d0:db:87:3d:c6:26:29:bb:
c8:ef:f2:f3:7c:f3:94:e4:0e:39:cf:d7:54:96:61:
25:ae:2a:e6:f6:c1:b1:46:d1:02:81:34:55:52:a5:
6f:19:96:0c:d0:ee:14:b1:39:c3:8a:4b:52:cc:5d:
57:1c:15:5f:7b:17:36:28:ac:0d:da:b3:7b:25:96:
96:3f:c7:bb:97:4d:36:6a:bb:1a:e7:a6:0f:c5:c6:
b4:95:24:e6:ee:6a:13:74:df:31:a5:68:6b:6a:94:
fb:c9:16:36:62:26:0f:ad:71:fa:86:ba:c5:8f:e9:
4f:b1:38:33:3c:f7:e1:01:5a:23:64:c3:da:16:ba:
20:39:3f:48:56:64:cb:97:83:93:34:1a:49:1e:e6:
28:a6:00:d1:d3:55:ad:b0:d1:79:e5:29:fa:9b:3f:
63:8f:29:b0:6c:77:75:aa:60:ff:9f:de:80:b5:7c:
17:39:a3:6a:0c:18:99:8c:17:6d:85:4b:59:9b:8d:
8d:05:4b:3b:85:be:47:0a:92:9c:db:ea:11:09:2b:
ae:93:51:43:de:12:f9:83:29:c0:20:86:8d:86:26:
a6:a3:86:59:2b:b0:11:59:71:ae:8a:81:c8:ed:87:
2b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A1:71:18:9C:DF:0A:D4:CD:C2:9E:D7:F8:D4:90:09:40:DF:0B:CF
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:38:e2:87:c4:26:b5:8a:ad:42:ee:8c:8b:b2:72:08:59:74:
cf:0a:25:ec:88:36:f1:a6:31:59:0b:64:e1:4d:da:e5:de:1a:
6c:31:64:29:e1:d4:5e:6f:06:e2:39:da:7d:16:7f:96:51:26:
08:92:24:e4:e4:9c:2e:19:ec:20:44:75:b4:cc:9a:8a:19:75:
20:0a:14:65:29:54:85:a7:37:c7:78:5d:95:1d:bd:de:d0:c0:
26:fb:14:26:5c:cd:60:dc:2a:33:6b:d7:1c:d7:76:79:ac:94:
0e:d9:61:1b:16:fa:46:28:7b:65:32:fb:d6:ba:ec:01:c9:90:
fb:7e:40:54:cf:c2:6f:77:a8:b0:75:e5:cd:bd:20:4d:2c:43:
cd:f2:7f:45:b3:f2:58:5d:f9:4c:2c:c6:7d:49:52:e4:e6:19:
2b:5d:97:38:05:bc:c1:ca:be:23:5f:76:20:cc:c9:27:ed:0e:
1b:e3:1f:57:c7:36:73:a4:ef:47:54:a8:c5:bd:22:72:2a:29:
04:73:82:6d:1e:34:e9:81:ce:50:ac:b8:73:d1:30:ab:ff:5e:
8a:35:d0:39:ea:27:27:e5:ab:d3:b9:61:ac:85:48:a6:4c:05:
ff:81:af:1f:22:c8:96:6b:0a:96:c4:38:23:97:cb:ff:29:90:
3c:c0:92:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:35:30 2026 by rpki-client