Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft (raw, json)
Hash identifier: uaO4f4HVesuzg3fkl3pd5g5jqeD1yGblv5FMwFWEP88=
Subject key identifier: B4:0B:FA:16:52:70:97:62:5E:F7:C3:0E:1D:D6:55:C4:FD:37:97:A2
Authority key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Certificate issuer: /CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Certificate serial: 019E1E6C42186F0BD5A4943C11BF367CD6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
Manifest number: 0E25
Signing time: Tue 12 May 2026 23:01:11 +0000
Manifest this update: Tue 12 May 2026 23:01:11 +0000
Manifest next update: Wed 13 May 2026 23:01:11 +0000
Files and hashes: 1: 6PvsgVwbpjjge_V2egl4nj0Eov4.roa (hash: U1ac2CnvIyxkgh4LffLq2pt3hg9vUAszqogwRbgBBLY=)
2: INbvbexKikJqE06AvP-OgH6xyns.asa (hash: 6+8nON8zORmJVsBb/5wLz53qepNYird7lFy9z0e2zr0=)
3: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl (hash: PkfPYNg1x6fkAE+MKdNMRdJ/EC732qGcWdSWh0P0wlg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:42:18:6f:0b:d5:a4:94:3c:11:bf:36:7c:d6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Validity
Not Before: May 12 23:01:11 2026 GMT
Not After : May 13 23:01:11 2026 GMT
Subject: CN=b40bfa16527097625ef7c30e1dd655c4fd3797a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:ad:69:b3:36:85:26:c1:9d:fc:2b:2c:72:
34:9b:cf:21:fe:a4:55:27:83:b8:37:6a:ee:a7:17:
60:38:42:96:cc:17:b1:2e:bc:58:23:56:3c:3f:c6:
7c:22:d5:6e:e7:2a:01:2b:ab:60:82:bb:0d:3b:1b:
26:6d:93:3b:02:2f:f7:96:c9:93:ac:c4:50:85:9b:
af:f4:8c:a2:82:a0:19:82:88:d1:f2:d3:da:f5:0f:
2b:04:09:b8:aa:74:a0:33:45:e5:7d:6c:92:bf:72:
6f:61:5a:2d:09:b4:c5:ad:89:aa:2a:29:a2:82:86:
6c:c8:12:b9:b9:88:6b:50:3d:58:ec:dc:28:f5:ea:
87:56:9f:ef:e8:a4:2f:e3:a6:5b:9d:39:df:55:48:
40:8e:d5:97:eb:b8:c8:06:a5:e3:80:2f:f2:b8:66:
0e:2f:d6:e4:61:b8:40:78:cc:2a:17:40:1f:57:b3:
42:be:f9:22:86:be:76:e5:e6:65:80:87:dc:9e:ed:
df:f3:1c:39:2e:41:00:eb:ac:b6:76:10:48:34:80:
50:c1:51:5e:01:9e:6c:60:9b:ca:87:07:b1:3a:c5:
0c:da:aa:8a:0f:9f:11:cd:bc:59:6a:9a:d0:5c:d7:
d0:f4:54:31:f9:a0:cb:17:30:1a:68:89:80:ed:8b:
00:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0B:FA:16:52:70:97:62:5E:F7:C3:0E:1D:D6:55:C4:FD:37:97:A2
X509v3 Authority Key Identifier:
keyid:AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:5b:e4:d6:92:4c:47:89:39:dc:05:32:90:d3:a8:75:c8:8c:
78:0f:c1:65:c3:28:ba:81:a1:3e:71:c5:a2:07:f9:99:3d:70:
c7:a2:c7:21:46:bd:11:fc:ea:2c:5e:85:3a:2f:69:a7:79:e9:
4d:44:ac:93:b3:2c:8e:45:a6:0c:74:2f:c9:70:0f:7b:77:8d:
c4:f0:ea:84:f0:42:4d:5b:ab:dc:ef:4a:a8:cc:00:a6:8c:2c:
2a:ca:00:f1:10:b6:d1:ce:ef:bc:63:18:64:b4:fc:f0:69:72:
56:70:28:2b:8a:a8:c5:e5:3b:98:fa:91:98:f2:07:8a:4b:db:
cb:0b:69:ee:ff:90:e5:36:f2:cb:26:af:64:9e:49:4d:46:42:
1e:88:e2:fd:9a:4a:2c:bf:24:40:2f:38:7e:d6:4b:9e:b1:ce:
5e:c7:bc:60:2e:d3:f9:56:1c:56:9c:d1:d6:10:db:be:5a:af:
a6:1e:d5:dc:cc:82:28:2d:b4:47:e2:17:0e:cb:17:d5:37:a4:
18:b2:32:fe:ee:5e:bc:de:f9:8c:f7:e6:45:57:1f:7d:61:84:
fe:03:bf:e0:0a:5c:98:15:d6:7e:50:1f:cd:74:99:d8:0e:23:
52:04:d6:59:2f:05:fd:b1:4f:92:96:be:d2:1c:b7:dc:9e:73:
8c:c1:09:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:53 2026 by rpki-client