Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
File: CeVm4OteXiEQflX8lg-x7iGHRHQ.mft (raw, json)
Hash identifier: PFENxgpoNQEbrdK3ZGJigfmxZiL7PO1eyTxebsYQemI=
Subject key identifier: CC:66:C6:32:E5:02:64:9F:11:99:9B:DB:21:C9:5F:1D:2F:DB:68:DC
Authority key identifier: 09:E5:66:E0:EB:5E:5E:21:10:7E:55:FC:96:0F:B1:EE:21:87:44:74
Certificate issuer: /CN=09e566e0eb5e5e21107e55fc960fb1ee21874474
Certificate serial: 019E1E36060BE7F8839376C7E0E75934BC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
Manifest number: 174D
Signing time: Tue 12 May 2026 22:01:57 +0000
Manifest this update: Tue 12 May 2026 22:01:57 +0000
Manifest next update: Wed 13 May 2026 22:01:57 +0000
Files and hashes: 1: CeVm4OteXiEQflX8lg-x7iGHRHQ.crl (hash: SzzJASa4MxDwixgJgyZFnLYpgOGZuShBwOT3g0FPQbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:06:0b:e7:f8:83:93:76:c7:e0:e7:59:34:bc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e566e0eb5e5e21107e55fc960fb1ee21874474
Validity
Not Before: May 12 22:01:57 2026 GMT
Not After : May 13 22:01:57 2026 GMT
Subject: CN=cc66c632e502649f11999bdb21c95f1d2fdb68dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:88:68:a7:91:e4:b4:df:bc:93:c4:8d:1a:01:
b6:1e:61:d1:09:ef:d2:b3:de:3e:be:fc:de:26:80:
24:0d:95:bd:57:2b:17:a0:3a:18:2a:dd:bf:0e:5c:
60:1f:b1:20:0b:81:31:ed:63:e9:70:89:a9:c5:96:
a1:b3:d9:1d:ae:27:b2:b5:0d:9c:09:73:ec:5b:53:
52:31:8c:a9:79:4d:77:62:5f:28:19:bf:4b:ac:39:
b2:f2:f6:00:82:5f:98:5d:2b:d2:1a:7f:78:b5:0e:
ec:c1:5e:6b:b0:f4:1e:e6:42:6c:59:21:97:f7:e2:
ee:d4:74:74:20:83:55:db:2c:64:24:ba:f4:68:af:
8e:09:fa:3f:a7:07:b1:f8:42:1a:94:dd:38:ef:e7:
51:de:f4:11:ef:f9:37:d6:21:29:59:37:be:dd:82:
9b:71:05:fa:24:a1:f2:bc:0f:bf:6d:65:05:29:57:
d4:e3:17:96:2d:d2:fb:cc:4f:80:e3:7a:2d:4d:9f:
03:ab:59:4e:aa:7b:1e:4f:0b:27:c8:75:54:5f:b9:
34:0f:95:56:f6:88:7c:40:91:eb:1d:04:1a:3b:4e:
42:b0:02:8b:40:fa:9a:bd:c4:47:8c:2a:5d:4c:a0:
63:e4:2a:ba:af:f2:32:0d:3d:1b:d0:1b:16:a7:88:
5a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:66:C6:32:E5:02:64:9F:11:99:9B:DB:21:C9:5F:1D:2F:DB:68:DC
X509v3 Authority Key Identifier:
keyid:09:E5:66:E0:EB:5E:5E:21:10:7E:55:FC:96:0F:B1:EE:21:87:44:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:9a:00:30:6a:37:45:25:b0:d9:ab:d6:17:ac:93:e1:26:59:
ac:6e:dc:a6:00:67:1c:7c:cf:48:9c:1f:7e:e2:22:80:9e:91:
26:9c:31:b9:7e:fe:21:9c:89:db:24:87:76:e4:a4:4f:fb:b7:
91:89:76:4c:0c:88:08:60:8c:aa:cc:0a:18:d9:45:a5:c2:00:
4b:83:fe:9c:11:c3:3a:3e:f0:31:3d:36:8e:a5:06:af:c0:bd:
91:0e:a0:f3:1d:62:59:1e:16:97:f2:43:c2:31:19:a1:d1:37:
aa:42:d1:10:e4:20:1c:2c:f4:36:89:52:4a:b8:d4:91:21:96:
f2:3c:5f:dd:a3:f1:de:78:fb:05:95:e3:fc:07:bb:d0:0b:37:
7d:5b:b2:ae:54:2d:62:3f:2b:8c:6a:fd:d9:dc:ed:28:06:15:
da:04:5a:2e:5b:8d:e8:dd:1e:69:80:f5:aa:87:63:62:f6:fb:
ff:85:1e:28:ad:cf:a0:c7:94:24:be:9e:91:8f:f7:39:e6:20:
b1:bd:fb:bd:21:c1:d3:6b:51:88:d4:65:3d:00:8d:c9:51:41:
a6:4b:a6:61:58:e6:af:53:a9:bb:bb:c7:89:d6:56:f6:4b:98:
fd:5f:71:d5:e0:09:ea:76:2c:09:32:f9:04:44:f2:d2:e6:b1:
81:69:1a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:24 2026 by rpki-client