Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
File: CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft (raw, json)
Hash identifier: Ndef9sjYVODayGpWTYx4LmRqwBa/JCxy7taOaghUP/c=
Subject key identifier: BF:1B:DD:2C:C6:76:88:8E:5F:EC:67:3C:CC:72:35:04:41:D3:23:C8
Authority key identifier: 08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
Certificate issuer: /CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Certificate serial: 019E1C7DB306D11894312E35198EE15C75E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 14:01:00 +0000
Manifest this update: Tue 12 May 2026 14:01:00 +0000
Manifest next update: Wed 13 May 2026 14:01:00 +0000
Files and hashes: 1: CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl (hash: wSlvfH4nn56JF2XWJoNy2Ni+WX7hadjagM1OITNK0rE=)
2: hSyCHHwvePnnhJaLoj0bPLiKrY0.roa (hash: Q5kLVpiwwKotr0YZjLtoW5+DY5vy3ewkjBXAVZYPMBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:b3:06:d1:18:94:31:2e:35:19:8e:e1:5c:75:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Validity
Not Before: May 12 14:01:00 2026 GMT
Not After : May 13 14:01:00 2026 GMT
Subject: CN=bf1bdd2cc676888e5fec673ccc72350441d323c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5e:dd:2a:4b:5b:2b:d2:52:d2:fb:10:e1:0b:
2e:55:fc:d2:7c:bc:01:43:6e:b0:27:ff:af:c9:00:
2f:74:dd:20:ce:c8:49:fc:a3:b8:fc:02:be:a8:7c:
9e:b8:fc:ce:4b:d9:c4:f8:1f:fd:08:84:b6:76:7d:
eb:8d:0f:bb:f6:41:8d:62:dd:50:15:8e:53:54:8f:
50:37:75:2b:b5:1d:32:49:e3:99:0f:11:d7:c7:f6:
a6:79:a4:ce:ab:26:e0:a7:b8:4b:0f:38:0e:91:40:
c4:15:29:4c:c3:9e:e7:36:25:97:b2:0f:e6:eb:c3:
1f:1d:0b:c4:a9:e8:52:de:55:b4:80:6c:b2:6b:c2:
19:83:36:6c:ff:15:91:df:07:49:0d:27:40:81:f3:
d1:16:54:6c:ce:b3:f1:17:d1:ac:64:ce:57:39:d7:
09:21:81:bc:cc:3b:ef:0a:d2:1a:19:af:41:ee:e2:
fc:64:67:f0:cb:9f:d4:cc:ed:ed:67:d1:26:97:51:
50:c8:49:f4:f7:c3:d5:8e:24:9b:e9:5b:d9:eb:9a:
b1:f6:f3:98:41:f7:dd:d0:30:20:e6:fb:95:ed:0d:
3f:f4:1a:fe:78:61:c8:97:23:72:04:05:3e:bc:87:
6e:fd:74:d8:26:77:e9:3c:a2:42:f5:29:e6:2c:8d:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1B:DD:2C:C6:76:88:8E:5F:EC:67:3C:CC:72:35:04:41:D3:23:C8
X509v3 Authority Key Identifier:
keyid:08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e1:41:f8:ab:59:7b:20:5b:d7:e7:96:f5:1c:98:eb:e8:a5:
61:35:ae:32:d8:fa:b2:42:ad:00:6e:b9:0b:59:67:c9:fb:22:
cd:fc:3e:48:2b:a7:4c:2c:84:6f:22:26:d0:49:b5:9e:53:f4:
e6:6d:0f:0e:0a:33:30:3f:50:95:5d:a9:a6:ef:2e:12:48:27:
b1:9b:fd:29:8c:47:3a:d5:a2:a4:b0:cb:81:db:94:0c:12:c2:
af:73:71:72:c3:e7:65:76:9d:d8:19:95:3b:1f:a0:07:38:27:
34:f5:9a:6c:27:eb:ad:c1:8e:58:cb:64:fc:36:5a:ed:af:d9:
6b:51:e8:ea:13:9b:31:d9:39:42:b1:ba:c4:7c:69:26:6a:8a:
a7:77:b1:a0:dd:6a:48:d5:21:b2:30:92:4c:76:7e:4f:11:c6:
30:37:6b:85:9a:41:74:17:6a:67:b4:a8:52:6c:3e:2e:a5:78:
7a:d1:a5:3f:58:75:be:a0:97:72:e1:88:3f:9d:87:cb:d3:b0:
55:fe:cb:23:d1:5e:5d:1e:a5:3b:a2:4d:02:a9:2d:13:ab:71:
c5:4b:4f:60:56:8d:87:8e:a4:d7:bc:73:16:19:dc:30:79:43:
51:0c:0d:59:27:70:e1:aa:62:10:7f:cc:37:b0:d1:af:da:4b:
33:45:df:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:31 2026 by rpki-client