Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: 2K1/BNxJtnOIhm5HnFDxzdlGOngayJRMeFassCvkG9Y=
Subject key identifier: E4:9A:C8:83:48:54:99:80:CE:C8:FF:FA:B4:0E:C5:6C:BD:45:D4:C4
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 019D27E03450568D4472837B40DE59F5B68A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 057A
Signing time: Thu 26 Mar 2026 02:01:37 +0000
Manifest this update: Thu 26 Mar 2026 02:01:37 +0000
Manifest next update: Fri 27 Mar 2026 02:01:37 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: PIP/rfTqgCJ7lfD1MiEI5GshDx6P7ozDz9gXmQMX8GE=)
2: Db42gVIOc-r6U0XdkPGEkaUQ_F8.roa (hash: +dorelrzD6UM9OjrHdBTn8xKkODdpeZOExmq1+y6uHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:34:50:56:8d:44:72:83:7b:40:de:59:f5:b6:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: Mar 26 02:01:37 2026 GMT
Not After : Mar 27 02:01:37 2026 GMT
Subject: CN=e49ac88348549980cec8fffab40ec56cbd45d4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:4f:fb:96:83:d2:f7:81:3c:96:79:72:79:
ea:c4:39:c4:be:f2:0e:8c:39:65:c3:87:69:b6:d2:
a7:00:56:ea:b8:1c:00:af:26:30:06:f8:36:11:59:
a5:2c:a6:a5:74:c0:c3:f9:61:fd:e7:c6:fb:23:6c:
74:a8:fb:8f:30:d5:78:f5:fb:a2:75:cd:e5:b5:9f:
98:61:fe:eb:ce:8f:c2:ee:ca:84:85:4e:43:3e:23:
ba:b9:3f:1d:66:e4:ea:37:a9:65:1a:9f:be:73:4e:
e9:b8:6e:3c:37:ce:84:16:69:a4:87:6b:82:8d:2d:
c4:13:19:56:4d:0a:2f:7f:dc:89:49:f6:e5:51:dd:
80:33:7a:89:86:55:75:d2:ea:53:d1:c3:df:65:ff:
a7:f7:c2:de:3e:97:28:bb:e0:a9:9f:f6:44:79:53:
83:38:9e:ac:e7:de:7f:c2:30:b0:32:69:79:ec:33:
7c:0d:64:27:86:14:2f:a6:9d:e9:93:f3:cd:6f:64:
bd:7a:59:05:69:41:24:7b:5a:cf:40:99:91:20:d0:
b5:0f:91:af:d1:99:b0:8e:9f:70:3c:00:c7:ef:ed:
16:b1:53:0f:25:73:6d:6f:d1:a4:c7:ab:3c:46:59:
3d:0f:04:8a:88:e6:78:50:34:eb:54:7c:29:7a:78:
f6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9A:C8:83:48:54:99:80:CE:C8:FF:FA:B4:0E:C5:6C:BD:45:D4:C4
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:6d:53:47:93:25:5a:cd:4e:2e:0c:3a:a1:71:54:fa:cf:27:
63:8e:8f:2c:03:bc:c8:85:54:aa:71:a9:ef:74:a1:7d:5a:e2:
f8:90:5f:3f:8a:1b:cc:c8:6d:48:cf:8a:e7:d8:5d:5a:60:9e:
20:2b:26:ce:dd:2d:6c:e5:a5:cb:fe:08:25:af:58:6a:d2:bb:
89:32:f9:11:20:d4:d4:b5:b8:a7:1c:21:74:45:f3:58:64:10:
57:8f:c6:1a:6f:7b:d0:43:46:45:87:c8:d8:3c:0c:e8:39:21:
48:91:7c:98:be:ab:bc:ec:1c:67:f5:be:c6:d8:30:22:cb:a3:
51:7b:70:57:26:fd:3a:e9:33:18:94:5d:76:7b:fe:51:cb:04:
3f:2b:94:3b:f4:b3:93:da:7d:b9:fb:66:db:48:48:cb:38:59:
7e:f9:af:f6:56:0a:73:c5:96:33:b6:bb:9c:2a:5e:c6:3c:d7:
eb:9d:10:67:22:5c:74:f4:1a:72:cf:03:ec:37:09:ac:8c:cd:
c7:fa:ee:ec:73:c0:58:23:af:c9:08:6c:50:75:37:da:4c:9e:
23:d7:a4:96:35:59:1c:d1:ea:f6:57:d3:24:09:57:5d:e4:ba:
cb:2b:99:75:fc:c4:8a:3a:ca:70:8b:e2:c4:af:f9:45:06:58:
c4:24:d2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:45 2026 by rpki-client