Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: r/KD9zjebuFIbK7GNt5pqeU+iawB8TX2HBQHqyVkBkg=
Subject key identifier: 1A:4B:57:58:1D:0F:EC:1B:E4:11:A0:63:1B:65:0B:8B:EC:18:56:6B
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 01A0D83C34E1B6E673B7936BBF6BA81D6E12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 0763
Signing time: Fri 25 Sep 2026 11:03:39 +0000
Manifest this update: Fri 25 Sep 2026 11:03:39 +0000
Manifest next update: Sat 26 Sep 2026 11:03:39 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: PmxRapsNRqjZYXgVC1eNJJPMv7o8mzu7ntEgM2x8NLs=)
2: Db42gVIOc-r6U0XdkPGEkaUQ_F8.roa (hash: +dorelrzD6UM9OjrHdBTn8xKkODdpeZOExmq1+y6uHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:34:e1:b6:e6:73:b7:93:6b:bf:6b:a8:1d:6e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: Sep 25 11:03:39 2026 GMT
Not After : Sep 26 11:03:39 2026 GMT
Subject: CN=1a4b57581d0fec1be411a0631b650b8bec18566b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:49:8a:eb:fe:5a:03:35:c7:4c:7b:a9:da:21:
60:27:07:66:02:78:ac:a8:85:00:51:cd:3e:8a:d1:
53:ac:b5:d2:62:a7:f8:44:3a:cd:cc:23:c0:cb:db:
10:9a:a2:d0:51:b4:5b:83:73:cb:15:38:4e:a3:ff:
5b:5d:da:aa:f5:44:f8:dc:14:9e:9f:41:87:78:8f:
10:2a:3e:cd:7b:36:0b:57:71:9d:43:ec:f3:ff:ed:
59:e7:4a:fc:3b:7e:3e:19:e5:2a:ca:57:53:29:2d:
34:6d:35:fe:9b:fa:86:78:72:6a:64:e4:5a:ea:8c:
80:13:c2:26:a0:61:20:cd:bb:a4:3a:25:8f:72:28:
bb:20:d5:cd:89:a1:df:bd:4b:68:e6:c8:66:fc:17:
b2:2a:2d:5a:c3:cc:5d:fb:7c:5f:4f:61:ec:77:45:
a4:dc:29:4a:2e:70:c0:e5:7f:a4:b5:a4:62:e5:f1:
81:a4:4d:f2:d6:8d:d4:e0:aa:ac:e9:d5:39:62:ae:
da:f4:3f:64:ec:1a:38:a8:00:2c:c2:04:2b:a7:7f:
b6:b3:91:be:58:ca:7d:ab:27:d1:24:f1:84:ab:b4:
7f:3b:cb:6a:70:d2:33:bb:0f:b6:51:a4:bd:24:4a:
ae:2e:0e:9f:02:69:17:83:1a:1f:4f:5d:bb:52:ff:
7e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4B:57:58:1D:0F:EC:1B:E4:11:A0:63:1B:65:0B:8B:EC:18:56:6B
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:36:0f:83:94:eb:f7:50:fc:ec:3d:75:31:36:bd:0e:67:ff:
6c:3f:78:85:bc:da:27:a3:fd:40:52:c8:c1:4d:bf:75:ba:5a:
5c:99:6c:46:a1:e5:85:51:b2:b5:23:d8:24:42:d5:ce:55:7c:
f1:f6:08:78:a9:13:c7:34:d3:7e:62:28:71:fc:28:d4:0e:65:
8c:58:dc:d6:96:8e:a5:b7:71:c3:f2:e9:e0:dd:94:61:68:5f:
0e:2c:6f:35:f8:be:bf:8b:b9:0c:b7:33:09:ce:c4:9a:ff:ba:
22:8d:38:48:d2:eb:c5:da:aa:04:90:48:38:4a:ef:e4:94:d9:
37:fb:f7:10:21:63:23:08:fb:04:4f:ef:82:cf:80:72:4b:a1:
fa:d0:69:a3:e6:1d:94:cd:81:fc:a3:95:56:c0:e9:c2:2c:f3:
25:9b:ce:63:f8:ae:b7:39:aa:48:30:b6:e7:36:9c:ad:20:d4:
47:30:ba:71:18:29:d2:5b:07:ba:d3:0a:b5:6d:9e:90:3e:d6:
df:f0:c5:59:27:81:55:76:e8:c3:36:06:af:cb:a0:1c:91:98:
b8:9c:45:e5:86:70:ba:e3:e1:6d:e9:61:65:f4:bb:7d:0d:61:
01:d1:25:46:19:82:73:a8:cd:a4:1c:ee:8f:81:97:5b:4b:47:
83:b3:2a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:57:56 2026 by rpki-client