Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: Fn/BBCM/LMAKDb8DrwU8dpASZWVcG7ZFbTr5vFOTu/A=
Subject key identifier: 80:D2:17:5B:F9:71:A7:06:D7:79:FA:EF:29:E5:32:D6:31:47:2F:06
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 01A1DB01C64740AE538DD54130ABF32BDE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 07E9
Signing time: Sat 14 Nov 2026 17:01:28 +0000
Manifest this update: Sat 14 Nov 2026 17:01:28 +0000
Manifest next update: Sun 15 Nov 2026 17:01:28 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: exJCu5O4TJZJNqOjqEzocuhsDE/GIYci/WT3fQnrB9o=)
2: Db42gVIOc-r6U0XdkPGEkaUQ_F8.roa (hash: +dorelrzD6UM9OjrHdBTn8xKkODdpeZOExmq1+y6uHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:01:c6:47:40:ae:53:8d:d5:41:30:ab:f3:2b:de:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: Nov 14 17:01:28 2026 GMT
Not After : Nov 15 17:01:28 2026 GMT
Subject: CN=80d2175bf971a706d779faef29e532d631472f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b2:f9:39:d4:80:98:50:c9:c9:31:9e:c4:34:
43:d9:d5:1f:32:2f:6a:98:02:62:3c:39:53:ac:18:
2d:f3:06:87:90:6e:1a:27:dc:f8:7c:71:aa:46:9d:
b8:47:c3:49:1c:6c:80:f5:d0:64:ca:16:46:c9:07:
5c:cf:2d:bf:2c:df:a9:8a:b8:03:61:b4:2b:ec:f0:
6c:3b:f7:8a:78:95:ee:44:0b:25:15:d8:2b:b5:f2:
ef:04:92:36:90:c0:c7:3a:85:17:27:2c:f3:a9:1a:
bc:46:ee:5d:8b:39:15:56:28:d0:2a:a1:65:a0:19:
b0:06:cd:95:39:3b:46:e7:3e:55:90:6a:0b:a2:b0:
4e:7b:cc:35:31:ce:f0:9e:b8:15:23:79:c8:09:32:
6a:41:94:7f:4f:5a:2f:de:c7:a3:9d:67:ab:9d:b8:
2b:85:f6:9e:1b:cb:ae:71:d2:34:d9:fa:7c:8c:b7:
be:d2:3b:0b:7c:50:de:29:7e:bc:1b:ce:98:94:37:
99:37:1a:70:47:ee:26:d5:ae:65:24:5d:d4:bd:90:
04:2a:22:1a:79:db:c7:d4:a4:14:5e:e5:03:69:fa:
a3:82:49:6e:44:c9:78:18:a9:d2:38:b0:3c:11:ea:
91:f0:09:ee:fe:08:21:e2:26:fc:fc:72:99:3d:b4:
7e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D2:17:5B:F9:71:A7:06:D7:79:FA:EF:29:E5:32:D6:31:47:2F:06
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ca:78:06:cf:18:35:9b:5e:b9:79:b3:fa:07:13:27:ed:e3:
1d:ec:6c:c1:dc:e8:8c:77:b0:13:cd:b2:27:3b:71:5f:76:c9:
7b:bc:ea:57:55:e2:63:73:43:7c:40:f8:30:5b:cd:b6:e4:1c:
cd:13:32:04:d6:1e:09:28:78:f3:38:51:a6:26:c7:ed:74:e2:
bd:56:c0:54:7e:08:c6:64:91:fc:15:3d:c5:52:80:9c:30:6c:
22:bc:d4:53:db:2a:bd:e7:6b:8b:4b:c6:2c:3f:01:85:b8:05:
10:d2:56:d5:92:83:d3:f4:5e:a3:a2:34:dd:f3:5a:92:fd:ca:
47:89:b2:8a:6d:2b:34:50:36:38:b0:cf:92:71:44:f6:fc:ad:
5b:de:cd:23:bb:9a:3e:49:ce:3f:b2:ee:8b:a9:c8:4a:d4:84:
1a:df:7a:3c:22:62:6d:76:6f:96:c5:89:79:03:72:b6:ed:37:
94:4e:90:f6:30:ac:2e:ab:fe:28:02:9a:9a:a1:a2:01:1a:7e:
69:a8:2c:f7:71:64:78:9a:1f:64:3e:e2:4c:db:e7:d4:ca:cf:
36:c2:5f:5c:4f:f6:7d:58:71:94:d2:df:5b:f3:41:9c:6f:72:
4b:06:a1:48:f2:e8:83:92:05:66:cc:18:9f:a2:24:3b:12:19:
84:df:ec:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:42:35 2026 by rpki-client