Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: t71Z5VnZIfimKn5LHccinKht28Kg5egHs0SXOMWqdSg=
Subject key identifier: 61:90:59:9D:4B:D3:92:ED:AC:B2:33:DC:33:C7:43:19:80:C4:8E:DD
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 019F91DA14712565523782DACF4960DCAFF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 06BA
Signing time: Fri 24 Jul 2026 02:00:16 +0000
Manifest this update: Fri 24 Jul 2026 02:00:16 +0000
Manifest next update: Sat 25 Jul 2026 02:00:16 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: eHtfAVC7WjWF4kP+OijS9uB39SpiUDgCNn35JO/ThUY=)
2: Db42gVIOc-r6U0XdkPGEkaUQ_F8.roa (hash: +dorelrzD6UM9OjrHdBTn8xKkODdpeZOExmq1+y6uHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:14:71:25:65:52:37:82:da:cf:49:60:dc:af:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: Jul 24 02:00:16 2026 GMT
Not After : Jul 25 02:00:16 2026 GMT
Subject: CN=6190599d4bd392edacb233dc33c7431980c48edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:54:7d:40:cc:dc:27:ea:75:b8:d0:a9:2e:18:
3e:c2:f2:1a:10:80:75:ef:04:b3:5a:d8:17:89:39:
71:40:bc:5f:e7:79:db:44:d3:ef:26:7b:fb:f1:66:
a0:d5:aa:35:4d:9b:b5:f3:d3:2d:61:22:77:f6:a2:
67:d6:aa:c2:87:e5:c8:d8:13:d6:1d:08:27:c1:8a:
65:f9:01:53:c8:04:a8:a0:d2:38:77:42:05:1f:d3:
30:63:3f:45:87:c2:59:fb:31:7c:96:4d:01:cd:16:
92:9e:22:81:57:bb:e6:0b:cd:21:dc:e5:bb:8c:58:
db:3c:db:67:61:68:91:4c:60:3e:d1:9e:f2:19:6d:
1c:20:5f:9d:4f:7a:0d:56:6a:f2:05:8d:71:44:ba:
1f:38:de:0d:23:6c:ba:41:c1:f7:07:ae:68:b3:1f:
a5:0b:ca:33:47:cf:af:72:0e:32:a8:9b:09:7c:50:
c5:6a:00:bf:c1:81:2f:46:fb:49:67:c1:bb:ec:55:
00:07:90:93:f0:a4:8b:c6:e7:28:f4:6a:c7:24:ab:
55:79:a7:ff:bf:68:bc:d5:9b:3f:b2:02:e0:9e:38:
07:e4:13:17:14:fa:39:33:16:1d:e3:45:49:04:cc:
84:6d:01:52:23:e8:6b:ea:96:75:2f:a6:47:f3:08:
68:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:90:59:9D:4B:D3:92:ED:AC:B2:33:DC:33:C7:43:19:80:C4:8E:DD
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9b:a0:3c:cb:78:32:0d:94:44:22:1d:fd:b1:b4:e4:32:53:
22:09:cd:b6:1f:44:66:a1:63:29:a9:06:40:49:5f:9a:3a:ab:
41:e1:43:a7:75:b9:db:01:b9:10:cb:11:17:7e:99:75:a5:4e:
56:ef:44:6a:7a:81:a3:a0:3f:fb:11:05:49:69:11:42:9a:aa:
a2:7a:be:98:2f:65:ad:65:cd:e7:2f:be:c7:aa:b3:1d:79:c5:
d4:31:c2:c0:6b:a2:6f:82:e8:de:ad:5d:7e:27:9f:e4:83:d7:
de:1e:51:18:49:4d:a2:34:2b:47:7c:0f:e7:a3:cf:8d:48:8f:
33:4e:7a:38:5b:e9:fd:84:9e:70:7e:c7:ac:1f:6a:98:01:eb:
7d:27:ce:44:cc:40:b7:84:17:73:00:5c:7c:6a:98:65:a4:5b:
26:da:07:f4:82:07:b1:d7:3d:15:6c:f7:6d:7f:1a:81:5e:ed:
81:5e:66:a5:1f:5a:90:55:d0:2c:86:ec:1d:22:f8:c7:c4:5a:
cf:bc:3c:16:70:40:39:13:3e:2e:f2:d4:3e:a0:ed:80:86:98:
da:0a:25:db:1e:22:8e:52:ea:81:c9:e0:e6:89:30:3c:c8:20:
a2:dd:0e:ee:6e:a4:6b:9a:a7:61:f3:6e:8d:0d:a4:e9:0e:6f:
a0:d8:94:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:37 2026 by rpki-client