Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
File: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft (raw, json)
Hash identifier: 0iWIVrxGnhP9EhOxeV+qbJAWtzRQ4TeH7wN6z6371xY=
Subject key identifier: 6C:6E:9B:B9:5A:78:55:FA:BF:85:52:E5:43:B7:DA:9F:C1:F8:F9:45
Authority key identifier: 09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
Certificate issuer: /CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Certificate serial: 019D2928FDE094895B5360EC03B9F428EADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
Manifest number: 14FF
Signing time: Thu 26 Mar 2026 08:00:45 +0000
Manifest this update: Thu 26 Mar 2026 08:00:45 +0000
Manifest next update: Fri 27 Mar 2026 08:00:45 +0000
Files and hashes: 1: CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl (hash: poICGW2UttZACobozjmGO8YU2tJcL+3SeDIvmqSTiso=)
2: _LogJ5TTm-YKHsd3WnMm0NAuJ3w.roa (hash: O4S4fljr93AbzCU3et6i3bfKYTRHViAV0Kj/p7btiD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:fd:e0:94:89:5b:53:60:ec:03:b9:f4:28:ea:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4a8d6706d9d0f9c1091ca69951f4abd59d42b
Validity
Not Before: Mar 26 08:00:45 2026 GMT
Not After : Mar 27 08:00:45 2026 GMT
Subject: CN=6c6e9bb95a7855fabf8552e543b7da9fc1f8f945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ca:e5:ac:a2:3b:00:4d:e6:b5:18:71:7f:60:
91:59:1e:ae:ca:96:62:0c:1f:ca:de:b6:26:d5:af:
9c:d6:17:44:fc:f4:e5:29:82:b8:8a:d1:76:37:1e:
4c:7d:b6:e2:9e:ed:f2:66:15:36:c6:93:a8:f5:3b:
67:12:b3:5c:11:82:1b:ee:0d:b1:a5:58:a3:3e:3c:
ba:e1:cd:36:da:5a:56:9d:17:58:ba:ac:ae:3d:3a:
a0:d2:13:9f:10:42:56:71:0e:55:0f:8b:3d:d7:30:
32:cd:d6:e0:d7:e3:73:72:7d:96:02:a7:7b:5e:20:
19:dc:61:7f:50:ad:1f:d8:08:f8:e9:8e:3b:e7:7e:
19:53:da:a9:79:d8:a0:74:ea:de:ea:52:d6:4d:21:
d6:a1:04:62:34:6e:cb:86:7d:b5:72:f1:9a:3c:b2:
bb:da:22:26:17:c9:a8:df:1f:33:33:5d:9c:9b:87:
24:fe:7f:3d:9f:e1:f2:d1:eb:47:89:21:77:ba:b0:
f1:49:85:62:42:8e:f4:ed:55:a6:ef:03:13:12:5f:
89:f5:b9:e9:37:93:1f:8a:be:a2:d8:8f:24:9c:74:
b6:c4:c5:5b:be:cb:a8:ed:bb:f2:fd:aa:29:ca:77:
9c:ea:cc:b6:71:a1:10:3b:5b:9f:9d:d8:3a:44:95:
5d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6E:9B:B9:5A:78:55:FA:BF:85:52:E5:43:B7:DA:9F:C1:F8:F9:45
X509v3 Authority Key Identifier:
keyid:09:E4:A8:D6:70:6D:9D:0F:9C:10:91:CA:69:95:1F:4A:BD:59:D4:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47eb7b-c3ba-478a-8178-404d31280e61/1/CeSo1nBtnQ-cEJHKaZUfSr1Z1Cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:49:3d:43:9a:94:da:16:f4:51:e0:50:86:2b:67:f3:32:d5:
ce:bf:21:bd:fb:4b:2e:05:48:47:d9:f4:f6:40:2d:f5:ba:ff:
60:28:ef:fc:e0:66:8f:85:b2:95:5c:9d:4d:c0:d3:58:6c:43:
af:95:4a:85:37:5b:78:38:4d:90:af:b1:c3:69:0e:8e:e9:b6:
34:5a:00:50:ee:17:1f:f6:02:35:19:08:6c:2f:07:c7:63:e2:
09:5c:0b:38:aa:4c:db:27:59:2c:9e:6a:83:21:15:a0:8b:75:
52:a3:7c:46:66:34:57:a5:1e:36:b2:0b:cd:6b:d9:19:2e:8f:
86:12:95:3e:36:9e:fb:14:c1:d2:89:6e:36:27:20:86:a8:f2:
51:d6:e7:79:e4:e8:e7:3e:0c:1c:e6:50:5e:67:49:8e:54:91:
88:c7:a5:75:8a:e1:57:c6:f3:d4:51:a6:08:56:68:1d:9a:c6:
2f:d8:a6:ce:0d:e4:b7:ac:c4:6e:fb:d9:b1:49:cd:95:f6:f4:
53:c5:5d:a5:0e:00:14:d9:21:35:0e:7b:9a:0b:84:11:29:a2:
de:c3:ea:1d:32:6c:47:9c:52:1f:ad:71:cc:a7:04:5b:35:25:
cb:0c:71:04:75:1f:28:49:e5:1b:f1:d3:2b:69:fd:52:24:94:
93:18:0f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:45 2026 by rpki-client