Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
File: CEaS7DDzfffcteR600auvetx_DA.mft (raw, json)
Hash identifier: RKYKIYDpLwXQAXtavwLIOXkKFOBjMp7JkbzJ8L8iFmQ=
Subject key identifier: D6:56:D7:4E:A1:2F:15:C0:A4:FA:57:60:A1:AD:C2:ED:AA:AA:F5:5B
Authority key identifier: 08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
Certificate issuer: /CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Certificate serial: 019D2960F971354C520B2B9DDAEBB77DC1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 09:01:54 +0000
Manifest this update: Thu 26 Mar 2026 09:01:54 +0000
Manifest next update: Fri 27 Mar 2026 09:01:54 +0000
Files and hashes: 1: CEaS7DDzfffcteR600auvetx_DA.crl (hash: tNeKSVL6MlaoJHvuSQUDsArgt3ZrVggQuhsTefLdUIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:f9:71:35:4c:52:0b:2b:9d:da:eb:b7:7d:c1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Validity
Not Before: Mar 26 09:01:54 2026 GMT
Not After : Mar 27 09:01:54 2026 GMT
Subject: CN=d656d74ea12f15c0a4fa5760a1adc2edaaaaf55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:51:e8:5d:eb:ed:ff:48:0c:4c:72:60:7c:
38:ae:09:f4:bb:06:f3:4b:ba:30:d5:8f:47:34:b2:
c8:f1:3a:82:f5:a3:62:d7:80:56:d6:28:25:11:1a:
92:38:e7:6f:74:96:96:d9:ee:83:8e:be:ac:2c:e9:
49:9d:40:3d:3f:bf:e5:e1:82:44:28:e0:5a:eb:a2:
9c:76:cc:67:47:8e:d6:43:e5:4d:1b:bf:cf:5c:90:
f9:12:aa:03:e6:dd:65:0a:1a:58:0d:fc:cf:b4:5d:
68:86:35:57:7a:f2:c8:45:36:b9:dd:df:94:60:9c:
e5:c9:13:cf:be:e1:b6:47:5e:ad:25:be:c8:f6:ee:
a4:f7:9b:be:e1:7d:e1:e5:e9:ee:ae:36:2a:63:0a:
a0:cf:29:62:20:b3:0e:7a:b6:38:89:ea:64:ac:ce:
a9:fa:8f:86:8b:e4:20:1a:59:8d:0a:e2:5b:84:ab:
08:68:c3:44:59:2f:74:1c:29:84:5f:6a:5f:c4:e4:
32:e8:6c:12:2f:75:ec:2a:7f:20:9f:9a:7a:15:b3:
20:11:a6:c4:ed:12:35:1c:d8:0e:13:1b:a3:e1:a2:
3a:35:eb:27:02:27:2d:3f:10:69:9b:79:45:7b:d3:
4e:31:dd:07:f3:d3:3f:96:bc:21:3b:95:c1:b7:6a:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:56:D7:4E:A1:2F:15:C0:A4:FA:57:60:A1:AD:C2:ED:AA:AA:F5:5B
X509v3 Authority Key Identifier:
keyid:08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:52:b3:49:87:e1:10:a6:bb:eb:23:c0:a7:89:54:f6:cf:98:
07:b1:6e:f6:39:20:09:33:53:a1:62:13:f9:47:22:8c:0c:df:
e1:92:73:25:dd:4e:1a:f7:ac:b2:4e:3c:56:63:b6:e4:80:55:
6f:2c:73:b3:82:ee:5b:c9:bb:5e:88:0e:39:20:e0:4f:28:bd:
6c:fa:98:5e:d5:f3:70:2f:3a:08:74:a6:6b:32:b5:77:6d:c2:
a0:3d:05:5d:78:51:24:86:f3:27:97:6a:77:e8:38:c4:4d:70:
cc:d3:12:71:09:1e:7f:c4:b0:eb:b0:e7:ac:4f:f9:d1:9e:13:
af:c9:4d:53:16:54:05:ce:00:cd:13:f1:5b:01:ee:f9:29:58:
b8:bc:92:ad:65:7f:8e:17:9c:4e:7b:6f:f8:bf:74:e0:fa:05:
ae:73:98:a1:95:9e:bd:fe:94:cd:cc:06:9c:3a:6f:6d:da:69:
4d:f8:f3:b2:49:55:23:fd:dc:97:76:8d:f1:f7:26:5e:a4:1e:
a9:d9:90:62:94:07:a3:c1:9c:3d:c1:1a:cf:80:ba:66:5e:ce:
5a:2f:41:7f:53:19:b3:ea:a1:28:76:44:f5:74:76:7b:4f:d5:
5c:c6:a6:99:1d:8a:c6:dc:d0:70:10:cc:4e:05:52:62:3c:ce:
f6:c3:be:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:38:28 2026 by rpki-client