Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: 6jPBy98mTFSBs1Drdp8xflbQM2W1tR+XCbGMKsP/Z0c=
Subject key identifier: 2A:90:DD:9C:A7:E7:89:38:3D:75:30:0A:7A:98:D7:2B:F3:3E:AC:B5
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 019E1C7E1A0F1EF4BE570D6B047115A28720
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 12FE
Signing time: Tue 12 May 2026 14:01:26 +0000
Manifest this update: Tue 12 May 2026 14:01:26 +0000
Manifest next update: Wed 13 May 2026 14:01:26 +0000
Files and hashes: 1: 1TUQTU00MEl499XUdrSRL1I8LFk.roa (hash: LR0SWWMB8Awe+6NzalLAwpz6bv1tNIh3m2MbySdjLTs=)
2: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: v5tfJ/YdDNZwfhW9fgbKAWsmuOqrtMgaV+WvRfTWLcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7e:1a:0f:1e:f4:be:57:0d:6b:04:71:15:a2:87:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: May 12 14:01:26 2026 GMT
Not After : May 13 14:01:26 2026 GMT
Subject: CN=2a90dd9ca7e789383d75300a7a98d72bf33eacb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e7:fd:0a:d0:ac:59:2f:18:65:d8:3c:a3:c3:
22:f5:08:74:01:9b:66:fa:24:66:d2:5b:90:14:15:
4d:62:9f:e5:f4:dc:3a:d7:1a:a5:9c:9e:df:46:4d:
39:6d:b2:b1:4c:90:eb:47:0d:54:c0:04:62:57:87:
ed:de:9a:ed:f2:d3:b0:a4:24:98:e9:87:9f:c9:d0:
6d:43:89:3a:19:64:9a:f8:f9:63:ba:59:04:bf:fb:
c5:d8:66:12:31:8c:05:dc:8c:3e:1c:23:60:e4:8b:
67:b7:63:ad:98:37:c7:dc:7c:c4:66:94:f0:af:20:
4f:0a:7d:06:9b:98:a1:69:2b:ac:d7:0c:a0:72:db:
ce:ab:34:40:6f:ac:07:24:b8:2e:97:f1:c8:55:2d:
fb:03:6d:d6:5d:f2:e7:bd:80:7f:a7:56:02:6b:3c:
85:c6:0f:6c:65:c8:bd:4d:cc:64:c0:db:4b:ad:9a:
e0:dc:a7:68:1c:d9:ec:00:7e:62:1a:4c:e3:3f:ca:
d3:cb:9b:65:76:73:fb:b0:2d:82:0c:07:9c:3a:b5:
ff:f5:ea:5f:8a:78:dc:e4:d6:a0:b4:24:3f:72:15:
66:67:cd:24:a6:97:56:10:19:3f:0b:0e:b7:2a:f6:
f8:ff:f8:96:cf:c7:e4:b4:fd:17:ec:b4:46:02:b2:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:90:DD:9C:A7:E7:89:38:3D:75:30:0A:7A:98:D7:2B:F3:3E:AC:B5
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:68:04:87:a7:08:0e:91:0f:c5:69:a4:ed:13:b0:c5:dc:94:
48:08:25:e0:1d:0b:78:b1:67:0a:57:c0:3b:46:bf:6a:15:9f:
96:50:a0:30:5e:66:b9:c1:0f:e6:ff:78:4f:97:89:7f:87:ca:
43:af:cb:56:d3:eb:dc:63:09:ee:c7:f2:76:94:9c:ce:97:f3:
29:aa:fd:ba:0b:f9:e8:bb:00:24:b3:ef:80:94:85:34:e9:a1:
61:24:f8:e4:89:8a:35:41:50:79:9c:fa:94:bc:07:f6:65:cd:
44:a6:12:62:17:64:39:e8:b5:62:45:17:ff:fb:cf:8c:6c:d7:
af:d5:41:9f:2b:23:a5:a3:4f:9c:81:d5:24:6f:88:e3:aa:eb:
37:67:51:14:ce:7a:75:ee:ea:79:5d:b8:c7:40:bc:72:89:ef:
c1:72:00:72:fb:e5:92:44:ea:90:ab:3f:d5:16:3c:9b:4c:ae:
eb:b5:d8:ca:30:48:44:ae:eb:9e:dd:12:32:cf:af:a2:a9:e6:
0b:dd:2f:80:38:10:b1:d4:7b:1a:5d:d1:ff:06:3b:4a:a1:c7:
1b:6a:eb:06:d7:4b:c8:e2:05:39:c9:02:32:bf:fa:a5:d8:f9:
80:21:22:e8:fc:37:9c:bf:0d:67:f0:a2:74:a3:46:67:66:5b:
5d:4f:70:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:22 2026 by rpki-client