Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: LpSKw8dbR3IdQYMEPqV2nwXCNBj/PF0j64piOS0Xp2A=
Subject key identifier: 12:E6:9A:9F:D5:1C:9E:0A:8D:92:E8:81:3D:BF:02:DD:2B:AD:B9:3B
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 01A1CE8F1643E849ABD3856B94F4CCE6896F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 14EA
Signing time: Thu 12 Nov 2026 07:00:46 +0000
Manifest this update: Thu 12 Nov 2026 07:00:46 +0000
Manifest next update: Fri 13 Nov 2026 07:00:46 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: Cnb3lLpC53ULcmrGu+Xj71kyWgyYRfu2QEDsNr+omJw=)
2: kYXxc9kN_b_GIXTl_UJBrpB9O60.roa (hash: Vox/MzBDeHhsPb0IJMly5kcnp/IEEHRUT1ACAP0+pe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ce:8f:16:43:e8:49:ab:d3:85:6b:94:f4:cc:e6:89:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Nov 12 07:00:46 2026 GMT
Not After : Nov 13 07:00:46 2026 GMT
Subject: CN=12e69a9fd51c9e0a8d92e8813dbf02dd2badb93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:dc:16:fa:a2:b6:bc:de:f9:f2:72:ba:96:
af:63:ea:71:1e:24:8c:02:a8:80:ca:d5:8e:b0:f9:
99:9e:a8:21:d9:11:43:0b:0d:7d:06:44:c5:72:17:
bf:cb:2d:45:59:72:88:51:bc:2e:c0:f6:56:41:c0:
62:17:55:ee:b0:2d:dc:34:81:98:28:ad:42:a5:52:
34:35:e2:c5:54:3f:c5:ab:ae:1d:81:2a:bf:44:64:
a4:fd:33:15:c9:8f:e6:a5:d5:26:c9:83:89:de:0e:
68:16:79:c5:fa:0c:83:18:b0:d0:ec:0e:9e:71:6e:
43:8e:85:b2:8c:22:3b:0a:1a:87:52:f6:a6:d2:a7:
ae:e4:86:77:dc:63:76:5e:ec:00:f3:52:34:1c:1e:
3f:b0:bb:ca:2e:21:1a:ab:35:3f:1c:1d:f9:f8:47:
c9:fc:16:97:93:47:89:72:a4:35:23:1b:f1:e8:c3:
49:48:81:b2:fd:85:52:ab:c6:2e:d7:6c:7a:e7:58:
f7:36:cb:fc:75:b4:37:7f:c2:90:0a:99:92:b8:b4:
78:13:4e:c3:62:d1:d3:0c:39:8a:3e:96:b3:35:75:
5a:12:fa:84:26:94:0a:08:0a:f3:a6:fb:c0:84:0f:
14:c8:e7:93:6c:b9:84:f6:ef:7c:96:38:f6:48:a4:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E6:9A:9F:D5:1C:9E:0A:8D:92:E8:81:3D:BF:02:DD:2B:AD:B9:3B
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:34:75:5f:e7:84:ea:db:c9:fd:2b:01:84:9a:43:c4:e1:2d:
08:a2:3c:b1:e5:ef:bf:40:ff:5c:bc:48:43:97:3d:10:c6:10:
2f:60:bd:9d:33:23:84:f6:61:de:4d:50:3c:12:dd:bb:ee:7f:
46:75:18:d2:8b:17:f1:f0:24:c8:6d:bc:88:5e:7d:4d:e4:42:
b3:e2:05:b4:ef:66:8b:64:f6:52:2e:f1:9e:29:c4:5f:0d:34:
d3:af:ac:6e:7e:16:2c:16:ef:d7:4c:89:43:c1:5e:d6:d8:9d:
57:ee:9d:c8:2f:54:c4:73:e0:84:40:56:6a:34:d5:9f:f0:8b:
a8:d2:13:f8:e9:dd:04:57:b9:be:22:c8:80:e7:f6:b8:4c:24:
14:d2:0d:ba:34:83:60:bb:75:85:b4:11:69:d1:6d:6b:ca:af:
0e:af:ff:67:52:94:f6:b4:f5:e7:87:11:de:a2:4a:35:bf:c3:
81:1d:a8:27:b4:c6:9a:cc:c4:2f:01:4f:30:9a:2e:a8:04:b9:
aa:94:42:41:b1:88:92:49:e1:67:a0:dc:cf:cc:a2:8f:f0:2e:
1a:4e:e8:02:3d:ad:e5:62:7b:2a:bd:72:56:de:65:91:00:26:
86:d9:b9:32:08:10:be:14:4e:6b:95:3e:2d:4a:5c:cd:75:09:
7a:91:1c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 15:57:16 2026 by rpki-client