Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: GuwejxhaIwWebQrGKi8y3IfWS2H8b72xzX6GtRqJq00=
Subject key identifier: D4:78:D6:F9:12:53:5D:FC:B4:FD:75:31:26:9E:F1:BD:BC:76:00:E1
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 019F90FED47F7B5F27C5A3338DD8E2CF2C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 13BF
Signing time: Thu 23 Jul 2026 22:00:47 +0000
Manifest this update: Thu 23 Jul 2026 22:00:47 +0000
Manifest next update: Fri 24 Jul 2026 22:00:47 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: okQIAY95pChPp5Prux0fuyXrZilqT9Y5Rod0/HFVIbI=)
2: PiR6PkVQRFqEfm9lMFMx7R_IaDM.roa (hash: 2obqgsdNVnsgyNIGbMXRSD+tRQgkX3zupnny+MExpEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:fe:d4:7f:7b:5f:27:c5:a3:33:8d:d8:e2:cf:2c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Jul 23 22:00:47 2026 GMT
Not After : Jul 24 22:00:47 2026 GMT
Subject: CN=d478d6f912535dfcb4fd7531269ef1bdbc7600e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:8a:99:a1:a5:4c:6b:57:b9:60:4e:c4:59:
d3:c7:bd:36:99:b8:0e:98:f3:b0:74:f5:9d:02:c4:
9e:e2:2b:9b:aa:f0:c3:aa:02:27:b5:53:6b:fa:61:
a8:94:ea:58:bf:55:23:15:eb:94:4a:9f:2e:8c:ac:
ca:e5:27:5d:8b:ad:f1:6b:de:8f:13:d3:79:06:85:
bb:f0:12:00:00:67:f4:8e:17:69:d9:72:1a:35:e4:
60:cb:fc:e1:08:f9:21:e0:4f:3b:7e:89:11:d7:7b:
83:c0:76:46:04:8c:9d:10:5a:e5:36:f8:6b:03:9d:
16:fc:ab:c5:e8:07:78:1e:e8:2f:42:27:ae:62:b2:
77:1e:29:d1:57:61:9f:c6:c9:8d:46:1c:e3:94:c3:
d5:c7:e0:68:4c:d1:06:da:9d:48:63:a5:1d:0e:41:
02:ee:48:df:59:78:b3:cf:13:4f:43:66:43:46:1c:
e8:60:c6:c2:76:0f:46:d7:eb:b4:d7:af:53:41:90:
52:e6:36:6d:9d:88:04:ff:83:35:09:8b:39:a9:fd:
f5:99:90:17:9c:e5:82:fa:5d:06:ed:1c:47:b4:a7:
8c:0d:29:bc:0a:a4:b7:a2:d6:6d:c7:a7:cf:84:da:
15:e7:c9:63:12:8d:ef:2a:21:b3:3c:f7:db:37:72:
7d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:78:D6:F9:12:53:5D:FC:B4:FD:75:31:26:9E:F1:BD:BC:76:00:E1
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:68:41:d3:28:48:a3:5b:6b:f3:f3:d3:65:a1:19:91:bb:14:
3b:02:37:b2:d3:99:d6:b5:78:b7:8b:3a:a9:d5:bd:b8:8c:26:
03:3e:1b:8a:e5:29:db:29:85:19:08:15:7f:bc:e8:59:6c:0e:
e0:aa:95:50:fe:62:24:98:68:2e:15:d0:f2:a9:d7:da:3c:00:
3f:85:93:82:00:67:93:a4:74:08:12:a2:d5:3b:c9:4f:6a:2d:
38:20:13:ea:22:e9:c9:ca:8a:01:e1:19:86:23:aa:c8:34:41:
95:04:9a:42:34:e4:23:a1:4b:1c:b4:a0:c1:10:7a:9e:f9:f5:
13:67:1b:34:8d:77:b5:1f:d3:67:7b:40:46:78:cc:70:a9:c2:
07:46:0a:79:a8:82:40:85:f8:f5:e3:0d:4e:44:e2:9d:66:5c:
8f:f6:f3:73:25:71:5c:ac:58:e4:7a:73:3d:99:80:a1:1c:c2:
e6:79:9e:4d:a0:7c:d2:6d:f7:8d:1b:2d:34:00:ff:75:88:16:
22:8e:37:81:27:af:e9:9b:d3:9b:85:39:8c:7b:ba:91:26:df:
1e:a1:e6:9c:ce:36:18:fa:85:fe:15:e3:e8:ed:20:ed:c0:bc:
f1:82:b9:c9:1e:e6:f5:07:b6:83:fe:ea:bb:ab:f8:a8:c8:be:
c9:e0:63:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:11:43 2026 by rpki-client