Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: SxbrEPa9YbxMvZh0P8PIOblOMQRZw96ISfkAlZdT9zs=
Subject key identifier: C4:59:0D:4B:52:EA:83:64:1F:21:D3:4A:2C:8C:C3:B8:E6:5E:7D:F6
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 01A0CBC6F6A8FAAEFD68C55DFF615039C3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 1462
Signing time: Wed 23 Sep 2026 01:00:08 +0000
Manifest this update: Wed 23 Sep 2026 01:00:08 +0000
Manifest next update: Thu 24 Sep 2026 01:00:08 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: NfVp+SWv0LmxndbxtiiCMknBywgYHB/U0IHdtS3U2DI=)
2: PiR6PkVQRFqEfm9lMFMx7R_IaDM.roa (hash: 2obqgsdNVnsgyNIGbMXRSD+tRQgkX3zupnny+MExpEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c6:f6:a8:fa:ae:fd:68:c5:5d:ff:61:50:39:c3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Sep 23 01:00:08 2026 GMT
Not After : Sep 24 01:00:08 2026 GMT
Subject: CN=c4590d4b52ea83641f21d34a2c8cc3b8e65e7df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f5:f7:20:1a:a5:d4:b7:95:8f:66:92:1a:08:
bb:70:e2:8e:7e:e9:94:8d:38:0c:f4:0f:84:0c:43:
ca:d4:ad:8b:7b:0e:9b:08:6d:65:9f:8e:3a:d0:7a:
47:b5:44:97:8b:29:f9:f0:50:cc:2c:49:82:25:8c:
d7:25:d7:f8:94:79:fe:75:38:ff:27:d1:ec:00:f4:
30:89:07:08:6f:29:bb:48:cc:b2:c3:2f:32:2e:0f:
39:c3:6f:c6:a0:03:f7:62:cc:48:3a:44:4a:8a:e0:
23:e6:59:db:5d:14:30:01:ea:fc:e9:f6:2a:06:55:
32:cc:02:65:82:61:e8:39:73:ad:bf:b0:c8:d7:ff:
ba:ca:31:6c:e9:8d:d8:2a:30:9c:7f:79:60:69:e2:
de:3e:f2:28:96:29:d0:a7:44:45:28:55:a0:2a:ee:
01:cb:cf:c0:dc:a5:a3:db:6f:d8:95:84:ad:02:90:
f5:48:db:e8:60:0b:5a:dc:bb:5f:36:97:f7:35:db:
a2:0f:4b:bf:6b:d6:c1:95:a7:b7:97:f2:b1:6d:7f:
1d:b6:5f:e3:19:57:a3:c7:11:58:5a:4d:40:85:0d:
0b:3c:84:b3:1a:79:df:8f:ac:d3:02:28:19:ac:a1:
7a:f6:d6:7e:c8:25:7e:b2:4c:8c:53:d9:d9:c8:00:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:59:0D:4B:52:EA:83:64:1F:21:D3:4A:2C:8C:C3:B8:E6:5E:7D:F6
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5f:5b:ec:f0:a0:a8:e6:4e:64:34:13:70:f3:f3:c8:7b:c5:
7f:54:70:4b:d3:ef:c5:d0:fd:99:b0:e8:9b:ca:8e:86:c3:ae:
42:bb:c8:b3:f1:70:3e:9e:4a:ea:b8:24:47:c3:87:83:44:25:
7a:b4:a2:c4:fb:c1:98:a6:af:18:97:fd:75:1f:37:e5:a2:f8:
c6:bf:09:5e:b8:e2:a8:10:0a:e2:61:13:3b:67:5b:05:75:15:
85:06:72:64:fb:43:1c:d6:b1:77:e4:11:a0:ca:19:1b:fe:62:
57:18:39:62:12:28:e7:50:fa:c5:51:54:26:ca:e7:0f:6d:9f:
8c:60:2e:3c:7b:de:ba:55:20:41:f2:05:16:a8:1c:30:2a:b6:
31:d6:47:eb:4d:80:2e:14:5e:d6:7c:51:be:e9:55:0c:e2:3c:
bd:20:57:77:df:af:a7:01:78:03:79:07:b7:15:fc:4c:de:c1:
2d:24:5d:e6:d2:74:00:60:b3:5e:ab:93:bb:79:a6:f6:66:0c:
27:c4:c7:22:12:81:da:05:cf:64:db:6e:3f:37:80:a7:a1:5b:
68:1a:43:3b:a7:d6:44:aa:d3:64:e7:cb:72:76:0d:d0:97:b1:
fc:91:02:1f:1a:58:52:b2:0c:36:c5:07:7b:31:1e:fb:c5:13:
23:7f:0e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:49:46 2026 by rpki-client