Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft
File: CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft (raw, json)
Hash identifier: 7n2XZ+Q5Q2ofpQ2BI3qd+vtH/hVjSEu0++/wZB/2UFI=
Subject key identifier: A4:D2:D9:07:57:6C:A7:8B:77:C9:2D:50:70:B7:24:3B:9B:2B:42:93
Authority key identifier: 08:4B:8F:D5:C0:E9:DD:7C:C7:31:15:1F:EC:90:F9:17:D5:1E:B9:66
Certificate issuer: /CN=084b8fd5c0e9dd7cc731151fec90f917d51eb966
Certificate serial: 019E1CEC1441F7B16452B95B47DC2068F85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEuP1cDp3XzHMRUf7JD5F9UeuWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft
Manifest number: 3D
Signing time: Tue 12 May 2026 16:01:34 +0000
Manifest this update: Tue 12 May 2026 16:01:34 +0000
Manifest next update: Wed 13 May 2026 16:01:34 +0000
Files and hashes: 1: CEuP1cDp3XzHMRUf7JD5F9UeuWY.crl (hash: ASUdV4C+hZfIPDWZWDXgCRbL+PRnOdIfyUgpl7NtOaM=)
2: wPgKp0DInXEGWf_KqblgFa6hMEk.roa (hash: 0rfdyCDjQOsaTQYwQErDbHcj+/13aKWJvVISeShUA3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEuP1cDp3XzHMRUf7JD5F9UeuWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:14:41:f7:b1:64:52:b9:5b:47:dc:20:68:f8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084b8fd5c0e9dd7cc731151fec90f917d51eb966
Validity
Not Before: May 12 16:01:34 2026 GMT
Not After : May 13 16:01:34 2026 GMT
Subject: CN=a4d2d907576ca78b77c92d5070b7243b9b2b4293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:78:c8:56:98:e9:9d:53:05:76:3d:4b:90:f8:
08:f0:86:8b:14:22:c2:db:ae:b4:47:49:5c:55:19:
bd:f8:b8:81:07:98:b6:80:30:4f:dc:db:4f:24:0f:
9a:fe:b5:da:11:83:f4:87:3b:db:4c:c1:78:4e:bb:
52:64:d1:3a:e9:fe:8b:c8:24:be:f2:3e:48:86:f7:
12:c2:1e:0c:bc:7b:59:f3:00:80:6f:c0:bd:4b:57:
0b:a4:43:39:5b:96:f3:47:43:55:ba:b4:ff:51:ed:
68:a8:76:fa:b7:09:3b:28:49:b9:ec:52:7b:38:11:
c9:77:ce:fa:f7:3a:16:b4:27:b1:ec:62:ba:f5:1d:
0a:da:70:68:77:52:10:eb:9f:85:54:15:c5:f7:62:
aa:a4:4d:5e:ae:8f:5a:39:4d:91:f5:9b:fc:8c:c3:
9c:b6:92:de:28:e4:cf:55:d1:bb:ad:41:8a:34:4e:
3f:8f:7f:9e:a3:67:6d:66:5d:e2:11:bc:00:6a:a3:
53:f9:96:2f:33:1d:29:34:3f:31:bd:7e:1f:87:c3:
e6:d8:5f:ff:01:d2:07:c3:05:a6:2d:a2:b9:44:b1:
47:97:5b:ae:62:ab:cc:b7:14:cd:af:f7:e9:da:0e:
b5:56:4a:af:88:e7:62:e0:32:01:28:ea:fa:bd:fe:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D2:D9:07:57:6C:A7:8B:77:C9:2D:50:70:B7:24:3B:9B:2B:42:93
X509v3 Authority Key Identifier:
keyid:08:4B:8F:D5:C0:E9:DD:7C:C7:31:15:1F:EC:90:F9:17:D5:1E:B9:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEuP1cDp3XzHMRUf7JD5F9UeuWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:70:6d:5c:23:b1:2b:db:6e:ec:61:1c:21:68:70:96:f8:74:
f2:01:9d:6d:51:5b:0d:0b:0b:d3:b5:24:5c:45:92:ec:de:9a:
a3:51:25:ea:56:06:cf:45:9b:dc:88:a6:be:e2:0c:ab:93:fd:
82:3e:97:88:5e:a8:69:13:97:b8:dc:7f:4f:0a:59:c0:47:91:
59:62:5d:1e:12:94:0a:7d:94:8f:48:8e:08:09:f1:a6:1c:be:
6c:af:e8:a0:0a:9f:87:5d:4b:12:0e:5f:ad:ee:9f:a9:12:7c:
bb:12:f8:5f:2e:19:0e:e0:0d:87:5f:65:e7:41:9e:38:56:cf:
15:73:77:f2:f2:73:16:74:97:37:79:b8:f6:f9:e8:8d:cb:2c:
3f:29:47:48:86:c9:19:cd:2f:e4:9e:df:bd:0b:82:1f:56:2f:
00:7f:2c:b8:a3:fd:ef:ba:3c:52:a5:69:c8:49:ea:63:73:28:
33:a0:d2:5e:c2:19:27:e4:a5:d8:4f:f6:7c:5f:82:bb:e4:7d:
26:bf:b0:46:b9:ea:6e:93:f0:1d:20:99:0d:80:89:71:af:77:
fc:44:8c:8c:6f:b2:66:25:6c:c6:f5:43:0a:d7:b7:53:71:77:
68:e2:ea:9a:59:37:6c:a2:d1:fa:04:24:18:67:ac:ae:f2:af:
74:eb:c1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:15 2026 by rpki-client