Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft
File: CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft (raw, json)
Hash identifier: hIFKq0e+4ZOKpitm//R7ctVdbF3aMV7usJ1LX/lh3po=
Subject key identifier: 4C:14:73:FA:4B:65:D3:DB:31:C6:FF:9D:71:27:61:52:A8:98:30:22
Authority key identifier: 08:4B:8F:D5:C0:E9:DD:7C:C7:31:15:1F:EC:90:F9:17:D5:1E:B9:66
Certificate issuer: /CN=084b8fd5c0e9dd7cc731151fec90f917d51eb966
Certificate serial: 01A0CC6C46E2E4CFC0B2207F83394B3286DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEuP1cDp3XzHMRUf7JD5F9UeuWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft
Manifest number: 01A1
Signing time: Wed 23 Sep 2026 04:00:43 +0000
Manifest this update: Wed 23 Sep 2026 04:00:43 +0000
Manifest next update: Thu 24 Sep 2026 04:00:43 +0000
Files and hashes: 1: CEuP1cDp3XzHMRUf7JD5F9UeuWY.crl (hash: 3IDvBe49Xc4N5o7uipsM4yGQEilu4yphZN8hELbFCFg=)
2: wPgKp0DInXEGWf_KqblgFa6hMEk.roa (hash: 0rfdyCDjQOsaTQYwQErDbHcj+/13aKWJvVISeShUA3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEuP1cDp3XzHMRUf7JD5F9UeuWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:46:e2:e4:cf:c0:b2:20:7f:83:39:4b:32:86:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084b8fd5c0e9dd7cc731151fec90f917d51eb966
Validity
Not Before: Sep 23 04:00:43 2026 GMT
Not After : Sep 24 04:00:43 2026 GMT
Subject: CN=4c1473fa4b65d3db31c6ff9d71276152a8983022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:68:16:28:b4:6d:9a:99:bf:7b:89:6b:2e:91:
42:ad:ff:ad:7f:ea:cb:54:48:f4:53:5a:d1:eb:e7:
57:fe:3e:e9:4b:d7:bd:29:c4:bb:96:44:63:b5:8b:
34:38:5f:92:cd:d6:f5:da:27:94:86:1b:d6:d2:cb:
68:2d:d9:83:f6:06:dd:c5:77:4b:cc:76:7b:0d:b8:
30:e4:0f:8c:9b:3d:43:62:c3:1d:3c:e1:e7:c3:43:
7c:6d:87:37:6e:dc:5c:23:73:d3:fc:85:ac:9a:00:
a9:da:a0:e8:a5:99:2a:17:21:ee:d0:e3:e7:0b:e7:
66:a6:ae:45:8b:2d:ee:bc:d9:5b:9f:c7:86:c7:d2:
06:38:d5:a8:df:d6:9d:fa:e6:ae:68:4a:32:e4:e2:
3a:03:31:2b:b0:a7:6a:04:52:05:a0:28:91:db:a6:
40:10:0f:16:6f:50:ab:4d:bf:eb:30:68:2a:8d:43:
a4:d3:ed:09:60:8b:45:ab:29:35:50:e4:f0:b7:bd:
65:fe:88:c2:1a:9c:94:d7:f2:94:9e:ad:69:75:e7:
a3:91:9e:7f:43:0a:29:20:47:72:ca:1d:b9:9f:27:
40:0a:a4:01:73:1e:82:01:1b:1c:1a:14:9e:e5:b1:
16:ce:3e:27:14:2e:6f:99:19:09:c6:c6:7f:c3:f4:
0a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:14:73:FA:4B:65:D3:DB:31:C6:FF:9D:71:27:61:52:A8:98:30:22
X509v3 Authority Key Identifier:
keyid:08:4B:8F:D5:C0:E9:DD:7C:C7:31:15:1F:EC:90:F9:17:D5:1E:B9:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEuP1cDp3XzHMRUf7JD5F9UeuWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:4c:9c:e8:93:e7:75:74:c9:e8:fb:fa:15:83:50:82:d4:eb:
84:24:f5:3e:ec:c6:fd:8c:43:bb:e0:4f:32:cf:87:3e:73:25:
9c:ce:4e:3d:35:68:10:59:4b:58:ae:6e:ac:a5:69:89:6b:2f:
5d:f4:6c:8a:9b:32:c5:7a:e4:36:1f:ee:12:fe:06:9f:d7:51:
0b:40:09:f1:38:61:d2:b7:e9:8c:dc:d4:16:d7:52:21:9d:77:
6a:82:9e:cc:19:96:37:25:ae:19:9f:cb:b3:1c:a4:5d:0a:56:
a1:b0:53:8b:37:2c:e3:3b:db:78:64:b3:c8:0e:72:9c:0e:77:
38:76:db:62:de:14:97:22:7d:50:62:70:e3:09:96:41:3f:a5:
47:52:88:21:be:f3:7a:e7:ea:92:60:98:c4:90:56:11:b1:bd:
58:bb:8b:34:77:0d:33:63:2e:fe:45:e3:a1:18:97:05:d5:5a:
75:06:6e:60:54:cd:55:32:bd:f6:1b:b2:b4:9b:a9:38:04:a9:
19:bc:50:09:dc:e7:8a:e6:5e:d7:67:60:8c:3d:1a:a9:8c:1a:
84:3c:a8:99:74:a2:4b:3d:83:ad:ee:74:62:07:16:d9:9e:48:
98:06:d7:06:cf:d3:50:65:77:fe:83:b5:34:24:41:1d:4e:96:
24:39:e8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:01:37 2026 by rpki-client