Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier: 8E9C46CIyubQh3eqVWgOcejl6yGlYowt6Fmig7bJ23Q=
Subject key identifier: 08:35:24:CA:3E:BC:1C:33:AC:24:BF:CC:FF:9C:77:6A:59:A8:3F:43
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial: 019D375336DD384784B094DAF5CCF14174BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number: 156A
Signing time: Sun 29 Mar 2026 02:01:33 +0000
Manifest this update: Sun 29 Mar 2026 02:01:33 +0000
Manifest next update: Mon 30 Mar 2026 02:01:33 +0000
Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: nAI0t/CFSZNttUCgcgx2H7butzMkLuq6Pq6t0AfkD+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:36:dd:38:47:84:b0:94:da:f5:cc:f1:41:74:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Validity
Not Before: Mar 29 02:01:33 2026 GMT
Not After : Mar 30 02:01:33 2026 GMT
Subject: CN=083524ca3ebc1c33ac24bfccff9c776a59a83f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:dc:65:41:35:51:9c:fa:42:83:e5:ae:b3:
e5:f7:59:fb:d0:3f:ce:5c:cc:89:87:7f:1b:c8:58:
90:d3:01:91:b6:86:8c:62:ad:16:a8:6d:a8:22:04:
bd:12:af:79:fa:bb:39:9d:e4:a1:7c:57:2d:d5:fe:
ae:ba:f0:92:89:85:ce:53:47:4c:ab:5b:f2:15:33:
e3:aa:ab:09:66:7e:60:d7:08:3d:3e:90:b3:79:1d:
0d:75:55:6a:37:7c:dd:52:28:e5:da:66:dc:f0:e4:
0b:b7:80:dc:13:2d:e7:c3:81:8f:d7:0a:ca:91:0a:
55:3c:86:3a:99:8c:fb:7e:37:a4:14:17:76:16:b9:
84:dd:e5:0c:c9:c2:86:4f:4d:4f:9e:29:6f:84:bc:
0b:b8:99:fb:04:1b:10:53:9a:96:c4:cd:c6:e0:b9:
23:73:88:d7:0f:82:4b:90:03:98:9f:25:88:51:22:
80:e7:ff:bb:bf:68:e7:bf:ca:f2:c9:29:e5:95:b6:
80:ac:6a:6b:66:a7:68:8c:e7:ae:e5:3a:e1:f3:0a:
23:dd:02:73:f0:70:11:1c:53:39:05:8f:f3:88:ba:
f2:f0:73:5e:54:b8:60:0f:6a:e3:95:33:45:e5:a4:
fc:87:46:1b:3d:a1:06:78:44:41:2a:bd:0e:88:24:
f8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:35:24:CA:3E:BC:1C:33:AC:24:BF:CC:FF:9C:77:6A:59:A8:3F:43
X509v3 Authority Key Identifier:
keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:46:0b:ca:2a:1d:d5:11:cc:ff:8d:ef:be:c3:dd:95:a6:fd:
d1:7b:fe:11:61:1f:ec:5b:d6:30:e8:13:15:23:a4:98:86:d0:
26:38:43:02:26:17:68:cd:02:33:b1:f6:77:05:7c:04:c3:17:
0b:8f:28:f1:9c:78:18:c4:a9:b9:3b:40:73:c8:f2:78:c3:48:
57:a8:5a:96:99:c8:f5:50:0b:20:36:50:2d:17:82:c4:fb:6c:
74:8b:17:46:ab:4e:17:06:8c:79:56:1b:fe:ff:40:1d:ac:d8:
fd:87:1b:ec:99:61:a9:92:5b:76:57:d8:54:05:28:c5:7d:44:
29:89:fa:80:02:97:b6:8e:d9:2e:9d:e8:29:20:26:e7:08:15:
6a:f3:88:6b:a2:34:17:b0:7f:80:22:c7:d2:ab:2b:48:1b:0a:
ab:6f:ca:9f:b5:2d:34:f6:9a:cb:61:2a:57:69:66:fa:c9:79:
dd:28:66:a6:8f:70:70:07:31:56:ad:90:61:c9:62:ee:55:21:
10:c2:b9:72:1b:cd:3b:c2:51:e3:d9:09:63:c4:38:06:e9:f6:
47:e0:96:cd:2d:f6:1d:25:1f:dc:34:97:70:3b:be:b3:8e:9c:
60:b3:f4:20:d1:af:f5:d6:fd:3b:cb:86:4f:64:8d:55:eb:06:
71:78:11:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UzbdOEeEsJTa9czxQXS7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NGEwNTc0N2VmODhhMmViYzlmMmZhZWY2MjAxOWRjODdk
MWEyNTMwHhcNMjYwMzI5MDIwMTMzWhcNMjYwMzMwMDIwMTMzWjAzMTEwLwYDVQQD
EygwODM1MjRjYTNlYmMxYzMzYWMyNGJmY2NmZjljNzc2YTU5YTgzZjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AXcZUE1UZz6QoPlrrPl91n70D/O
XMyJh38byFiQ0wGRtoaMYq0WqG2oIgS9Eq95+rs5neShfFct1f6uuvCSiYXOU0dM
q1vyFTPjqqsJZn5g1wg9PpCzeR0NdVVqN3zdUijl2mbc8OQLt4DcEy3nw4GP1wrK
kQpVPIY6mYz7fjekFBd2FrmE3eUMycKGT01PnilvhLwLuJn7BBsQU5qWxM3G4Lkj
c4jXD4JLkAOYnyWIUSKA5/+7v2jnv8ryySnllbaArGprZqdojOeu5Trh8woj3QJz
8HARHFM5BY/ziLry8HNeVLhgD2rjlTNF5aT8h0YbPaEGeERBKr0OiCT4uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAg1JMo+vBwzrCS/zP+cd2pZqD9DMB8GA1UdIwQY
MBaAFAhKBXR++IouvJ8vrvYgGdyH0aJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VvRmRINzRpaTY4bnktdTlpQVozSWZSb2xNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zMGE2OTAtY2QzMS00OWJiLWE5YTAt
M2JkM2UzZTRhNDBiLzEvQ0VvRmRINzRpaTY4bnktdTlpQVozSWZSb2xNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8zMGE2OTAtY2QzMS00OWJiLWE5YTAtM2JkM2UzZTRhNDBi
LzEvQ0VvRmRINzRpaTY4bnktdTlpQVozSWZSb2xNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEYLyiod
1RHM/43vvsPdlab90Xv+EWEf7FvWMOgTFSOkmIbQJjhDAiYXaM0CM7H2dwV8BMMX
C48o8Zx4GMSpuTtAc8jyeMNIV6halpnI9VALIDZQLReCxPtsdIsXRqtOFwaMeVYb
/v9AHazY/Ycb7JlhqZJbdlfYVAUoxX1EKYn6gAKXto7ZLp3oKSAm5wgVavOIa6I0
F7B/gCLH0qsrSBsKq2/Kn7UtNPaay2EqV2lm+sl53Shmpo9wcAcxVq2QYcli7lUh
EMK5chvNO8JR49kJY8Q4Bun2R+CWzS32HSUf3DSXcDu+s46cYLP0INGv9db9O8uG
T2SNVesGcXgRvw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:35 2026 by rpki-client