Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
File: CEoFdH74ii68ny-u9iAZ3IfRolM.mft (raw, json)
Hash identifier: NLnDTTnCgwHc6B3JM/dnGGByF5JFPDVqU5AzAuPC06s=
Subject key identifier: 67:78:A4:3E:7A:75:F8:7A:72:A2:EA:5A:80:F8:BF:D6:CC:30:1D:13
Authority key identifier: 08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
Certificate issuer: /CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Certificate serial: 019F18302B3413C2BF68B0F4F1F79C723BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
Manifest number: 1663
Signing time: Tue 30 Jun 2026 11:00:37 +0000
Manifest this update: Tue 30 Jun 2026 11:00:37 +0000
Manifest next update: Wed 01 Jul 2026 11:00:37 +0000
Files and hashes: 1: CEoFdH74ii68ny-u9iAZ3IfRolM.crl (hash: Ahnme8n8ZPtAP1Ou4RSb4uEj4IgiGzI3lQDSHcfS6QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:2b:34:13:c2:bf:68:b0:f4:f1:f7:9c:72:3b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084a05747ef88a2ebc9f2faef62019dc87d1a253
Validity
Not Before: Jun 30 11:00:37 2026 GMT
Not After : Jul 1 11:00:37 2026 GMT
Subject: CN=6778a43e7a75f87a72a2ea5a80f8bfd6cc301d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:d8:88:c6:ea:9c:79:2f:ff:7d:2e:12:0f:
76:1a:53:c0:0b:0e:6b:93:7a:d3:35:9d:a6:d5:f1:
95:77:92:32:0c:f1:48:fb:96:9a:b1:aa:30:8e:0f:
7b:84:40:fc:7f:08:60:6b:fa:d7:33:9d:6f:7d:f1:
df:46:e8:6d:5c:53:53:1b:68:a6:15:ff:62:f0:98:
fd:d3:7e:78:32:7c:e3:e0:ba:2d:7a:72:5e:a9:5b:
6e:c6:0e:71:46:54:d2:44:41:a4:81:85:96:4f:0b:
90:50:0e:d6:c5:9d:9b:ae:e4:2a:47:ce:8e:a7:bd:
4b:27:71:4a:a6:f1:d2:ab:8b:65:18:0d:81:c8:bf:
92:e1:8a:a4:28:66:89:56:c0:a0:cb:bf:8f:b8:e3:
45:24:9b:00:78:1e:53:73:b7:6b:c1:69:97:a6:52:
fc:f9:3e:0b:6a:c2:7c:71:a5:48:67:55:97:e7:f1:
bb:68:4e:3a:32:8a:99:06:f1:70:f1:0b:87:19:74:
06:62:11:bf:1c:54:a3:e1:6f:8f:78:b6:b7:36:93:
69:fc:68:83:06:59:37:24:63:38:6b:9c:95:f2:8c:
20:96:ad:9c:16:08:b2:12:c6:91:2e:65:4c:3c:ff:
e7:59:8c:33:4f:f0:9c:27:b0:93:ef:7f:98:2d:c3:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:78:A4:3E:7A:75:F8:7A:72:A2:EA:5A:80:F8:BF:D6:CC:30:1D:13
X509v3 Authority Key Identifier:
keyid:08:4A:05:74:7E:F8:8A:2E:BC:9F:2F:AE:F6:20:19:DC:87:D1:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEoFdH74ii68ny-u9iAZ3IfRolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/30a690-cd31-49bb-a9a0-3bd3e3e4a40b/1/CEoFdH74ii68ny-u9iAZ3IfRolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:92:9f:d8:e9:08:45:da:4b:9a:45:92:bf:f3:03:25:a9:3b:
6c:9a:b5:30:85:2a:26:27:70:35:ed:d9:35:04:a0:c9:5f:d6:
00:14:9c:b5:b5:1b:1f:01:c8:93:50:4e:cb:ae:a8:6d:c7:05:
4a:76:82:7e:a1:53:15:3c:28:6d:2c:19:81:39:2c:06:c9:11:
e4:45:13:40:ba:db:fc:7a:75:9d:48:85:00:30:6e:b6:00:f0:
b1:4e:d8:a7:ee:49:59:b0:7c:41:e4:42:bc:54:67:55:db:96:
e5:8c:60:88:a3:e3:98:a2:24:b9:38:62:6d:aa:62:ce:63:3b:
a7:0f:8e:b5:fd:e2:e5:41:58:0e:29:ed:e4:cc:17:d8:fb:18:
7c:b4:8d:aa:1d:97:fe:3c:13:4f:68:79:28:75:73:da:82:7f:
f5:05:9c:5a:64:64:b7:09:5d:96:d7:54:0f:6b:3c:02:fc:50:
6d:c7:9a:22:a2:20:29:2b:0d:c2:a9:8d:5f:31:16:a8:53:40:
33:ac:32:b2:fd:3e:ea:f2:9a:31:df:a1:be:b8:32:da:50:d8:
a9:73:2c:2a:5e:86:c0:b6:9d:b8:19:c0:a9:df:8e:b2:1b:dd:
45:9c:7a:ea:0e:d2:bc:b3:eb:b2:ed:19:b1:ec:87:12:e0:7f:
57:72:39:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:26 2026 by rpki-client