Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier: wB7tJBEU61Yk7FBTZ7bgEsJwHOwm/2GgBQLJ7wPnxEk=
Subject key identifier: 14:B3:16:C2:60:49:91:A2:28:E8:1B:25:42:C6:AA:98:2E:23:D1:7E
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 019D3909BEC3F7368A92D264CDF5D140CFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number: 09D8
Signing time: Sun 29 Mar 2026 10:00:33 +0000
Manifest this update: Sun 29 Mar 2026 10:00:33 +0000
Manifest next update: Mon 30 Mar 2026 10:00:33 +0000
Files and hashes: 1: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: oEJxcieIruKOBVuF6R6POeF6XwvIiWGvR2VUcmdD6M8=)
2: UyoOwt_mkkio7rcKttEYqMqc4tE.roa (hash: 3ZPFWtYV3D6s10XCwOHklQ6Iqj8jHJrAUWODxNNBQcY=)
3: u7wi03kSUsP8y2tILiBs4RyN014.roa (hash: pYeJLWg472+6gUx7OvkaeELMhWeboOiwVGtw7KA43sM=)
4: uaEkmuhb7WRqiclbUmM34EjbO5o.roa (hash: h2MPog8U0B3WrxFfdEojnmYSGAZiWQIlg+muWLvtr1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:be:c3:f7:36:8a:92:d2:64:cd:f5:d1:40:cf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Mar 29 10:00:33 2026 GMT
Not After : Mar 30 10:00:33 2026 GMT
Subject: CN=14b316c2604991a228e81b2542c6aa982e23d17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:68:a2:1d:23:97:24:38:f1:29:1d:9d:a7:
3b:8a:4b:6c:dc:15:e9:42:5b:79:8b:8d:6d:c1:14:
f3:52:60:cc:e2:66:fc:e3:9f:90:b3:6d:5a:db:1c:
98:94:14:28:b9:3d:8d:19:77:b8:dd:1c:cb:a6:38:
50:0c:98:69:4d:89:31:f6:9a:ef:7e:74:3e:b7:cb:
d9:c9:b9:d7:0a:da:0c:23:72:3c:37:1f:86:95:1f:
6e:2e:db:ef:1a:6a:f3:07:11:19:44:2a:66:b8:e3:
33:84:8d:8a:d7:c4:9b:86:01:2a:90:8f:c5:24:17:
55:bb:05:b7:0c:07:63:77:d1:6e:11:26:83:1d:59:
3e:2f:21:86:3c:ed:a2:09:0f:e7:02:6b:2c:ad:9f:
aa:b3:62:01:c4:bc:a0:bb:0e:4f:8d:d8:37:9a:8f:
7f:c6:9a:73:2a:8c:f4:a7:d6:27:1b:2f:06:d5:ce:
1c:2c:ef:77:df:6c:5a:dd:2c:ed:74:0f:ab:46:37:
20:c6:ce:f8:2a:51:70:6c:73:00:30:bc:1b:7d:b6:
8a:55:27:01:0a:23:d1:51:15:88:74:96:7f:17:cd:
3e:6b:01:18:56:d6:b7:c9:b8:67:e4:c2:9f:95:05:
22:db:91:99:ce:d3:b6:be:a9:71:5e:f9:61:e7:8c:
d8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:B3:16:C2:60:49:91:A2:28:E8:1B:25:42:C6:AA:98:2E:23:D1:7E
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:1b:ef:3b:d4:86:4b:33:08:18:d4:f7:a1:10:e9:60:62:c1:
1f:38:ea:94:07:dd:1b:66:32:a2:76:1f:4c:78:fe:f6:c2:a9:
7f:1e:1a:26:de:f0:4d:a9:59:6a:18:50:b5:40:c3:df:26:74:
0b:61:f6:27:1e:50:35:b7:f9:d4:e8:d5:b7:9b:14:2f:91:15:
0f:9b:8a:d3:ae:b3:28:0a:7e:7d:b0:fc:ba:99:bb:fe:bb:ec:
53:69:51:b2:ce:23:98:64:d3:cf:d3:b1:ca:fc:9a:a6:d0:bd:
d6:1f:24:b2:9a:3c:f6:19:f7:86:68:83:d8:04:fe:38:cf:47:
a2:68:d4:e3:8a:52:94:27:31:6b:c2:76:41:66:fb:07:d0:1f:
ba:21:48:12:fe:53:e5:32:70:37:b9:72:ce:64:8c:f1:b2:f1:
a3:87:6b:59:b5:e7:b2:86:df:12:c7:a7:0a:ed:b1:ab:65:47:
0f:f8:8b:fa:7b:a1:78:12:89:96:65:9b:35:2e:19:04:70:fa:
74:d3:53:62:a5:5e:44:6e:92:c0:65:a5:8c:fe:1f:38:3a:1a:
06:d9:27:63:7d:ad:1d:84:6f:45:40:66:fa:f3:9a:02:75:bc:
21:27:06:c0:3f:22:23:44:69:14:71:b4:61:47:94:d2:28:34:
64:7b:15:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:43 2026 by rpki-client