Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
File: CeVm4OteXiEQflX8lg-x7iGHRHQ.mft (raw, json)
Hash identifier: mBnzax49l4mmV1XEQwYnMTNk6xfQ6HjgEIgSQF9x/Hk=
Subject key identifier: 49:DD:0F:25:68:D6:CC:68:DA:81:43:76:F4:DD:89:FC:D0:40:7C:6D
Authority key identifier: 09:E5:66:E0:EB:5E:5E:21:10:7E:55:FC:96:0F:B1:EE:21:87:44:74
Certificate issuer: /CN=09e566e0eb5e5e21107e55fc960fb1ee21874474
Certificate serial: 019EB8B443666B58BD4C7819F870310148D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
Manifest number: 179D
Signing time: Thu 11 Jun 2026 22:01:21 +0000
Manifest this update: Thu 11 Jun 2026 22:01:21 +0000
Manifest next update: Fri 12 Jun 2026 22:01:21 +0000
Files and hashes: 1: CeVm4OteXiEQflX8lg-x7iGHRHQ.crl (hash: wYyR8PnYCt3L3hrVwSUQEr5mBTp83wakWfXzZ5vO3fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:b4:43:66:6b:58:bd:4c:78:19:f8:70:31:01:48:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e566e0eb5e5e21107e55fc960fb1ee21874474
Validity
Not Before: Jun 11 22:01:21 2026 GMT
Not After : Jun 12 22:01:21 2026 GMT
Subject: CN=49dd0f2568d6cc68da814376f4dd89fcd0407c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e1:bd:34:98:f6:0f:36:cf:43:bc:c0:ad:0a:
16:0c:ff:bb:51:d6:8f:fd:4a:ae:ba:08:2d:76:2a:
93:63:cd:53:e9:49:be:59:05:86:0d:af:08:19:7e:
4c:d1:5d:b1:26:34:cf:a6:99:f1:4f:66:3a:c0:9d:
94:83:6d:00:f4:f3:bf:03:e6:19:73:dd:5b:77:e0:
8d:da:73:a0:b1:46:68:4b:aa:48:f5:44:eb:4b:7c:
44:a4:e5:6f:df:1d:6e:a8:60:40:44:76:43:54:21:
f5:d9:f2:a9:01:fd:21:28:ff:ba:cc:32:2d:73:76:
60:94:2f:04:8d:06:db:47:60:46:2c:d5:05:c9:89:
1c:1b:58:6e:11:61:1f:0f:79:43:53:dc:3f:6b:89:
c4:3e:e3:48:7a:da:60:97:13:83:35:ac:10:98:48:
6f:c0:44:e0:1e:d0:1b:dc:16:ff:e2:07:68:c3:11:
66:e3:19:ec:7a:a5:66:f3:57:e3:5d:1e:c7:10:7b:
0e:7e:2f:fe:bd:14:ba:c4:5a:40:8d:80:6c:1b:20:
81:dc:52:2a:db:a8:c6:e0:a8:a5:0d:19:4d:23:f7:
eb:86:a6:c5:15:3b:76:4e:79:3a:28:94:0f:de:80:
78:ba:5f:3a:5d:79:4d:ba:0b:e1:d9:6b:e8:21:ff:
7a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DD:0F:25:68:D6:CC:68:DA:81:43:76:F4:DD:89:FC:D0:40:7C:6D
X509v3 Authority Key Identifier:
keyid:09:E5:66:E0:EB:5E:5E:21:10:7E:55:FC:96:0F:B1:EE:21:87:44:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVm4OteXiEQflX8lg-x7iGHRHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/0008cd-e129-424c-b5af-0af1de8f1ff1/1/CeVm4OteXiEQflX8lg-x7iGHRHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:a7:e3:07:d1:8b:0b:6f:fe:d1:68:e7:2a:f4:39:78:79:ed:
d8:e1:37:0d:f1:d1:82:ea:a6:9b:3c:86:fc:5b:e2:13:b5:8f:
a6:29:ce:45:65:65:04:3f:63:a0:51:9c:9f:6a:ef:2e:1a:9e:
e2:24:a7:5b:b5:3d:7e:54:b2:66:f2:0c:9b:91:95:20:04:d2:
11:58:dc:c5:c1:2f:4b:ac:93:12:70:67:8e:df:67:f1:22:93:
e5:17:7f:31:b3:2b:45:d2:e9:16:df:54:2e:fa:d4:31:c2:68:
b7:8b:1f:02:28:53:c9:d5:0f:18:d6:da:ae:87:d9:ba:6f:10:
22:f0:69:c3:11:55:b6:8d:1d:98:61:91:9e:66:ec:21:4f:0c:
47:1d:47:18:58:da:2d:a0:cc:ed:86:c9:6c:ed:62:cd:2a:97:
3d:a6:c7:6b:cf:cf:1b:ac:da:48:50:c0:7a:cb:65:02:a4:2f:
8c:96:0c:aa:91:df:c2:fc:22:7d:c5:4a:12:e2:25:05:95:53:
98:2b:d0:8a:0c:5e:02:54:4f:cb:37:a1:f1:81:b8:78:f4:60:
65:a8:58:d3:41:08:6c:f7:31:6c:27:2a:b6:5e:59:1e:c3:33:
19:43:f7:e3:e0:4b:ea:61:b7:cc:07:3e:c2:b6:7c:3a:af:36:
dd:fc:9a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:53:43 2026 by rpki-client