Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/CeldrxY5x0VJFflMPn3X2pZDBYo.mft
File: CeldrxY5x0VJFflMPn3X2pZDBYo.mft (raw, json)
Hash identifier: +EpTvsuGwkFdAN4PBKqj/KGJ4lwLbfTV4kHx2JgnzbA=
Subject key identifier: 88:FC:19:C1:EB:DE:5E:CE:28:EA:B7:B2:2B:43:A6:9F:8F:ED:1B:DD
Authority key identifier: 09:E9:5D:AF:16:39:C7:45:49:15:F9:4C:3E:7D:D7:DA:96:43:05:8A
Certificate issuer: /CN=09e95daf1639c7454915f94c3e7dd7da9643058a
Certificate serial: 01A0CEFFA9676C06C0A3374D2A8B29A7F871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeldrxY5x0VJFflMPn3X2pZDBYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/CeldrxY5x0VJFflMPn3X2pZDBYo.mft
Manifest number: 40
Signing time: Wed 23 Sep 2026 16:00:56 +0000
Manifest this update: Wed 23 Sep 2026 16:00:56 +0000
Manifest next update: Thu 24 Sep 2026 16:00:56 +0000
Files and hashes: 1: 5bswdSPkzISiUjsgGvs8he7FLw0.asa (hash: kwdjlAqoJ5mD2gTxZB6y6A/f+ih4d96A7fnxQTfDQUA=)
2: CeldrxY5x0VJFflMPn3X2pZDBYo.crl (hash: ijeMssi3YlepPJPYefr5D1ksxM1rbSt4+AMaF+mgLGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/CeldrxY5x0VJFflMPn3X2pZDBYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/CeldrxY5x0VJFflMPn3X2pZDBYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeldrxY5x0VJFflMPn3X2pZDBYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:a9:67:6c:06:c0:a3:37:4d:2a:8b:29:a7:f8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e95daf1639c7454915f94c3e7dd7da9643058a
Validity
Not Before: Sep 23 16:00:56 2026 GMT
Not After : Sep 24 16:00:56 2026 GMT
Subject: CN=88fc19c1ebde5ece28eab7b22b43a69f8fed1bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:5f:e1:01:ff:bd:87:67:56:09:ad:64:19:
71:29:ee:76:d3:20:e3:7b:20:e1:9c:70:e3:81:8e:
b1:12:b2:4a:e2:0b:bb:aa:ac:6b:10:c2:8c:65:aa:
e4:84:a8:cf:4d:4b:ce:d8:9a:51:7a:df:a3:e7:c5:
15:9a:0f:59:0c:de:d9:df:b0:6b:28:3c:09:14:c1:
db:df:d9:f4:a3:d0:18:79:17:2e:41:76:a3:00:bb:
e5:bc:3c:bd:00:6c:eb:a4:2f:ca:b5:bd:0b:33:f0:
4c:1f:46:1e:ad:93:b8:23:f4:bd:3a:f1:5c:7d:b3:
f9:22:99:8f:f6:b9:f4:ae:7d:27:a6:85:f3:ce:20:
4d:02:40:9e:60:56:5a:94:ca:5e:0b:65:e9:dd:ad:
03:d0:ad:f9:63:31:3d:a3:15:ae:5b:55:96:ca:36:
72:0b:88:5a:7a:f5:04:03:fb:7d:cc:c1:77:72:84:
4b:9e:2a:08:e7:f7:79:f8:83:a9:0b:05:d1:6d:8c:
8f:ff:ca:f2:60:5e:97:42:6b:70:27:dd:08:b9:14:
f4:ef:d6:4e:d4:21:5a:9c:55:65:d5:6b:1c:39:4b:
fc:9f:9b:38:3e:ee:e7:52:22:20:44:be:5f:44:99:
61:df:2b:39:a3:d4:36:12:13:45:d4:92:45:6b:ec:
0e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FC:19:C1:EB:DE:5E:CE:28:EA:B7:B2:2B:43:A6:9F:8F:ED:1B:DD
X509v3 Authority Key Identifier:
keyid:09:E9:5D:AF:16:39:C7:45:49:15:F9:4C:3E:7D:D7:DA:96:43:05:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeldrxY5x0VJFflMPn3X2pZDBYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/CeldrxY5x0VJFflMPn3X2pZDBYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1cb02f-a1e3-4cf4-9991-6389225e540a/1/CeldrxY5x0VJFflMPn3X2pZDBYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:df:17:5c:ad:ab:11:31:56:03:de:a6:79:3a:66:32:82:b1:
04:f6:e2:e2:fd:6a:e4:20:91:ac:1b:fb:d2:fa:49:a8:13:9e:
02:75:26:27:cb:66:9f:12:cd:1f:89:89:8e:c9:f1:14:be:c2:
43:09:fb:40:26:3f:b1:ba:a3:b3:db:df:9e:ee:56:15:a0:a6:
0f:13:2d:51:43:a7:4f:e3:dc:f1:7c:25:53:b7:87:21:d2:e5:
36:60:e9:2b:3b:92:f5:c2:7f:39:56:7e:74:b3:b7:d5:4d:5e:
9f:70:eb:e0:36:36:f0:3c:5b:36:47:44:3e:54:f7:d2:9d:23:
27:90:78:21:dc:0a:52:14:df:c3:97:6e:78:83:d3:5b:61:fa:
34:34:38:f9:17:6e:d6:fd:a4:0e:6b:c4:d1:07:b2:26:56:0b:
9f:d1:de:68:0e:c7:5f:9f:62:99:08:02:c8:37:6f:c5:12:5c:
93:23:65:0f:b7:b8:46:b2:f3:c7:cb:90:b3:4b:ec:be:0b:f7:
06:38:80:ab:81:25:06:bb:4d:95:2c:bd:4a:49:99:7c:60:c6:
c9:6a:ba:9b:d3:2d:5f:da:35:1d:8f:73:1e:d3:0b:5a:78:ec:
5f:d2:84:51:33:6d:19:22:b4:d0:c9:74:b8:a3:4c:79:68:6e:
62:78:ea:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:23:26 2026 by rpki-client