Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: TXyx2FrjmkH5yyGIUS7Yj3oeGVQCaNJ35ZMxAKjZo8Y=
Subject key identifier: 64:8D:1D:19:11:B9:D5:88:15:29:50:BC:85:8D:2F:A0:96:A8:FB:9F
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 01A001DCA69DFFD78A24C610D3775F804268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 06F4
Signing time: Fri 14 Aug 2026 20:00:32 +0000
Manifest this update: Fri 14 Aug 2026 20:00:32 +0000
Manifest next update: Sat 15 Aug 2026 20:00:32 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: Mqu3glYSxG76WZnBT+05MIE3I7ecCJEjwevC6lsCRd4=)
2: Db42gVIOc-r6U0XdkPGEkaUQ_F8.roa (hash: +dorelrzD6UM9OjrHdBTn8xKkODdpeZOExmq1+y6uHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:a6:9d:ff:d7:8a:24:c6:10:d3:77:5f:80:42:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: Aug 14 20:00:32 2026 GMT
Not After : Aug 15 20:00:32 2026 GMT
Subject: CN=648d1d1911b9d588152950bc858d2fa096a8fb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:ea:bb:34:74:c3:9a:d0:83:cd:5f:d8:73:
48:d1:7d:88:b4:96:72:c3:b7:f4:6e:3d:ce:6c:56:
94:21:65:42:07:13:0c:49:fe:16:63:25:b3:0b:42:
7b:fe:30:42:26:91:fa:4e:81:5e:2d:72:d2:6c:93:
94:ad:5e:e6:0f:0a:08:be:b2:43:c1:8f:42:95:ee:
8c:c7:0b:0b:78:9a:70:81:5b:d2:52:d8:7d:7b:9c:
e8:de:f5:71:ba:23:57:20:06:79:7a:2a:c0:d6:ec:
25:5f:9d:41:f8:5c:ad:12:f7:04:9f:81:99:73:b0:
82:39:a8:6e:94:f1:fa:2f:a5:16:9a:b9:f1:1d:3b:
9f:b0:ed:d6:86:9b:33:69:08:71:35:9f:db:3a:58:
59:3e:a9:5f:e8:a8:81:6f:d4:10:d9:5c:12:25:42:
c4:71:6a:c8:d6:d0:fc:83:5b:63:44:b1:c6:dc:d8:
ab:9f:19:d7:6b:79:52:d3:41:1c:73:3c:d3:c4:bd:
1d:80:8b:29:ab:93:7c:fd:aa:ba:5c:1c:e3:a5:6f:
da:80:03:a0:52:0b:ef:c1:12:c8:27:98:3f:e8:8e:
3b:6f:d0:be:2c:07:96:b5:e8:70:d1:cf:c5:f2:19:
42:5d:cf:ca:99:65:9f:0b:79:25:70:ff:6a:ee:26:
42:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8D:1D:19:11:B9:D5:88:15:29:50:BC:85:8D:2F:A0:96:A8:FB:9F
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:04:8b:5c:9c:b7:c6:68:81:66:82:e6:25:63:3f:51:89:bf:
e3:75:40:b4:ea:85:b0:2e:99:7e:4c:95:75:ce:a8:4a:49:fd:
8b:b0:14:98:b3:09:15:db:ed:21:c9:23:d0:0c:6a:8e:2e:2d:
bc:de:26:a2:86:1c:3b:e1:59:c3:8c:a5:03:1e:e1:6d:d6:26:
59:af:5c:24:19:8b:ea:49:8b:fd:f9:57:57:f3:60:d3:e6:ea:
da:57:83:ad:84:99:4f:1b:20:71:e9:86:69:bf:c8:64:d9:62:
00:8e:c0:1d:34:ab:56:4c:e2:f8:ec:83:a3:e4:58:cf:c1:aa:
06:fc:b9:78:0e:bb:6e:67:05:1c:a0:75:34:72:6d:83:ea:21:
7a:2c:45:3c:4a:53:8d:f9:10:39:59:ba:8b:ed:f2:17:f4:81:
cc:ec:2d:e1:07:70:c0:f2:e9:95:d7:44:86:34:85:4e:07:fd:
bc:6c:4a:83:61:46:c6:8d:1e:a3:ec:ad:f1:97:06:12:61:71:
95:46:43:a8:d5:36:c8:d6:65:f3:55:2e:bd:09:c1:6f:7d:04:
41:ff:bb:91:c8:7b:8e:6f:cb:e9:9d:43:24:f7:b4:7f:0a:9f:
e4:a4:c1:ed:9d:75:63:b9:04:d4:cc:35:b7:a5:15:35:df:cb:
a8:c9:21:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:23:12 2026 by rpki-client