
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: 1V2uA3rVq2fcXS4FUcu0krnwwqizVtVrdXhSHJyl+hU=
Subject key identifier: 13:D7:95:2A:B3:E3:96:91:B6:18:8E:15:BC:9A:9B:1C:78:98:B2:7E
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 019E30725F8C0856F858EB66998713AF8B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 0603
Signing time: Sat 16 May 2026 11:01:02 +0000
Manifest this update: Sat 16 May 2026 11:01:02 +0000
Manifest next update: Sun 17 May 2026 11:01:02 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: ChJVnWzfr8ePIbdJpr3J8YWCOeqyvLZrX6NSVpDF8vk=)
2: Db42gVIOc-r6U0XdkPGEkaUQ_F8.roa (hash: +dorelrzD6UM9OjrHdBTn8xKkODdpeZOExmq1+y6uHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:5f:8c:08:56:f8:58:eb:66:99:87:13:af:8b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: May 16 11:01:02 2026 GMT
Not After : May 17 11:01:02 2026 GMT
Subject: CN=13d7952ab3e39691b6188e15bc9a9b1c7898b27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:43:a7:c7:b9:a7:39:fb:2e:72:c2:bf:c5:
da:0b:30:6f:e3:55:56:4a:2f:f4:43:42:42:1b:5a:
e9:f8:0d:15:84:b5:98:af:21:d4:a2:68:08:90:92:
95:84:4a:36:b5:19:b6:59:03:e9:36:3d:78:3b:dc:
d5:dc:37:b6:5a:3b:75:33:2e:0b:33:ca:db:61:46:
a4:65:a2:7d:eb:1e:35:37:66:e6:6c:03:15:3b:c4:
ee:11:e9:0b:78:fb:99:6b:a1:c7:8c:8f:01:d8:c7:
a3:25:30:26:43:07:15:9e:f6:28:6a:33:d7:28:44:
fc:8c:52:58:79:1c:62:ba:3b:59:17:e1:19:21:dc:
76:41:84:e6:04:9c:5f:3a:4c:23:ab:67:73:87:05:
2e:8a:d8:c8:cb:58:24:29:3e:7a:b0:82:f4:6a:45:
41:e5:c7:3c:fa:fd:89:92:ff:39:53:72:a1:fc:7b:
3c:e9:be:28:9e:bb:ea:39:5e:ce:96:53:c5:f5:02:
12:24:03:71:c6:8c:4b:1c:19:3c:d3:52:c5:ce:97:
06:9c:4c:9a:4a:be:13:75:82:cc:78:ee:74:09:a5:
f2:dc:13:c9:bb:f3:3d:92:74:cb:61:04:ec:c9:00:
41:c3:9f:5c:c1:8b:9f:ed:72:35:73:58:6d:6c:fc:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:D7:95:2A:B3:E3:96:91:B6:18:8E:15:BC:9A:9B:1C:78:98:B2:7E
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:64:1c:7b:ee:fc:4e:4a:a4:9e:ab:39:df:36:53:b4:ac:bd:
df:b3:8d:0e:58:e3:d5:50:eb:04:56:35:5a:e6:69:91:0b:4b:
99:24:07:32:3d:b8:2f:55:88:ab:f1:28:e3:b7:96:e7:1d:04:
fb:9a:83:57:83:9c:fb:37:fe:b5:7b:5e:8d:8b:42:4e:38:05:
41:f3:32:dd:fc:88:06:d2:c1:40:d6:a6:32:e2:a4:fd:32:2a:
76:c0:cc:80:92:b1:c3:73:42:b8:06:7a:33:a7:6d:9b:f1:d6:
de:e6:7a:cf:b7:d8:06:28:39:8c:24:d3:c7:91:de:7e:47:1f:
7b:67:db:d1:01:5c:78:c0:dd:fc:44:66:2d:7a:b5:3f:1c:29:
1e:ef:a7:8e:a5:c5:85:13:30:0e:4c:ca:e3:e8:70:1e:e1:45:
00:6b:a4:14:bd:43:80:e4:06:7d:ac:f7:29:fe:4d:66:f0:5e:
c2:d4:e1:88:f8:b2:2c:09:d3:f0:9d:a2:3d:ac:56:02:ea:c8:
46:65:1c:bd:78:2c:c1:95:e5:2d:7c:2a:6e:93:8d:2f:18:f6:
33:7c:93:b3:e0:1a:b1:33:c4:97:06:14:5d:ab:b3:8c:3c:9f:
3f:09:67:f2:58:8e:eb:4b:95:ef:d7:7f:85:dc:ad:f5:65:a0:
b6:33:b3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:32 2026 by rpki-client