Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
File: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft (raw, json)
Hash identifier: sWDovhJnD+RjIQvRy0aA5w8RFccIIGtr6CmFyMSq7K0=
Subject key identifier: 9B:49:50:8A:BC:AC:4D:C2:89:40:23:FE:64:6D:47:11:DD:1F:3C:59
Authority key identifier: 09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
Certificate issuer: /CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Certificate serial: 01A13E9478638FE15230F5903623805984FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
Manifest number: 0798
Signing time: Thu 15 Oct 2026 08:01:19 +0000
Manifest this update: Thu 15 Oct 2026 08:01:19 +0000
Manifest next update: Fri 16 Oct 2026 08:01:19 +0000
Files and hashes: 1: Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl (hash: p600enuJxzoQvsTm0FJ2lcURNgbNUD/7hPSVXAAYKSQ=)
2: Db42gVIOc-r6U0XdkPGEkaUQ_F8.roa (hash: +dorelrzD6UM9OjrHdBTn8xKkODdpeZOExmq1+y6uHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:78:63:8f:e1:52:30:f5:90:36:23:80:59:84:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef0b8e5bbab29a1330fa0e7493f2a179847bb2
Validity
Not Before: Oct 15 08:01:19 2026 GMT
Not After : Oct 16 08:01:19 2026 GMT
Subject: CN=9b49508abcac4dc2894023fe646d4711dd1f3c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f9:82:84:f9:34:d0:e5:a4:d4:4a:41:38:ec:
27:39:8c:dd:fb:1b:2d:e9:a0:fa:58:eb:69:3b:4a:
f7:d0:9b:41:d0:95:6c:16:00:ae:9c:90:9f:57:b5:
64:6c:f0:0e:8b:4f:c9:2c:6f:3b:2b:f0:99:a9:9b:
8b:40:e6:c7:4c:57:de:4b:4a:f9:2e:c7:5b:91:da:
ac:16:62:0e:4c:42:9f:6e:a5:cf:83:d7:14:83:4b:
1f:a0:ee:ee:33:47:b9:70:3e:63:9f:6c:6c:fd:9a:
a0:e2:03:1b:55:00:3d:c3:2e:b1:82:65:11:07:7f:
ee:3d:11:5f:ba:d3:81:0c:3c:29:f5:88:88:90:3c:
a8:d9:3a:8c:2f:ab:51:82:19:75:b7:eb:ca:13:9b:
9d:8b:1c:1a:4f:30:0f:3f:70:62:a0:06:aa:76:3d:
e7:70:bc:76:32:dd:1f:e4:fc:27:85:f5:73:02:20:
18:5b:3e:0b:8c:a9:68:1c:3e:36:0c:1a:b1:95:68:
5f:2c:5a:ad:a0:63:0f:c0:70:f5:9f:69:a7:ec:a5:
ac:53:58:99:d9:5d:2e:6f:ad:3f:16:49:c1:b3:1b:
57:ac:bc:cf:b7:d8:99:98:1c:b5:39:55:89:cd:1d:
5a:6d:e6:aa:04:ee:cd:01:db:ca:5b:45:e8:4c:61:
ee:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:49:50:8A:BC:AC:4D:C2:89:40:23:FE:64:6D:47:11:DD:1F:3C:59
X509v3 Authority Key Identifier:
keyid:09:EF:0B:8E:5B:BA:B2:9A:13:30:FA:0E:74:93:F2:A1:79:84:7B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/40543e-195a-4332-a8ed-37374e396c7d/1/Ce8Ljlu6spoTMPoOdJPyoXmEe7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6c:14:b6:3f:9c:11:d1:a6:4a:07:14:51:7c:b2:4b:a2:b8:
5b:17:c4:6d:f7:5f:59:24:db:af:b1:0e:69:73:1c:12:65:24:
dc:13:d1:a8:4d:4d:72:93:31:34:e9:67:84:a5:13:6a:51:5b:
b8:e5:10:0c:d1:31:7f:b7:86:ae:4d:af:57:38:25:5c:68:0f:
2d:b5:f9:a9:45:4e:e3:4b:45:ef:e0:7c:25:94:7c:4b:80:e4:
b5:7d:2f:85:6b:df:56:22:7b:2d:f3:84:8f:23:bf:3b:84:0b:
b9:da:c6:85:bf:0d:18:bd:49:b4:d4:ae:a9:af:c0:83:73:77:
b0:fb:bd:fe:5b:3d:d9:6e:3a:fc:42:bc:ea:1a:72:a6:17:85:
ec:7b:64:22:5e:f1:fd:46:07:79:e3:c2:13:aa:fc:71:e4:4e:
ab:90:3e:4e:41:97:be:dc:40:ae:04:b4:52:5c:76:f6:35:2a:
37:9b:57:8c:ee:49:6a:88:62:24:e9:90:e3:25:58:f6:05:56:
f0:15:65:85:d9:fe:88:5b:05:e3:69:77:25:2f:21:3b:27:7f:
49:f8:15:ca:ea:c0:ba:d1:2c:bd:f3:22:fe:ab:4d:62:db:98:
8e:5e:26:01:d2:f4:29:7a:47:02:bb:33:51:a5:b2:e8:02:fb:
8e:da:f1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:30:56 2026 by rpki-client