Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
File: CEaS7DDzfffcteR600auvetx_DA.mft (raw, json)
Hash identifier: pPC+a5YpPSir8U15S6IeOT0mWmr911aC/8T74BlFaWc=
Subject key identifier: E2:85:2F:52:40:D4:68:CB:D5:EE:38:81:A6:E6:69:E1:56:30:4B:4E
Authority key identifier: 08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
Certificate issuer: /CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Certificate serial: 019D38D3C01BEF7C9A4FF268CB598578F9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 09:01:34 +0000
Manifest this update: Sun 29 Mar 2026 09:01:34 +0000
Manifest next update: Mon 30 Mar 2026 09:01:34 +0000
Files and hashes: 1: CEaS7DDzfffcteR600auvetx_DA.crl (hash: LHWyyQDVZLpso7RlFauyEJj3z17reTy/TYvIi93GlZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c0:1b:ef:7c:9a:4f:f2:68:cb:59:85:78:f9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Validity
Not Before: Mar 29 09:01:34 2026 GMT
Not After : Mar 30 09:01:34 2026 GMT
Subject: CN=e2852f5240d468cbd5ee3881a6e669e156304b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b9:f0:38:8d:59:be:e8:4c:cc:24:12:a9:6b:
3b:0c:7a:08:5f:1d:20:97:c7:b7:a1:34:96:d8:73:
00:e8:a9:24:b2:81:8f:f7:34:03:14:86:6b:59:33:
1d:fc:76:52:10:df:b5:f9:d6:97:ad:13:97:d5:1d:
da:71:f5:52:0a:53:ef:c3:d8:c5:e0:a5:0f:db:a8:
50:fd:69:0b:a5:fc:51:4e:31:8a:a6:2e:c8:39:31:
6e:f1:11:a2:d7:38:af:b9:a7:44:12:6b:fa:10:82:
b9:65:4c:96:ab:f4:b8:5a:7e:c6:a9:0e:36:6a:60:
e5:50:88:cc:d4:06:79:4a:27:56:51:1b:5e:5f:f7:
5c:ec:09:5f:84:7a:df:75:60:52:fc:6e:45:0a:b5:
21:ca:7c:46:da:53:4a:5c:18:fe:59:58:78:b4:35:
70:9e:e6:73:46:b7:56:97:b3:d5:21:15:11:6e:1e:
c9:97:45:43:2c:98:d3:d5:b8:e0:88:22:ee:f6:f7:
d6:6f:f4:5e:03:c8:f6:4d:0b:58:0d:2a:63:df:7d:
11:ff:4b:58:4d:f3:a3:d0:6f:bb:5f:fc:60:3b:e7:
7f:bf:c1:f0:b4:2d:57:17:16:b9:c8:9f:f7:04:b1:
80:1c:d7:3a:1a:5a:1d:16:c4:ed:f3:8c:f9:fa:09:
28:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:85:2F:52:40:D4:68:CB:D5:EE:38:81:A6:E6:69:E1:56:30:4B:4E
X509v3 Authority Key Identifier:
keyid:08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7a:72:30:d5:be:7e:9a:9d:e2:59:bb:1d:52:79:97:aa:db:
55:a2:9b:5e:6d:71:d8:c5:24:b1:53:6b:ce:00:7b:b7:59:7d:
ac:79:8e:b5:1f:80:4a:cc:19:d0:1f:7a:54:de:94:51:f2:d1:
fc:59:de:e0:ca:99:9d:cd:4b:ba:f7:5c:6b:e6:04:76:52:c0:
8a:88:b7:e2:a5:c5:af:4b:bf:3a:89:b6:78:c3:58:8c:45:b3:
07:86:84:01:65:15:21:78:52:5c:c6:0e:b0:a2:b4:24:d9:01:
4f:13:22:63:64:02:4e:63:09:5e:5d:ea:52:b0:04:6d:de:3a:
06:c1:5d:d1:86:fa:3d:77:56:70:6e:e6:51:25:a1:77:7b:f6:
f1:ad:f4:f6:d6:55:4b:45:79:42:89:a8:7d:8e:9c:de:fa:65:
2e:b4:15:45:4f:9d:45:09:38:9c:f7:cd:c8:57:a5:b1:24:b6:
4a:66:7f:40:4d:f2:73:2c:60:43:49:ac:90:7b:08:15:a4:85:
42:3a:9a:27:14:22:f1:f0:42:d4:42:2f:d6:d0:0c:60:55:65:
e3:d6:61:9c:99:df:40:e5:2e:d1:38:07:db:2f:d2:21:1a:f7:
82:e6:ea:3d:89:c1:98:32:77:51:67:05:ea:00:79:c0:3d:40:
a1:c1:9d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:13 2026 by rpki-client