Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
File: CEaS7DDzfffcteR600auvetx_DA.mft (raw, json)
Hash identifier: 6yyKkZp7GKvh1a/+7gFtlVt2fIDJGMl6H2VSEP4wcLI=
Subject key identifier: C2:7B:FC:9B:61:61:94:E1:4A:4C:FC:B7:6E:44:C4:26:51:0E:BA:5F
Authority key identifier: 08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
Certificate issuer: /CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Certificate serial: 019F17C2FE4B7734A5C3A15E01B2EC2B58A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
Manifest number: 1983
Signing time: Tue 30 Jun 2026 09:01:22 +0000
Manifest this update: Tue 30 Jun 2026 09:01:22 +0000
Manifest next update: Wed 01 Jul 2026 09:01:22 +0000
Files and hashes: 1: CEaS7DDzfffcteR600auvetx_DA.crl (hash: 0VQG7oUNWb0p474PCE5MIF5u8JCTcDZ/V1YDfkCqfVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:fe:4b:77:34:a5:c3:a1:5e:01:b2:ec:2b:58:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084692ec30f37df7dcb5e47ad346aebdeb71fc30
Validity
Not Before: Jun 30 09:01:22 2026 GMT
Not After : Jul 1 09:01:22 2026 GMT
Subject: CN=c27bfc9b616194e14a4cfcb76e44c426510eba5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:d2:5e:2b:b2:bf:be:bf:7b:34:c3:9c:0c:
c2:a6:3c:89:72:72:a0:26:17:2d:84:c9:66:c6:05:
88:4a:63:3b:a8:db:e8:b6:aa:b5:1a:2e:ee:c9:06:
33:e6:5a:5f:52:07:89:b9:0a:a9:26:f2:54:71:cb:
c7:51:d6:7e:a4:ca:d9:18:4a:cd:fc:39:33:42:4f:
79:dd:70:98:d6:f1:d2:a7:83:9a:c6:dd:02:df:53:
0e:5b:44:ac:15:18:5f:05:5b:08:de:14:99:46:9d:
0e:65:fc:c6:06:67:aa:d7:20:09:37:bb:8e:e2:47:
f2:c1:5a:9e:ce:2d:75:c5:74:95:6b:33:20:6c:04:
0d:74:10:37:d6:83:f9:75:22:a5:c6:52:2f:19:d4:
37:a5:ed:82:e3:ad:b3:68:14:d2:32:3b:1f:27:44:
f6:bc:b4:2f:d5:0e:a8:ee:1b:6d:47:fd:27:a5:b6:
15:6f:e3:f3:32:4f:93:26:d5:6f:ac:ce:e8:2c:8b:
c0:77:7f:3b:46:6f:0c:76:b5:5a:aa:93:91:57:ee:
8e:aa:38:98:57:fd:b7:6c:96:96:ec:1f:f9:cc:0e:
a8:74:95:b0:2a:ee:08:13:0c:ef:a5:83:02:5c:19:
90:01:cd:60:cc:b3:f2:dc:12:45:29:5b:c0:fa:33:
0c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7B:FC:9B:61:61:94:E1:4A:4C:FC:B7:6E:44:C4:26:51:0E:BA:5F
X509v3 Authority Key Identifier:
keyid:08:46:92:EC:30:F3:7D:F7:DC:B5:E4:7A:D3:46:AE:BD:EB:71:FC:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEaS7DDzfffcteR600auvetx_DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/0fd013-ab7f-453c-9122-113374c48763/1/CEaS7DDzfffcteR600auvetx_DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2c:0f:0a:43:d4:34:25:00:52:66:d4:c9:cf:0a:1d:7f:0a:
ba:ea:42:3b:91:93:88:87:8d:b6:0d:7b:38:1e:a4:96:e7:ff:
91:6a:95:8c:36:1a:a0:58:d3:5f:29:44:29:df:72:1d:d3:32:
96:52:99:cb:b2:03:3b:aa:99:c7:5b:93:56:aa:26:f4:82:5b:
c0:ff:15:63:14:19:2f:12:57:c2:25:8a:76:1a:fa:bd:28:e2:
ee:a8:b6:a1:37:4e:7a:09:e3:01:2e:ac:a9:66:db:34:5f:0f:
48:40:6e:9c:48:08:31:bf:a6:f1:b2:dd:f3:26:fd:e3:41:69:
f3:3b:0b:44:16:c3:90:b5:d0:0d:aa:e5:58:e7:1a:fe:ff:f4:
43:18:96:32:c6:a8:07:70:8f:24:65:21:d0:bf:6b:c4:75:44:
6f:36:a9:99:23:9c:d7:88:67:08:c1:8b:a5:c3:7f:7a:09:13:
49:c7:ff:a0:25:fe:9a:c7:f3:45:6e:0b:68:1e:b4:8f:80:7f:
18:97:d6:64:7a:29:7a:1e:86:20:aa:ad:28:28:ab:00:eb:87:
3a:55:50:25:d4:24:d6:d8:68:a3:f2:84:fb:2f:39:f9:a0:38:
c2:86:a3:1e:42:c4:9d:97:f3:5d:e1:94:37:4c:48:f3:e3:9d:
0b:69:de:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Xwv5LdzSlw6FeAbLsK1ioMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDY5MmVjMzBmMzdkZjdkY2I1ZTQ3YWQzNDZhZWJkZWI3
MWZjMzAwHhcNMjYwNjMwMDkwMTIyWhcNMjYwNzAxMDkwMTIyWjAzMTEwLwYDVQQD
EyhjMjdiZmM5YjYxNjE5NGUxNGE0Y2ZjYjc2ZTQ0YzQyNjUxMGViYTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQTSXiuyv76/ezTDnAzCpjyJcnKg
JhcthMlmxgWISmM7qNvotqq1Gi7uyQYz5lpfUgeJuQqpJvJUccvHUdZ+pMrZGErN
/DkzQk953XCY1vHSp4Oaxt0C31MOW0SsFRhfBVsI3hSZRp0OZfzGBmeq1yAJN7uO
4kfywVqezi11xXSVazMgbAQNdBA31oP5dSKlxlIvGdQ3pe2C462zaBTSMjsfJ0T2
vLQv1Q6o7httR/0npbYVb+PzMk+TJtVvrM7oLIvAd387Rm8MdrVaqpORV+6OqjiY
V/23bJaW7B/5zA6odJWwKu4IEwzvpYMCXBmQAc1gzLPy3BJFKVvA+jMMjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJ7/JthYZThSkz8t25ExCZRDrpfMB8GA1UdIwQY
MBaAFAhGkuww83333LXketNGrr3rcfwwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VhUzdERHpmZmZjdGVSNjAwYXV2ZXR4X0RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8wZmQwMTMtYWI3Zi00NTNjLTkxMjIt
MTEzMzc0YzQ4NzYzLzEvQ0VhUzdERHpmZmZjdGVSNjAwYXV2ZXR4X0RBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8wZmQwMTMtYWI3Zi00NTNjLTkxMjItMTEzMzc0YzQ4NzYz
LzEvQ0VhUzdERHpmZmZjdGVSNjAwYXV2ZXR4X0RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASwPCkPU
NCUAUmbUyc8KHX8KuupCO5GTiIeNtg17OB6kluf/kWqVjDYaoFjTXylEKd9yHdMy
llKZy7IDO6qZx1uTVqom9IJbwP8VYxQZLxJXwiWKdhr6vSji7qi2oTdOegnjAS6s
qWbbNF8PSEBunEgIMb+m8bLd8yb940Fp8zsLRBbDkLXQDarlWOca/v/0QxiWMsao
B3CPJGUh0L9rxHVEbzapmSOc14hnCMGLpcN/egkTScf/oCX+msfzRW4LaB60j4B/
GJfWZHopeh6GIKqtKCirAOuHOlVQJdQk1thoo/KE+y85+aA4woajHkLEnZfzXeGU
N0xI8+OdC2ne1A==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:37:05 2026 by rpki-client