Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.mft
File: Ce9ptw76WDK2FamN-djuSvWg_rY.mft (raw, json)
Hash identifier: rO82bbNAgnyWJQkhYRugzETdKkVG5WC7Gzmtd3xJEX4=
Subject key identifier: B2:95:17:67:8F:59:48:BA:06:F0:EA:3D:50:79:8C:06:C6:72:91:B8
Authority key identifier: 09:EF:69:B7:0E:FA:58:32:B6:15:A9:8D:F9:D8:EE:4A:F5:A0:FE:B6
Certificate issuer: /CN=09ef69b70efa5832b615a98df9d8ee4af5a0feb6
Certificate serial: 01A040BC31296B2BE3CBF5CFA46070CE8CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce9ptw76WDK2FamN-djuSvWg_rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.mft
Manifest number: 01EE
Signing time: Thu 27 Aug 2026 01:01:10 +0000
Manifest this update: Thu 27 Aug 2026 01:01:10 +0000
Manifest next update: Fri 28 Aug 2026 01:01:10 +0000
Files and hashes: 1: 6FnXpjQ59g5sXxs58-cmakXFI6c.roa (hash: 7jdSARNoDZ421UFIkyjxe0IGl8Z6A3h2G9Qzi9YoQnU=)
2: Ce9ptw76WDK2FamN-djuSvWg_rY.crl (hash: G8UA2ZrBebb6pI74PuxDfoE/1ltcEOd19g2wJcyYmnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce9ptw76WDK2FamN-djuSvWg_rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:bc:31:29:6b:2b:e3:cb:f5:cf:a4:60:70:ce:8c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ef69b70efa5832b615a98df9d8ee4af5a0feb6
Validity
Not Before: Aug 27 01:01:10 2026 GMT
Not After : Aug 28 01:01:10 2026 GMT
Subject: CN=b29517678f5948ba06f0ea3d50798c06c67291b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:68:cf:ac:87:67:4a:f5:1a:19:97:d6:82:
d2:4d:8d:dc:e2:1e:e4:b8:06:1c:35:8e:d3:c7:a4:
e9:ed:64:52:f5:3a:52:1c:4e:4e:cf:0e:c2:e3:73:
94:31:ff:ef:57:2a:84:d4:5a:f4:c9:25:b5:0b:2b:
11:20:c5:c8:ce:53:82:84:f4:83:91:ac:39:34:72:
c7:d9:37:de:98:05:a9:49:42:7b:1b:45:dd:72:1d:
60:cf:e2:25:af:fa:d7:d4:9a:7a:4c:66:3c:e0:fa:
95:f8:3a:d9:01:50:ea:b8:a9:e6:12:3c:1e:a8:4a:
b2:3b:92:63:7b:cd:82:02:7b:b6:e7:3f:23:9a:52:
ad:1f:12:fc:cf:dd:35:e8:eb:3b:02:17:ec:47:60:
ef:7e:5b:ac:5a:a4:be:09:5f:dd:1a:58:45:54:db:
95:d1:9e:97:2e:cb:af:11:d8:c8:8f:36:c4:8e:e4:
0a:37:c5:c8:59:a7:65:06:25:60:e3:be:1b:79:70:
ad:fa:13:1e:c1:86:bd:9e:3a:82:36:de:4c:52:ee:
60:a8:da:67:a8:6a:d8:75:18:64:ba:af:b5:3e:79:
39:1b:f4:07:4d:ca:5d:3e:cf:be:9d:0b:62:5e:b4:
63:fd:ba:ba:73:65:88:b1:a7:22:6a:9c:1a:de:88:
50:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:95:17:67:8F:59:48:BA:06:F0:EA:3D:50:79:8C:06:C6:72:91:B8
X509v3 Authority Key Identifier:
keyid:09:EF:69:B7:0E:FA:58:32:B6:15:A9:8D:F9:D8:EE:4A:F5:A0:FE:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce9ptw76WDK2FamN-djuSvWg_rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e28313-a11a-495a-8203-4b129e0c792e/1/Ce9ptw76WDK2FamN-djuSvWg_rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1f:40:c1:d3:f7:d1:2a:40:7f:1e:39:8b:9f:bc:2d:25:72:
d4:18:37:08:74:91:b6:a1:80:75:f7:f4:1b:f6:04:e1:af:10:
2d:a6:3f:e3:56:7c:5e:99:a9:c3:6a:4e:8f:e2:b4:56:62:cf:
f2:4d:67:b1:19:9c:f9:33:7b:e2:3f:2e:f9:92:c7:c8:5d:12:
b0:b1:cd:28:16:f1:9b:3f:40:80:e0:c9:9f:69:e6:03:a4:58:
f7:ad:40:33:ba:45:33:e9:b1:e4:d8:d0:f8:0f:55:56:af:4f:
6f:60:06:c4:4a:01:2c:8f:63:84:a4:7a:d1:db:fc:8e:10:eb:
1b:58:64:73:74:35:32:3e:c8:19:71:5e:59:b2:2a:05:ff:49:
0e:85:f3:b1:8f:7e:7e:9e:7a:de:ff:8f:49:ac:b5:dc:1a:75:
77:4c:f1:c2:ae:4b:f9:9f:8f:d2:c2:ff:dd:db:e3:13:bb:c6:
2e:09:f5:91:5b:5c:1b:49:fe:90:26:57:db:8e:1e:14:51:07:
c3:1b:80:d9:a6:7b:4c:21:53:7c:16:11:9f:15:c2:85:b8:02:
07:1e:45:aa:f3:b9:14:be:1d:0a:3b:ea:36:4e:0e:27:b8:77:
e5:fe:77:ba:42:fd:62:f5:76:f8:6c:c2:45:8b:06:40:84:7d:
05:4b:e5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:53:19 2026 by rpki-client