Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
File: CeKvCM9uEuIwT7O97GTPvO2qhSI.mft (raw, json)
Hash identifier: 4qxy2f447+UwhD0TzLDlF2KwNnq5ktOJEPO4++0E9J4=
Subject key identifier: 6B:7A:7F:80:AB:84:34:11:3D:F7:9F:11:00:99:47:0B:C5:E3:02:EA
Authority key identifier: 09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
Certificate issuer: /CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Certificate serial: 019D38D34FCB154256234D5BCA1D79A57560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
Manifest number: 1305
Signing time: Sun 29 Mar 2026 09:01:05 +0000
Manifest this update: Sun 29 Mar 2026 09:01:05 +0000
Manifest next update: Mon 30 Mar 2026 09:01:05 +0000
Files and hashes: 1: 44Stl3msveF1YCvCfN2G3HepMdM.roa (hash: iIzD2FPw/U9HcxD97jOSbgMNqhLuJ3ohKRTz9ioUa1s=)
2: CeKvCM9uEuIwT7O97GTPvO2qhSI.crl (hash: 4mOCivRqAbYejlgQneVhxDoMw1bmggad3AH06ZVurXY=)
3: oOxUVzAK0hDvaSyyxd4ItdCNzlk.roa (hash: z2hGxtDc3xsCMxUAYZ0wzFuiPIpWeNKitXxT4Qhak2E=)
4: qWMcoazuJWd0mzovPbjclSWnCpk.roa (hash: nWdd8YlV26SHwkLvSuGYiscACa3svh/Yxd8Z+LoR89Q=)
5: r2dMo2_D-Dbh-yqi6VAZ1meJk-s.roa (hash: ICU0J+ujal+UqVKVSbOsudUv0G3UkLSD3WQWpN8VVhQ=)
6: tjYT-uHNpnFgFGTdE6itSftZVqY.roa (hash: KHqysYVsduT2z29K9pGLDzRY8wOYildZ8N84ngXiOeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:4f:cb:15:42:56:23:4d:5b:ca:1d:79:a5:75:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e2af08cf6e12e2304fb3bdec64cfbcedaa8522
Validity
Not Before: Mar 29 09:01:05 2026 GMT
Not After : Mar 30 09:01:05 2026 GMT
Subject: CN=6b7a7f80ab8434113df79f110099470bc5e302ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:94:2b:f4:5d:23:71:b6:89:49:be:26:ca:1a:
42:53:58:ed:46:9a:15:f3:1f:a7:17:83:47:19:c4:
df:21:e9:07:4f:d4:c5:ba:1f:4a:6f:0d:af:85:b2:
51:14:60:e6:62:0c:4e:9a:1a:de:7c:73:7b:95:e7:
01:83:08:f1:e2:02:27:21:ef:aa:b3:ee:2a:22:c8:
4f:83:ea:dd:05:cc:c6:04:81:6c:80:17:b6:9d:fb:
ce:da:5c:cc:bd:ae:fe:e6:0a:c8:4a:ff:92:ca:f4:
46:6a:3a:18:7b:01:17:c7:33:ed:24:d1:29:98:8e:
e3:db:0f:20:53:91:25:e4:b1:2a:56:4d:0c:2c:e0:
e9:4e:f1:17:39:fc:9f:af:ab:83:17:73:e1:68:ec:
c8:95:8c:ba:4b:11:14:b0:5b:11:76:8b:14:42:da:
22:bf:24:ce:7e:9c:41:1e:b6:3f:de:85:bd:0b:3a:
a6:5d:73:2d:10:f7:fa:9f:49:31:a5:93:43:45:dc:
f5:d0:57:59:d9:1b:42:f6:96:c8:62:cb:8e:a9:83:
61:7d:36:7c:bb:09:d4:b5:ba:d5:3f:00:6a:e7:69:
07:69:6e:05:5d:0a:b5:6f:b0:2e:94:5c:3f:77:55:
5f:fe:80:f2:cb:78:7d:8c:ef:b6:b7:c0:cc:6d:20:
e6:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7A:7F:80:AB:84:34:11:3D:F7:9F:11:00:99:47:0B:C5:E3:02:EA
X509v3 Authority Key Identifier:
keyid:09:E2:AF:08:CF:6E:12:E2:30:4F:B3:BD:EC:64:CF:BC:ED:AA:85:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeKvCM9uEuIwT7O97GTPvO2qhSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/19d3cd-6610-43f0-83eb-70a1af51dfbe/1/CeKvCM9uEuIwT7O97GTPvO2qhSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e1:ce:6e:a2:b2:cc:9f:50:b0:ed:42:ac:e4:c0:c1:85:77:
db:e4:ae:f2:d2:fe:4c:f4:f6:77:1d:4f:02:18:ec:f7:69:e6:
03:ea:67:22:63:6f:9b:c9:8c:27:96:df:b8:c9:cd:f6:6b:21:
f6:17:4f:e2:5f:bf:a6:14:6c:ef:36:ee:3d:f9:35:1f:7c:15:
03:88:00:e2:09:1e:40:d0:9d:47:94:f9:ac:5f:01:cd:92:a3:
85:1a:e1:57:c5:5d:7b:be:63:49:f8:87:1b:a0:40:e7:a4:d4:
41:eb:35:08:6c:08:e9:ba:fe:80:6b:e4:8e:7c:c2:9d:15:1c:
31:79:62:94:1a:2c:aa:5b:14:a6:fd:07:8d:27:3d:67:87:f4:
7c:ca:96:83:cb:94:9d:8c:7d:f2:79:61:c5:d0:3d:d0:ec:0a:
c8:cd:01:30:70:48:ba:2a:4e:89:a2:24:d3:49:b7:4f:b3:47:
17:90:7a:f1:eb:b7:2e:ed:30:17:5c:6d:ba:ba:0b:dd:25:f6:
ce:0f:53:33:fd:75:42:db:14:9b:a7:06:29:fe:45:bd:0c:71:
c4:18:81:49:51:5a:2c:45:2a:ff:89:24:a1:9f:4c:09:d0:71:
e7:d5:7e:62:20:5c:16:9c:20:d3:f6:f3:51:df:4e:8e:c5:05:
bf:98:bd:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0400/LFUJWI01byh15pXVgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTJhZjA4Y2Y2ZTEyZTIzMDRmYjNiZGVjNjRjZmJjZWRh
YTg1MjIwHhcNMjYwMzI5MDkwMTA1WhcNMjYwMzMwMDkwMTA1WjAzMTEwLwYDVQQD
Eyg2YjdhN2Y4MGFiODQzNDExM2RmNzlmMTEwMDk5NDcwYmM1ZTMwMmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JQr9F0jcbaJSb4myhpCU1jtRpoV
8x+nF4NHGcTfIekHT9TFuh9Kbw2vhbJRFGDmYgxOmhrefHN7lecBgwjx4gInIe+q
s+4qIshPg+rdBczGBIFsgBe2nfvO2lzMva7+5grISv+SyvRGajoYewEXxzPtJNEp
mI7j2w8gU5El5LEqVk0MLODpTvEXOfyfr6uDF3PhaOzIlYy6SxEUsFsRdosUQtoi
vyTOfpxBHrY/3oW9CzqmXXMtEPf6n0kxpZNDRdz10FdZ2RtC9pbIYsuOqYNhfTZ8
uwnUtbrVPwBq52kHaW4FXQq1b7AulFw/d1Vf/oDyy3h9jO+2t8DMbSDm0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGt6f4CrhDQRPfefEQCZRwvF4wLqMB8GA1UdIwQY
MBaAFAnirwjPbhLiME+zvexkz7ztqoUiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWIt
NzBhMWFmNTFkZmJlLzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8xOWQzY2QtNjYxMC00M2YwLTgzZWItNzBhMWFmNTFkZmJl
LzEvQ2VLdkNNOXVFdUl3VDdPOTdHVFB2TzJxaFNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeHObqKy
zJ9QsO1CrOTAwYV32+Su8tL+TPT2dx1PAhjs92nmA+pnImNvm8mMJ5bfuMnN9msh
9hdP4l+/phRs7zbuPfk1H3wVA4gA4gkeQNCdR5T5rF8BzZKjhRrhV8Vde75jSfiH
G6BA56TUQes1CGwI6br+gGvkjnzCnRUcMXlilBosqlsUpv0HjSc9Z4f0fMqWg8uU
nYx98nlhxdA90OwKyM0BMHBIuipOiaIk00m3T7NHF5B68eu3Lu0wF1xturoL3SX2
zg9TM/11QtsUm6cGKf5FvQxxxBiBSVFaLEUq/4kkoZ9MCdBx59V+YiBcFpwg0/bz
Ud9OjsUFv5i9kg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:07:02 2026 by rpki-client