Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: hn4PJQ8dNgNqBTGkbyvTDCOU6aD13Urkhi0VGIFh1c0=
Subject key identifier: 65:0A:AF:F1:CB:89:00:3C:8C:12:84:E0:BB:A3:25:56:35:5A:90:D6
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 019D389BBF61555984C6AA600BEBFDCFF736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 1288
Signing time: Sun 29 Mar 2026 08:00:24 +0000
Manifest this update: Sun 29 Mar 2026 08:00:24 +0000
Manifest next update: Mon 30 Mar 2026 08:00:24 +0000
Files and hashes: 1: 1TUQTU00MEl499XUdrSRL1I8LFk.roa (hash: LR0SWWMB8Awe+6NzalLAwpz6bv1tNIh3m2MbySdjLTs=)
2: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: 9y/6GmFT1a6vwK+zZBmoAM0x7zBOXI3fEROMttmdTHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:bf:61:55:59:84:c6:aa:60:0b:eb:fd:cf:f7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Mar 29 08:00:24 2026 GMT
Not After : Mar 30 08:00:24 2026 GMT
Subject: CN=650aaff1cb89003c8c1284e0bba32556355a90d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:31:37:72:e5:a9:5f:80:62:9d:54:b4:c6:3e:
ca:19:2b:19:69:82:83:5d:91:7e:dd:6d:4c:ca:a1:
bf:d8:cd:9b:c8:cc:c7:6e:bd:69:a1:e3:6f:62:a4:
26:bf:79:6f:49:07:26:47:ce:94:35:25:d6:bc:4e:
9d:ce:b9:0e:d2:7e:a4:18:ce:3d:2e:a9:27:4f:5e:
67:3d:94:fe:aa:f7:b1:09:36:9e:4e:49:07:d2:81:
fc:e6:47:42:68:ad:ac:85:22:f8:e4:af:55:f1:ed:
18:08:18:5b:c8:22:e9:bb:28:fe:01:fa:05:a4:e4:
05:53:82:b6:f1:47:d1:56:5c:db:ce:57:bc:c0:1e:
93:36:e1:21:2c:d8:62:6e:2a:1a:40:f6:b4:2d:21:
dd:d4:ee:c0:2c:18:18:2c:c8:a5:68:fd:a1:4e:e4:
9e:d5:de:ea:7f:9e:4f:7f:9d:f7:4f:8f:df:c8:46:
59:b7:c7:14:df:f5:90:5e:64:63:a8:43:59:8d:b2:
de:18:01:59:83:2e:46:99:87:02:89:71:0d:fa:7f:
ab:d3:ad:fc:6d:e2:4e:ba:59:52:32:c0:81:39:60:
36:7f:9f:a6:f4:cd:ed:00:21:7e:cd:98:e6:7a:94:
1d:08:ea:88:78:78:e8:59:42:bd:30:90:bf:5d:2e:
31:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0A:AF:F1:CB:89:00:3C:8C:12:84:E0:BB:A3:25:56:35:5A:90:D6
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:67:94:dd:f7:ad:55:01:11:ac:96:f2:45:f6:7d:a0:66:89:
1d:55:93:7c:ef:23:00:90:8b:d6:ee:59:55:74:63:58:80:39:
3b:40:37:a9:6a:9a:5d:b3:cf:7a:b5:a5:45:95:d1:08:83:e4:
b3:df:39:90:ef:77:ac:f7:b1:c3:63:17:bf:f3:4c:0b:70:40:
cd:a0:47:5e:8a:39:25:ab:18:83:78:77:da:2b:13:bb:13:9f:
da:23:ce:0f:33:a5:3f:b1:17:56:55:56:b7:72:20:13:67:b9:
b8:6b:b5:1c:42:fc:84:78:5c:07:d1:47:2c:a5:19:47:c3:19:
eb:e4:18:02:5a:be:ed:70:44:be:1a:8d:fb:49:c4:b9:c3:cf:
d4:6a:e9:a8:35:9f:57:2a:5c:c0:e7:aa:45:ae:4f:56:5a:77:
18:48:06:d4:bf:5f:db:6d:36:08:77:01:35:2b:9e:f0:8d:37:
9a:d7:67:bb:c4:70:8a:20:0a:dc:2b:a4:b0:cb:6d:0c:00:00:
06:19:39:78:30:7e:83:6d:25:d8:97:98:54:5e:39:ad:73:c2:
f4:69:80:19:7c:87:24:83:c5:a9:93:e0:f8:8b:a4:8d:87:73:
94:54:c5:d9:c3:d1:f2:55:3f:30:38:cf:4c:3f:84:37:06:fb:
4c:ac:5f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:07:02 2026 by rpki-client