Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json)
Hash identifier: DEUEIOhDGaKRbgKZpXSX3QI4L6H3Snz87OHc7qXdd+Q=
Subject key identifier: 19:A3:51:53:85:7F:D3:12:4F:6B:9B:3D:A7:72:A9:FF:70:06:B4:29
Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86
Certificate serial: 01A109945D8F0396E28BE1540D4236A23227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
Manifest number: 1482
Signing time: Mon 05 Oct 2026 01:01:20 +0000
Manifest this update: Mon 05 Oct 2026 01:01:20 +0000
Manifest next update: Tue 06 Oct 2026 01:01:20 +0000
Files and hashes: 1: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: YEUEBBjvOagky/4ZSIlwOiS8fkkFHrkNICweJ/VMYaM=)
2: PiR6PkVQRFqEfm9lMFMx7R_IaDM.roa (hash: 2obqgsdNVnsgyNIGbMXRSD+tRQgkX3zupnny+MExpEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:94:5d:8f:03:96:e2:8b:e1:54:0d:42:36:a2:32:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86
Validity
Not Before: Oct 5 01:01:20 2026 GMT
Not After : Oct 6 01:01:20 2026 GMT
Subject: CN=19a35153857fd3124f6b9b3da772a9ff7006b429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:60:ad:2a:68:85:29:5f:9b:98:80:0e:36:
45:81:05:fb:39:9c:5f:56:1e:fa:06:37:66:08:0f:
06:16:65:8d:80:00:d5:e6:cc:be:67:4c:07:cb:19:
5e:ce:72:be:62:82:76:c3:04:79:48:f5:58:7f:cf:
3a:f9:b8:80:ff:c3:45:bc:5c:c1:0b:cf:bc:89:61:
16:c9:67:f4:85:fb:d7:68:cb:b1:85:51:df:44:43:
79:df:64:d4:fc:f5:ac:9a:0c:1f:51:a7:6f:e6:43:
76:c5:1d:9f:2a:f2:87:d9:71:6e:d3:46:4c:47:8a:
da:e9:3f:3f:db:65:d4:2a:2d:3c:7a:99:38:49:54:
3b:85:69:ef:3f:d4:cb:bc:e1:b5:d3:f7:e4:a5:44:
e7:d4:b2:04:27:5f:4f:6c:21:dd:84:9d:50:15:c9:
e8:32:d5:dc:2b:6c:d2:7e:38:68:9d:5c:58:da:fc:
da:41:2d:93:87:fd:b1:3e:77:fb:20:f0:6e:0d:b6:
5d:0c:f7:07:cd:59:c9:73:be:de:69:f2:c9:d6:00:
bd:d3:b3:ce:fe:b4:31:17:a0:fd:0c:12:a9:44:81:
f7:6f:8c:a6:1e:ca:a3:72:bb:4c:19:9d:09:bd:1a:
a8:18:15:b9:45:01:02:f8:ba:23:c9:e3:5a:cf:c8:
73:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A3:51:53:85:7F:D3:12:4F:6B:9B:3D:A7:72:A9:FF:70:06:B4:29
X509v3 Authority Key Identifier:
keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c6:de:69:97:5c:fc:3b:47:06:67:5f:3f:fa:75:e3:d9:c6:
1c:b7:fe:d7:29:03:c4:7d:6e:0d:f9:f5:c7:e6:03:16:20:c9:
53:ad:1f:93:53:a7:1b:b4:09:22:11:11:48:60:10:53:00:69:
f7:48:7d:a2:60:12:73:ad:0a:e3:52:32:bf:48:64:3a:96:8d:
7a:dc:d6:79:50:36:4e:ee:cf:51:94:93:b2:80:17:5b:51:69:
d3:ad:43:f8:47:1a:3c:be:86:ad:da:8f:76:b1:08:bc:1b:78:
6d:95:41:a9:c8:55:e7:d2:10:2c:82:0b:b6:38:55:97:76:bc:
cf:35:e5:0e:0a:42:96:ea:03:ce:cc:11:3e:30:94:2f:1b:55:
14:b7:60:3f:17:98:56:20:86:0f:ad:1a:9e:2e:21:f6:be:2c:
86:99:9d:65:a6:07:52:0a:55:97:9a:12:b6:0c:1c:83:4b:04:
d6:70:b3:03:59:b9:a2:85:db:83:45:95:4a:68:7f:0d:5b:7c:
4d:b0:85:30:a7:dc:f5:71:f7:2c:d8:13:2f:b4:36:20:78:bc:
a2:c7:1f:c0:ef:fd:8d:df:46:2b:1a:77:70:85:89:af:3a:b7:
c4:ef:a0:71:9c:5b:e4:3a:2e:f7:86:d8:d0:54:3e:49:d5:4c:
96:b8:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 06:56:59 2026 by rpki-client