
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft
File: CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft (raw, json)
Hash identifier: +ZQhAMULoMtPrRngYEBDXTHfx3X0mN5rRJS17A/htw4=
Subject key identifier: 69:86:D1:02:8E:B1:6E:45:07:55:36:17:13:C6:4C:D8:55:E9:2A:98
Authority key identifier: 08:4B:8F:D5:C0:E9:DD:7C:C7:31:15:1F:EC:90:F9:17:D5:1E:B9:66
Certificate issuer: /CN=084b8fd5c0e9dd7cc731151fec90f917d51eb966
Certificate serial: 019EB76A5C61231BB77DCCA978649651D9A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEuP1cDp3XzHMRUf7JD5F9UeuWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft
Manifest number: 8D
Signing time: Thu 11 Jun 2026 16:01:01 +0000
Manifest this update: Thu 11 Jun 2026 16:01:01 +0000
Manifest next update: Fri 12 Jun 2026 16:01:01 +0000
Files and hashes: 1: CEuP1cDp3XzHMRUf7JD5F9UeuWY.crl (hash: 1DIchV0w+YcThO+xG8VYdhiiqDFiu60Q1vQYOBGFraI=)
2: wPgKp0DInXEGWf_KqblgFa6hMEk.roa (hash: 0rfdyCDjQOsaTQYwQErDbHcj+/13aKWJvVISeShUA3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEuP1cDp3XzHMRUf7JD5F9UeuWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:5c:61:23:1b:b7:7d:cc:a9:78:64:96:51:d9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084b8fd5c0e9dd7cc731151fec90f917d51eb966
Validity
Not Before: Jun 11 16:01:01 2026 GMT
Not After : Jun 12 16:01:01 2026 GMT
Subject: CN=6986d1028eb16e450755361713c64cd855e92a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b6:24:33:ec:15:79:e6:4e:00:ca:85:59:74:
43:a3:50:a4:86:26:95:e2:77:99:e8:9a:fb:86:88:
36:cb:cb:10:8b:80:08:47:85:e4:c0:86:b0:45:8b:
3e:48:02:c5:4c:82:fe:c0:6c:c6:96:ac:72:aa:23:
18:de:00:ca:9f:17:bf:ef:b5:a5:d9:c1:03:77:cd:
6c:56:40:9e:39:9f:67:4c:ad:5c:06:e1:27:80:53:
00:6f:cf:0a:a6:97:fe:87:41:be:60:2f:17:5c:b0:
ca:f6:03:79:7e:5d:a5:59:19:8a:b2:63:0c:6c:cf:
b5:d6:d7:60:31:94:14:42:13:63:60:b0:87:87:ad:
1d:5a:45:55:54:1c:36:ea:42:a0:ed:68:0f:ab:5f:
7a:c4:10:c4:9a:31:9e:1d:d4:ad:ce:50:77:07:7b:
4f:9a:cf:3a:c3:03:04:42:9e:27:8b:c4:6d:f5:3a:
ad:e0:fe:52:98:08:88:e1:6c:87:b8:ef:26:5f:fb:
92:2b:d6:16:31:1b:cd:ab:bd:e4:ad:65:fd:d5:bc:
00:b0:43:aa:ad:53:8b:b0:c3:c9:b3:eb:2b:e7:6c:
9a:30:6a:06:b4:c9:4d:47:11:16:43:5a:10:09:6a:
54:6e:51:db:d3:72:12:f3:e2:ef:88:ce:e7:ed:5d:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:86:D1:02:8E:B1:6E:45:07:55:36:17:13:C6:4C:D8:55:E9:2A:98
X509v3 Authority Key Identifier:
keyid:08:4B:8F:D5:C0:E9:DD:7C:C7:31:15:1F:EC:90:F9:17:D5:1E:B9:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEuP1cDp3XzHMRUf7JD5F9UeuWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fb:cc:23:92:2e:7b:4d:15:ab:1e:7b:05:a6:c2:a5:45:d7:
6e:69:d3:fb:79:d0:aa:1d:b0:86:02:a7:82:24:54:10:b7:3c:
f4:e4:a7:b0:ca:c3:dc:45:ec:c2:36:0d:0a:09:d6:75:d3:9e:
c5:66:37:5b:21:e7:46:4f:14:46:21:50:34:2a:2f:c7:8c:fc:
86:e0:d4:7e:0b:ff:b6:a9:48:4e:d8:f7:d1:41:b4:c1:07:24:
bf:4a:e2:61:a1:5a:25:4a:59:a5:2c:6f:77:b2:99:6f:cd:c0:
ab:21:39:dc:c9:59:a7:e3:69:fd:96:a8:09:a6:8d:e2:3c:b7:
04:3c:14:ba:69:65:7c:08:70:ad:b1:19:60:a5:c5:0c:07:ef:
57:2d:ef:af:89:ec:b0:b1:2d:6f:ac:3f:95:2d:58:cd:ea:08:
aa:e4:63:89:84:f3:70:c4:f0:bf:4e:40:27:54:a7:c5:89:6b:
89:84:bf:f1:da:9e:51:e9:56:78:4d:e0:31:7d:22:cb:0b:10:
db:9e:5d:f2:01:57:d8:09:6c:84:d1:17:3f:d8:74:4d:c6:44:
6e:3f:20:f9:95:85:bc:8c:e6:8e:b4:d0:fe:34:73:93:5a:d1:
db:fc:f7:3a:1e:36:39:87:a0:96:e0:51:68:4a:be:69:8e:d6:
3c:05:03:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:32:26 2026 by rpki-client