Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft
File: CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft (raw, json)
Hash identifier: xaJ6RmMEjzx9moW8FAZih2rVDMZKk3bF/I94xbFbnB8=
Subject key identifier: 81:11:60:2A:85:CC:57:1A:D9:5B:F6:8D:A4:EE:9D:A5:07:50:52:2E
Authority key identifier: 08:4B:8F:D5:C0:E9:DD:7C:C7:31:15:1F:EC:90:F9:17:D5:1E:B9:66
Certificate issuer: /CN=084b8fd5c0e9dd7cc731151fec90f917d51eb966
Certificate serial: 01A17C290FE868F137DDCE881E41983F0CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEuP1cDp3XzHMRUf7JD5F9UeuWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft
Manifest number: 01FC
Signing time: Tue 27 Oct 2026 07:00:28 +0000
Manifest this update: Tue 27 Oct 2026 07:00:28 +0000
Manifest next update: Wed 28 Oct 2026 07:00:28 +0000
Files and hashes: 1: CEuP1cDp3XzHMRUf7JD5F9UeuWY.crl (hash: fK5+1846dWXSfO689SciuiGMNyDcQ/bua5iHOh5714g=)
2: wPgKp0DInXEGWf_KqblgFa6hMEk.roa (hash: 0rfdyCDjQOsaTQYwQErDbHcj+/13aKWJvVISeShUA3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEuP1cDp3XzHMRUf7JD5F9UeuWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:0f:e8:68:f1:37:dd:ce:88:1e:41:98:3f:0c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084b8fd5c0e9dd7cc731151fec90f917d51eb966
Validity
Not Before: Oct 27 07:00:28 2026 GMT
Not After : Oct 28 07:00:28 2026 GMT
Subject: CN=8111602a85cc571ad95bf68da4ee9da50750522e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:57:ba:ba:fd:ab:bc:c3:b6:72:dd:b1:71:a6:
03:2b:42:6b:6f:3f:bd:9a:68:09:89:24:cf:43:9e:
b7:f2:e4:4d:67:25:1b:2a:63:cd:89:89:bc:a5:7e:
c7:3a:a3:f7:a1:9e:be:28:6b:58:9d:ad:b2:88:6d:
de:3e:a4:51:3b:1e:d3:88:54:51:d8:41:79:47:e3:
8f:c6:2c:a2:cd:91:e1:e0:27:1d:d3:94:9e:91:fd:
7e:8a:2e:f5:25:fb:ab:40:80:1e:31:71:88:40:ea:
4c:15:7c:7f:7f:81:69:fd:3e:7d:d7:62:28:b7:e1:
4a:df:fd:bc:9d:1a:67:4f:34:24:27:11:00:54:cd:
75:85:8f:2b:c2:f0:d4:08:fc:7d:4f:69:74:8b:4a:
13:e7:a3:85:9c:57:08:4f:12:99:4b:a1:4e:c3:ef:
0e:d9:87:7a:1e:69:f8:fa:00:b8:bf:ff:a1:30:dc:
62:ea:58:61:a8:39:a5:9a:53:24:4e:7c:d6:99:e8:
14:29:7d:9b:52:bf:f5:40:d5:cb:30:0b:d2:1c:e3:
51:af:b5:c2:a1:77:5b:3d:3c:41:30:57:41:a7:80:
85:14:f3:59:02:12:d8:89:94:ff:1a:0c:9e:59:e6:
68:a8:32:57:36:a8:ae:ae:8f:2e:50:c2:6b:58:4d:
b7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:11:60:2A:85:CC:57:1A:D9:5B:F6:8D:A4:EE:9D:A5:07:50:52:2E
X509v3 Authority Key Identifier:
keyid:08:4B:8F:D5:C0:E9:DD:7C:C7:31:15:1F:EC:90:F9:17:D5:1E:B9:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEuP1cDp3XzHMRUf7JD5F9UeuWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cbe9bd-da2b-429f-909a-64abf1228f38/1/CEuP1cDp3XzHMRUf7JD5F9UeuWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ce:53:9e:16:e9:2a:c5:53:0e:0c:f2:98:d1:3c:62:54:80:
af:d1:76:cb:1e:da:a6:97:00:df:b2:97:a9:d7:d3:f8:1b:93:
2a:6c:44:fe:9d:73:27:a8:0a:d7:41:ae:9e:77:4e:4e:8d:ff:
3a:c9:b2:7d:75:87:29:20:04:97:46:b1:70:64:11:95:a8:09:
98:e7:32:2b:5a:ce:fd:83:40:76:ae:a8:ca:a2:47:da:bb:4f:
52:f1:d1:9c:52:96:af:bb:8e:32:e2:ea:71:bf:6e:9f:55:d8:
60:57:de:14:e4:0e:8a:4b:71:50:f6:55:94:f0:75:92:48:99:
ad:52:78:04:bd:77:b5:c3:f4:e2:06:bf:a3:4f:52:b3:01:59:
a6:7b:05:15:44:e4:dd:f6:ea:2a:20:98:5f:74:ce:b8:fc:d6:
c3:73:fa:c1:71:48:c5:e6:a7:7e:6f:c8:19:6e:72:c7:d6:0d:
41:40:03:63:a4:87:93:5e:12:0b:8c:a3:2d:ba:9a:c4:21:59:
e3:a8:37:3d:e7:e3:6d:1b:4e:28:f8:e0:76:d1:26:63:e2:e8:
06:ca:92:c9:dc:c2:6b:bc:cc:af:45:6c:be:94:b7:4e:98:37:
69:f5:cb:bc:8e:8f:c7:04:7b:ca:b2:77:44:a6:9c:06:ac:87:
21:50:05:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:48:28 2026 by rpki-client