Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
File: CEIhaO2oQjBU2C6wGMOD4tvor98.mft (raw, json)
Hash identifier: 2X7e17JfowDUNdJ5h208oXYKE3KBOCPKHbDZgvnxp5Q=
Subject key identifier: 0F:89:B5:47:E1:8D:3B:88:B9:F5:2A:F2:05:CD:0D:17:F8:93:3F:8A
Authority key identifier: 08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
Certificate issuer: /CN=08422168eda8423054d82eb018c383e2dbe8afdf
Certificate serial: 019F92485355DD674DC06392BCEF03DE4397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
Manifest number: 16F1
Signing time: Fri 24 Jul 2026 04:00:41 +0000
Manifest this update: Fri 24 Jul 2026 04:00:41 +0000
Manifest next update: Sat 25 Jul 2026 04:00:41 +0000
Files and hashes: 1: CEIhaO2oQjBU2C6wGMOD4tvor98.crl (hash: USJ7ARv8DP69zwLmmfQL4z7crUFL0p4M5R+g3ENVBLM=)
2: cFauzwqXomgkVBlhCEWJrgK_IBo.roa (hash: 3eFRfx8k6ux2BDXfQobN4cZglfrrJQFQAkF7k25/Hiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:53:55:dd:67:4d:c0:63:92:bc:ef:03:de:43:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08422168eda8423054d82eb018c383e2dbe8afdf
Validity
Not Before: Jul 24 04:00:41 2026 GMT
Not After : Jul 25 04:00:41 2026 GMT
Subject: CN=0f89b547e18d3b88b9f52af205cd0d17f8933f8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d3:da:ef:97:a9:67:5f:16:28:a6:e6:c1:9d:
2a:5e:5b:04:bd:ed:47:79:45:75:5d:8d:ad:06:dc:
1e:4c:06:45:55:f3:d4:fe:d5:a1:fb:c2:c0:fd:77:
8b:32:87:d1:8a:f4:a8:90:9f:e0:22:5e:b3:2d:40:
a5:86:19:a5:07:e4:08:80:4b:86:67:bc:6d:af:90:
26:83:94:d9:73:28:8d:17:77:78:09:b0:c6:91:82:
5c:e7:a9:de:e0:c3:f5:42:cb:59:19:cc:f6:fa:d4:
e0:9a:11:95:c1:1b:e3:46:64:d3:a2:d9:c8:00:3f:
98:88:db:4b:50:4c:1f:28:8c:14:ed:91:43:e2:14:
9c:4d:44:6f:89:fe:f2:59:a1:bd:92:c9:de:73:6b:
fe:dd:f4:1f:a2:4b:64:4f:2e:8a:0c:25:f7:89:96:
c1:83:b1:39:55:4e:99:93:0c:7f:21:da:fc:fa:6d:
48:f7:95:d2:87:5a:6f:8a:59:1a:34:5c:07:09:8e:
3c:13:47:bd:e4:3d:4d:57:cb:22:84:f9:4d:39:01:
25:e7:8e:f4:2c:94:f9:5f:3a:2f:da:43:86:6a:95:
9a:e9:a1:c0:03:7f:59:43:31:66:d0:63:31:f2:f3:
07:f9:d8:61:9d:92:72:f4:2f:5f:ac:fa:c2:2d:af:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:89:B5:47:E1:8D:3B:88:B9:F5:2A:F2:05:CD:0D:17:F8:93:3F:8A
X509v3 Authority Key Identifier:
keyid:08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5d:92:61:0e:ec:2c:a2:9c:b8:a0:e2:18:89:0d:d6:7d:7d:
ee:d5:93:a3:99:d5:51:07:26:c5:af:27:2b:be:28:58:40:d8:
1e:16:2a:0b:6d:eb:b7:7e:c3:24:39:a8:80:68:b5:cb:ae:ee:
a8:ad:7c:27:b3:12:52:9e:35:70:7d:ea:09:c5:70:a5:48:fb:
ff:d1:15:05:f3:28:f4:e6:cb:d7:b8:8d:27:cb:34:1b:02:1a:
a9:9e:db:e1:c7:b4:3d:2d:78:88:1f:ed:20:cf:c5:ac:d3:75:
08:3f:b4:e1:8f:44:5d:f2:3b:68:cf:6f:52:9f:89:43:29:a1:
0a:eb:94:66:c9:86:80:af:73:22:44:5d:b1:9c:67:bb:46:04:
c2:7e:5d:fb:a2:ce:6d:9e:b2:6f:80:66:33:51:f6:22:68:75:
9e:95:07:c5:e3:22:f9:a8:10:4a:20:86:57:6e:4c:cc:f9:82:
c4:41:ac:f1:4f:63:ac:93:54:e9:9c:21:4f:93:5b:2e:0e:fd:
cc:cd:c6:23:80:31:07:62:b1:c0:93:b5:de:8e:b0:0e:20:73:
fb:c0:5b:b0:7e:da:c9:7a:8b:cc:a7:f4:30:c5:a0:33:5b:20:
a9:65:2e:12:f5:28:90:a8:57:38:d3:69:0a:75:cd:ac:78:33:
77:d8:6c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:45:14 2026 by rpki-client