Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
File: CEIhaO2oQjBU2C6wGMOD4tvor98.mft (raw, json)
Hash identifier: e4w9IeNSKqrn7hgU4Gz8h9N9jG2+zT22bJ8OlD+gecc=
Subject key identifier: 7C:21:76:6A:0F:02:22:CA:D2:E4:A2:8A:B8:EE:6D:A3:46:82:98:24
Authority key identifier: 08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
Certificate issuer: /CN=08422168eda8423054d82eb018c383e2dbe8afdf
Certificate serial: 01A0CD11750AF30568B95E98865A5751F23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
Manifest number: 1794
Signing time: Wed 23 Sep 2026 07:01:08 +0000
Manifest this update: Wed 23 Sep 2026 07:01:08 +0000
Manifest next update: Thu 24 Sep 2026 07:01:08 +0000
Files and hashes: 1: CEIhaO2oQjBU2C6wGMOD4tvor98.crl (hash: Tnl0tMGQFFGx2gqjy6pS+RzVxeYmFNzkM1+6tuv3hS4=)
2: cFauzwqXomgkVBlhCEWJrgK_IBo.roa (hash: 3eFRfx8k6ux2BDXfQobN4cZglfrrJQFQAkF7k25/Hiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:75:0a:f3:05:68:b9:5e:98:86:5a:57:51:f2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08422168eda8423054d82eb018c383e2dbe8afdf
Validity
Not Before: Sep 23 07:01:08 2026 GMT
Not After : Sep 24 07:01:08 2026 GMT
Subject: CN=7c21766a0f0222cad2e4a28ab8ee6da346829824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a6:09:c1:b5:8e:39:e5:5b:9c:80:00:65:0b:
00:d9:47:ad:01:41:27:f4:80:54:a9:22:35:3b:d7:
f4:d3:25:c1:1a:c6:5e:66:26:b8:ae:22:c0:f1:d5:
e2:48:44:5d:c6:bc:a1:39:e0:d0:c1:83:85:fd:02:
e5:85:46:01:08:9b:d8:46:10:74:c7:1d:7e:d1:13:
e4:40:9e:89:99:72:79:ea:90:45:ec:14:c6:8a:91:
e3:9d:aa:9a:ac:01:68:4d:74:75:bf:ec:6b:e2:c0:
f9:78:cd:f8:e3:4b:ec:34:2e:00:71:3f:a7:20:cd:
dc:ab:a6:98:46:3f:b1:b2:72:2c:28:35:68:05:85:
bb:e0:a5:cc:b0:fd:d1:ee:f9:c7:99:fb:0e:a0:9a:
b6:7f:c9:bd:e7:55:b3:32:5d:f2:26:70:81:a6:d6:
6f:b8:6a:97:33:35:b3:9a:d6:a4:ec:a1:cb:10:58:
07:ca:d2:a0:b9:08:28:0b:19:c4:d0:58:49:c2:96:
6d:d8:3a:1a:f0:40:7d:6e:14:0c:13:b3:5f:92:a6:
39:0f:cb:29:93:10:18:33:bd:fa:3b:a0:b3:86:b4:
70:67:d3:ab:19:38:42:01:56:5f:81:4e:b3:44:41:
eb:de:3f:39:fb:17:0f:d2:cd:1a:cb:64:12:76:c6:
cd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:21:76:6A:0F:02:22:CA:D2:E4:A2:8A:B8:EE:6D:A3:46:82:98:24
X509v3 Authority Key Identifier:
keyid:08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:92:ce:d8:c4:7e:d9:01:53:18:cc:1a:ef:a0:07:8d:42:90:
03:08:aa:e7:8b:73:f0:d0:4b:fe:72:f7:d3:bb:c5:cc:fb:fa:
60:92:21:0f:69:9a:a1:42:8e:72:35:c5:a6:b1:03:e0:e1:6e:
52:08:9c:9c:45:fe:06:23:4e:b8:24:97:1c:94:6e:62:9a:87:
48:27:12:3e:33:aa:12:26:c6:cf:dc:23:51:10:0c:06:8a:94:
f9:23:ba:81:9f:73:48:f3:1a:34:57:3b:36:2e:69:90:fd:68:
5e:14:85:43:85:3c:22:43:34:a9:76:05:94:25:ad:43:0d:d3:
e4:47:bc:fa:0c:71:90:ae:2c:0b:90:cd:7a:be:59:3f:ac:42:
d7:0b:39:7d:77:22:49:12:77:a2:8f:64:4e:07:fa:54:1a:d3:
8f:46:b4:a7:22:bc:38:e5:84:44:fd:50:08:67:7c:4f:3d:88:
f9:12:e1:f2:6d:05:0e:b3:2d:7b:22:b6:40:0f:06:9d:89:c9:
3c:2d:26:43:ce:37:2c:37:0a:66:57:79:19:c2:b6:54:f1:29:
b7:45:61:28:24:9d:d4:4d:7d:79:20:fd:29:92:27:d4:ce:e1:
26:db:ef:2a:0d:13:2b:ec:8b:a1:11:2b:c6:32:77:9f:59:ac:
8a:0f:1a:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNEXUK8wVouV6YhlpXUfI7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDIyMTY4ZWRhODQyMzA1NGQ4MmViMDE4YzM4M2UyZGJl
OGFmZGYwHhcNMjYwOTIzMDcwMTA4WhcNMjYwOTI0MDcwMTA4WjAzMTEwLwYDVQQD
Eyg3YzIxNzY2YTBmMDIyMmNhZDJlNGEyOGFiOGVlNmRhMzQ2ODI5ODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqYJwbWOOeVbnIAAZQsA2UetAUEn
9IBUqSI1O9f00yXBGsZeZia4riLA8dXiSERdxryhOeDQwYOF/QLlhUYBCJvYRhB0
xx1+0RPkQJ6JmXJ56pBF7BTGipHjnaqarAFoTXR1v+xr4sD5eM3440vsNC4AcT+n
IM3cq6aYRj+xsnIsKDVoBYW74KXMsP3R7vnHmfsOoJq2f8m951WzMl3yJnCBptZv
uGqXMzWzmtak7KHLEFgHytKguQgoCxnE0FhJwpZt2Doa8EB9bhQME7NfkqY5D8sp
kxAYM736O6CzhrRwZ9OrGThCAVZfgU6zREHr3j85+xcP0s0ay2QSdsbNlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwhdmoPAiLK0uSiirjubaNGgpgkMB8GA1UdIwQY
MBaAFAhCIWjtqEIwVNgusBjDg+Lb6K/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85NjBhMmItMzM3ZC00ZDAyLWJhODEt
NmUxOWY2NzlhNjIzLzEvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS85NjBhMmItMzM3ZC00ZDAyLWJhODEtNmUxOWY2NzlhNjIz
LzEvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs5LO2MR+
2QFTGMwa76AHjUKQAwiq54tz8NBL/nL307vFzPv6YJIhD2maoUKOcjXFprED4OFu
UgicnEX+BiNOuCSXHJRuYpqHSCcSPjOqEibGz9wjURAMBoqU+SO6gZ9zSPMaNFc7
Ni5pkP1oXhSFQ4U8IkM0qXYFlCWtQw3T5Ee8+gxxkK4sC5DNer5ZP6xC1ws5fXci
SRJ3oo9kTgf6VBrTj0a0pyK8OOWERP1QCGd8Tz2I+RLh8m0FDrMteyK2QA8GnYnJ
PC0mQ843LDcKZld5GcK2VPEpt0VhKCSd1E19eSD9KZIn1M7hJtvvKg0TK+yLoREr
xjJ3n1msig8aeg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:13:39 2026 by rpki-client