Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft (raw, json)
Hash identifier: LXNUijMIXpuYN1MxpTw5G9udasucY34CSqJEnuIgVt8=
Subject key identifier: 01:B1:BB:17:01:72:69:EA:AA:51:20:2A:94:3D:56:75:F4:EA:5E:D8
Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2
Certificate serial: 019D273AF9752FA99BD8A5C525C2D583A828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
Manifest number: 04F7
Signing time: Wed 25 Mar 2026 23:01:09 +0000
Manifest this update: Wed 25 Mar 2026 23:01:09 +0000
Manifest next update: Thu 26 Mar 2026 23:01:09 +0000
Files and hashes: 1: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl (hash: W2m1jwl8OGSGcJ0VwV5cIK97O//euwgIBaXCy72z1ks=)
2: N-nhcmtf4VXbPG95Fke-T4y6cxE.roa (hash: xYYYsHBj06laIvHrXkIBEGVHR61QyHRwXKsgeQHiEUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f9:75:2f:a9:9b:d8:a5:c5:25:c2:d5:83:a8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2
Validity
Not Before: Mar 25 23:01:09 2026 GMT
Not After : Mar 26 23:01:09 2026 GMT
Subject: CN=01b1bb17017269eaaa51202a943d5675f4ea5ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:b4:b5:10:a8:ae:9f:1b:f3:95:89:ae:18:
9e:d3:1f:b2:48:b7:75:6e:1f:79:47:55:28:57:ed:
64:21:a1:69:b3:72:27:dd:6a:3f:1b:12:df:11:e4:
7b:f7:b6:17:cb:2f:89:ae:0f:89:0c:5e:6f:f3:1f:
2b:af:f2:30:26:00:24:ca:af:57:ac:ee:91:77:5c:
44:67:b0:fd:69:29:a5:6d:f3:f7:81:78:82:26:3b:
2c:be:8d:0b:a6:9c:33:42:00:f1:6a:54:5c:2c:ec:
ee:1d:91:c4:4c:70:23:5b:76:f8:2c:14:ee:8b:9b:
c6:f4:e2:4b:81:bd:c9:4b:1e:cf:b7:73:07:0c:eb:
e1:7b:aa:b7:ee:5f:b4:3a:f2:8e:95:5c:e1:a8:fa:
a6:30:71:fe:1a:c1:2d:91:76:c4:bf:42:b6:21:6b:
77:82:c4:91:c8:78:c7:59:43:87:1f:84:92:b9:d1:
67:32:75:12:9e:f1:dc:7f:6c:af:43:69:f1:b3:b3:
e5:88:ba:97:72:04:65:2b:16:e0:76:8f:d2:77:94:
eb:c0:06:94:34:c5:dd:67:ad:19:a6:a1:4c:1b:1e:
01:8d:ca:7c:d7:ed:bd:e4:87:f1:62:04:f1:fd:7f:
c9:c0:bc:50:6c:87:c6:ee:0e:a2:b2:04:d6:86:b2:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B1:BB:17:01:72:69:EA:AA:51:20:2A:94:3D:56:75:F4:EA:5E:D8
X509v3 Authority Key Identifier:
keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:e4:93:ad:ed:07:cd:1f:3e:2b:12:ca:89:ac:90:41:6e:3e:
64:dc:60:8b:01:b0:4d:46:68:e9:d9:83:2b:84:ca:46:0d:ac:
b2:4c:7e:b3:eb:9d:a3:ef:78:ad:0a:49:e0:7a:79:0a:b2:b4:
a0:58:50:04:16:80:91:46:ee:a8:e7:2b:e1:e0:28:67:57:ce:
6e:50:07:28:eb:67:5b:95:8c:e1:e0:75:68:17:89:87:3e:f9:
d2:19:de:c3:4c:89:2b:cc:da:88:b5:4c:52:4a:26:42:f5:f3:
f3:72:d8:3d:ae:e1:78:6c:c4:a0:4b:16:d0:c8:6c:92:bd:0f:
0a:7c:1a:65:19:d1:a1:5f:aa:65:ba:e4:2d:a0:db:45:50:65:
cf:73:3c:02:16:51:b4:d5:10:2f:a9:b8:64:35:ea:ca:1e:f7:
f2:e3:55:8f:9d:1f:aa:54:51:97:3a:71:7c:30:0d:e2:72:78:
34:46:2e:68:02:23:f7:94:02:05:a0:fb:d5:f8:53:6d:d1:7a:
9a:87:03:7c:a1:19:14:08:8f:1d:11:2b:14:1c:69:2e:b6:1c:
94:28:f0:2f:87:cb:c1:37:6d:82:6f:08:c2:a6:00:62:fd:62:
c6:1c:cc:c8:16:da:52:be:4e:1e:d6:93:b4:30:01:9a:3a:56:
e0:3e:a0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:22 2026 by rpki-client