Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft (raw, json)
Hash identifier: bBtYbnFTgS9ibRBwUJ4RWMsMsq4QtyntG2eCeoF6U3o=
Subject key identifier: C5:01:E5:C0:3F:57:51:00:A7:67:47:85:4E:7E:EA:DF:4B:41:F9:03
Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2
Certificate serial: 01A0CE5AB451CE9431A57A142EBF7D265CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
Manifest number: 06DC
Signing time: Wed 23 Sep 2026 13:00:45 +0000
Manifest this update: Wed 23 Sep 2026 13:00:45 +0000
Manifest next update: Thu 24 Sep 2026 13:00:45 +0000
Files and hashes: 1: 4SGHkhKi4QTLFpo-qosd2bahj-Q.roa (hash: dW+Z69p8lpg56uETMd4OUZVzln7S7hdyAq7PkiXDS3o=)
2: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl (hash: 4M+pMb/C6fbQv2O3RRjRENHky+DLzWvk6gnJNMcZ8uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:b4:51:ce:94:31:a5:7a:14:2e:bf:7d:26:5c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2
Validity
Not Before: Sep 23 13:00:45 2026 GMT
Not After : Sep 24 13:00:45 2026 GMT
Subject: CN=c501e5c03f575100a76747854e7eeadf4b41f903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:4a:dd:e8:66:c5:92:01:f1:30:04:2a:12:03:
5f:a5:2f:f6:8b:c9:d5:18:ae:a7:86:01:76:8c:55:
09:a5:52:e3:64:51:3c:c7:77:f3:d5:6b:10:ae:b2:
e7:38:1e:43:e4:f1:3b:43:7e:ea:28:54:ea:58:a3:
0f:b7:d4:67:b1:9d:28:5c:67:56:0b:d9:dc:62:5a:
e1:7f:1a:72:4c:64:d0:68:9e:63:bb:cf:cd:93:cc:
49:82:01:b9:36:63:fb:7c:2c:bb:70:c1:a4:28:bf:
97:74:b1:d0:88:15:a3:39:07:36:c3:e6:b5:98:b3:
3e:39:68:d4:8e:70:77:d2:19:d0:fe:d0:80:3c:a5:
98:10:29:10:5a:ac:ef:4c:6d:67:b4:f9:c5:27:9e:
76:6d:6d:36:5e:a1:68:fd:bc:5a:f8:4b:04:ff:fe:
d6:9f:6f:fc:e4:ac:79:0d:b7:e1:40:dd:97:a3:5c:
df:76:25:e1:15:ce:82:c1:4d:77:97:32:c6:15:b4:
c6:5d:cc:fc:ae:91:2d:ae:00:d6:b4:a8:c7:99:41:
dd:8e:fb:09:67:d4:81:6d:f9:ba:c2:f1:3c:49:bb:
ce:34:bd:60:70:a7:49:26:0a:cb:46:d7:c9:f7:20:
2c:b7:05:01:f4:ab:1b:57:ef:1f:f1:7d:28:32:4b:
e6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:01:E5:C0:3F:57:51:00:A7:67:47:85:4E:7E:EA:DF:4B:41:F9:03
X509v3 Authority Key Identifier:
keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ef:09:8e:7b:e5:56:41:ea:26:08:80:75:b3:0f:79:c5:f9:
7c:75:d9:37:a4:b0:9d:48:ff:23:de:04:4c:a7:47:b0:fc:06:
18:e0:33:d4:c2:ed:63:ec:dc:82:85:61:da:db:43:66:41:91:
ee:3d:43:39:ad:53:55:23:34:bd:a6:a5:18:3e:bf:6d:f7:15:
ca:1c:3b:f0:de:de:80:90:3e:27:d3:14:9d:1f:7b:16:da:6f:
61:71:03:45:c0:a3:73:30:8c:49:b6:28:92:b7:a4:e8:54:c5:
a8:17:9a:e3:33:38:d3:06:2d:87:56:24:5c:78:3c:7f:4f:d7:
64:a5:dc:e8:2e:ed:b7:7f:65:9f:f2:ac:da:fe:bc:0b:63:47:
cc:16:90:f6:cd:e9:47:6f:92:b3:e8:55:cf:92:8b:fc:fd:2d:
08:f8:94:a5:70:d3:2d:b5:d3:bb:7c:73:91:ea:a6:26:17:da:
da:0d:f3:06:9c:34:3a:35:68:78:01:3d:d2:66:12:d3:5f:b9:
2b:2e:78:ac:bc:36:69:a8:cf:d6:b0:3a:91:e5:7d:93:82:09:
4f:1f:c6:75:7c:ee:90:33:bc:d1:72:40:9f:98:2b:29:50:03:
05:45:f2:c4:1f:fe:9a:3a:1c:c7:95:c7:98:b4:38:f7:43:af:
53:07:af:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:50:07 2026 by rpki-client