Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft (raw, json)
Hash identifier: uZwwuAh5A04F+dGtdc2zoMZUVgAcPkrMt2m34f3CDi8=
Subject key identifier: 9B:40:67:1A:85:9C:40:AD:79:52:AD:67:57:27:EB:80:05:F5:0A:7C
Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2
Certificate serial: 019F91A36668CE56E648A08EFA56220EB50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
Manifest number: 0638
Signing time: Fri 24 Jul 2026 01:00:32 +0000
Manifest this update: Fri 24 Jul 2026 01:00:32 +0000
Manifest next update: Sat 25 Jul 2026 01:00:32 +0000
Files and hashes: 1: 4SGHkhKi4QTLFpo-qosd2bahj-Q.roa (hash: dW+Z69p8lpg56uETMd4OUZVzln7S7hdyAq7PkiXDS3o=)
2: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl (hash: mo5R8/AojyItsieB8wHp3fdbZc0geBkvaFhxhMOwRko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:66:68:ce:56:e6:48:a0:8e:fa:56:22:0e:b5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2
Validity
Not Before: Jul 24 01:00:32 2026 GMT
Not After : Jul 25 01:00:32 2026 GMT
Subject: CN=9b40671a859c40ad7952ad675727eb8005f50a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d0:7d:ea:02:a0:45:07:64:ad:ba:53:72:ac:
14:3f:a3:f9:ce:0c:39:d1:b4:59:b0:34:30:3a:fd:
df:d6:8a:a8:33:18:9b:88:e8:9c:6d:d8:99:78:e0:
27:58:da:44:5b:37:48:c2:6d:50:c7:9a:00:ab:0d:
bc:e6:c2:c3:b5:a7:c8:e6:7c:83:ee:c1:62:1d:77:
64:0f:bd:d1:fb:68:5a:d3:2e:73:99:0c:f0:a6:8b:
d5:85:31:af:ff:e6:d4:3c:2f:4d:b4:f7:be:3a:77:
47:92:9d:ef:ed:72:76:28:33:30:46:ed:24:45:54:
f4:4e:a1:f6:be:8f:b1:dd:d3:ba:ad:27:b9:b9:a6:
78:58:32:de:18:0c:54:2a:71:08:84:34:b2:cc:e9:
64:a7:b5:d1:dc:5f:b8:7b:5d:57:42:6f:65:7b:87:
6f:c3:d5:97:1c:4a:14:b8:a1:c8:f4:9d:72:ec:47:
3f:00:fa:01:79:66:a7:ab:ea:fe:9a:dd:e1:40:a0:
cf:f1:34:0b:2e:b1:ea:bd:71:13:53:80:30:ce:4c:
f8:4c:3d:b7:48:0d:c9:87:25:a5:24:a7:96:54:4b:
b6:11:44:3d:3d:a6:2b:62:57:cd:e3:ad:b0:52:56:
fe:56:1d:aa:d6:12:12:b1:b7:ca:b5:0b:5e:85:04:
68:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:40:67:1A:85:9C:40:AD:79:52:AD:67:57:27:EB:80:05:F5:0A:7C
X509v3 Authority Key Identifier:
keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d1:97:fa:04:34:c2:87:07:fe:99:d7:23:87:e8:0e:35:37:
ae:54:33:f5:7b:c8:69:a2:db:e1:11:ad:4f:63:18:09:bc:e2:
13:69:e2:fc:5f:18:ad:85:f4:fe:1d:19:c0:5a:77:0b:3e:b8:
80:c2:b7:61:cd:c7:96:1a:92:26:d9:b5:3e:fa:d2:fe:bd:86:
de:a3:84:f8:a2:f5:10:af:c2:9c:a0:c3:9b:a0:de:52:a4:f1:
33:61:ab:2e:6d:94:88:90:f0:cf:f6:41:a1:11:40:23:f7:e9:
7b:80:80:84:19:5f:88:49:9e:98:a9:0c:44:7b:08:d9:89:c2:
64:d1:51:78:95:dc:e0:f3:09:06:c6:b9:f9:c5:08:ed:0b:95:
f2:7c:8e:b7:12:7c:c6:a1:ea:98:d9:9f:30:b3:5f:64:ab:1a:
c4:ad:23:bd:00:4f:e9:1b:37:85:9a:75:b9:0b:00:11:c4:81:
61:1a:ee:5d:7c:fc:d2:64:4c:cc:fa:b8:c4:3f:49:5c:c0:d6:
b8:11:47:f3:b1:47:81:00:bb:0f:79:03:b7:ba:79:8d:0c:bb:
31:96:ed:76:d3:8a:5f:5b:64:36:bb:f8:58:04:e2:16:68:74:
6a:1f:f3:0b:cb:1c:9f:b6:9c:53:db:90:6b:78:c7:99:eb:a0:
76:24:52:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:59 2026 by rpki-client