Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft (raw, json)
Hash identifier: CY1sGHxusmnhaJjsoxDLpNa3loD9nBzszcpmL/iYj5I=
Subject key identifier: 2D:B8:C2:31:89:64:0A:FE:5D:7E:81:4A:4B:D7:32:F1:60:B7:33:05
Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2
Certificate serial: 019E1C7E07899342E0B2C81D6F31E284553A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
Manifest number: 0576
Signing time: Tue 12 May 2026 14:01:21 +0000
Manifest this update: Tue 12 May 2026 14:01:21 +0000
Manifest next update: Wed 13 May 2026 14:01:21 +0000
Files and hashes: 1: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl (hash: 5P8rf34uEYnX50W+q1BUIz0Z7QxmJdq3e7DyDzp22EE=)
2: N-nhcmtf4VXbPG95Fke-T4y6cxE.roa (hash: xYYYsHBj06laIvHrXkIBEGVHR61QyHRwXKsgeQHiEUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7e:07:89:93:42:e0:b2:c8:1d:6f:31:e2:84:55:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2
Validity
Not Before: May 12 14:01:21 2026 GMT
Not After : May 13 14:01:21 2026 GMT
Subject: CN=2db8c23189640afe5d7e814a4bd732f160b73305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:43:71:34:51:b9:49:b1:35:56:44:f3:49:18:
83:c1:b3:39:dd:3a:58:5b:93:12:35:31:51:77:da:
be:30:4e:36:17:ba:62:c7:ee:0f:67:ee:49:5f:57:
fe:c6:fa:36:a1:d6:b5:6b:46:ee:ba:95:c8:dc:23:
4a:78:03:c7:f6:84:3f:58:81:42:da:8f:ff:3d:e2:
71:4c:70:89:c0:30:09:ff:2d:78:79:9f:c4:9d:86:
be:a7:7e:98:c3:5c:b8:8f:45:fd:6f:e9:47:04:09:
de:f7:28:02:b5:00:21:2d:a6:19:60:66:b8:72:f7:
30:8f:c4:a0:59:be:09:51:44:10:6c:36:66:af:45:
ad:fe:ef:d4:6c:d4:d2:68:21:15:38:6e:36:8b:0b:
7a:17:81:f1:92:cb:25:19:03:7b:4c:9a:cf:c2:f1:
80:3e:8f:84:88:39:f9:86:e0:a3:c8:23:97:4b:d4:
7b:b1:39:03:cf:3c:49:18:3a:32:79:9d:b0:f2:bf:
e5:3e:b2:c2:11:08:6f:d3:fe:b4:67:60:e8:23:a7:
fb:d0:4f:52:ef:a7:56:4e:d8:8a:69:22:c4:d0:bf:
e2:2d:2c:47:20:f1:2a:4d:14:15:84:5f:54:44:1a:
77:1f:f9:1b:77:ba:c1:f5:82:dc:c1:59:8e:b2:c3:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B8:C2:31:89:64:0A:FE:5D:7E:81:4A:4B:D7:32:F1:60:B7:33:05
X509v3 Authority Key Identifier:
keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:32:42:a2:d7:8f:96:32:ea:55:dc:ad:44:a4:50:f7:4e:08:
e9:48:c2:45:d7:5f:b3:5c:b3:d6:98:0e:fc:c9:17:35:0b:5e:
c9:83:6d:65:63:f0:8e:d0:01:56:1e:50:55:14:f8:52:a1:70:
73:d1:a0:88:ea:18:83:c4:b0:10:ea:a1:fd:e3:34:a3:47:66:
40:30:1e:90:ac:e4:6a:bc:9b:df:50:ea:0f:3f:b1:c0:70:18:
a0:33:45:68:a7:d1:21:62:88:6b:07:23:5e:bd:ba:a0:74:6f:
7b:4c:ba:31:fb:f1:fd:23:3d:2f:3b:c0:22:dd:98:86:05:ab:
63:0e:f2:95:c9:47:bb:a7:19:29:50:cb:b9:72:fd:22:87:db:
13:ba:43:7d:33:15:0e:84:c0:7f:77:1f:37:1b:77:c8:d3:50:
c3:ed:e5:db:0f:f3:8c:5a:65:7d:f1:ac:ca:13:d0:ad:c0:42:
da:06:a7:ae:94:ec:50:57:b9:c3:5b:42:df:9a:d6:f9:c2:8b:
03:ea:f0:93:97:1b:07:2b:8a:d8:c1:85:b8:28:e4:53:bd:51:
81:e2:bc:2f:79:97:52:7b:c8:5b:52:14:71:e1:fa:4a:50:81:
b2:fa:90:c5:9a:ad:ce:96:56:e2:ba:f6:52:28:33:bb:54:51:
af:a0:29:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:13 2026 by rpki-client