Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
File: CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft (raw, json)
Hash identifier: /XLJW2tpuOmtGhMpmiROk0Kwgjhu4+fGoBGW+LhBpXc=
Subject key identifier: FE:8E:9A:AD:E9:3A:44:58:86:84:C4:AA:DA:C1:8A:AD:8A:8E:52:84
Authority key identifier: 08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
Certificate issuer: /CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Certificate serial: 019D273B09450749CA1A8B7DFDEA248CA94F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
Manifest number: 188B
Signing time: Wed 25 Mar 2026 23:01:13 +0000
Manifest this update: Wed 25 Mar 2026 23:01:13 +0000
Manifest next update: Thu 26 Mar 2026 23:01:13 +0000
Files and hashes: 1: CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl (hash: dJL+8Y6/4fOZp4IHO3VqqG/op5CA8vKDuI9lgzgE9fU=)
2: hSyCHHwvePnnhJaLoj0bPLiKrY0.roa (hash: Q5kLVpiwwKotr0YZjLtoW5+DY5vy3ewkjBXAVZYPMBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:09:45:07:49:ca:1a:8b:7d:fd:ea:24:8c:a9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Validity
Not Before: Mar 25 23:01:13 2026 GMT
Not After : Mar 26 23:01:13 2026 GMT
Subject: CN=fe8e9aade93a44588684c4aadac18aad8a8e5284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:90:34:9a:50:1a:b5:d2:d7:42:05:36:46:f9:
61:cd:e4:8f:01:95:1b:5c:5c:e4:bf:a9:e8:8d:57:
d3:6c:d7:b8:b2:02:1f:2c:4e:3f:e7:1a:40:3e:1b:
1f:2c:1e:6d:cb:c0:38:dc:21:80:b1:ca:12:14:bb:
84:85:a1:ec:12:64:24:c7:08:29:b1:e1:15:c1:3d:
99:11:c5:85:2e:02:a7:65:a5:e3:4d:4f:af:47:79:
f5:ce:a2:1a:2e:5d:ed:e1:8e:5a:ca:84:fe:7a:9b:
80:ee:5e:15:8a:2d:a3:f9:9a:05:f7:7a:c1:fd:68:
70:06:be:08:5b:13:64:69:28:8a:5f:fe:2d:d0:59:
66:a9:30:50:1c:aa:20:1a:de:c8:4f:c2:73:36:17:
6b:0b:8e:b9:48:c5:c4:8a:f2:5b:63:35:47:b7:18:
df:d7:38:6f:79:bb:4a:ca:e8:21:f4:5b:3c:d5:4c:
8d:ac:0e:38:49:5e:25:47:e1:d4:a6:5e:fa:f7:45:
4f:2f:99:d6:32:d4:b3:de:f3:43:bd:de:b0:a2:03:
42:f3:84:fa:be:71:3f:0c:f1:9f:44:44:fa:38:ee:
e2:42:f2:ff:d4:af:b5:c3:12:38:ae:e8:26:4f:44:
ae:3f:5a:66:d9:ff:ad:9c:f0:58:80:8c:05:aa:a7:
92:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8E:9A:AD:E9:3A:44:58:86:84:C4:AA:DA:C1:8A:AD:8A:8E:52:84
X509v3 Authority Key Identifier:
keyid:08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:be:69:b5:e7:1b:10:07:f8:a3:c0:61:7b:22:59:ba:b2:4c:
c5:6f:e8:38:38:e1:b0:69:01:6d:e2:ea:3a:3b:3d:d8:2b:9f:
a3:27:b9:26:28:d0:0a:fd:d5:83:43:8d:3d:95:3e:d5:38:69:
32:dd:7a:8e:80:bf:74:a4:69:19:ee:f6:a3:40:eb:cb:71:25:
00:11:9e:4a:d9:a6:97:79:58:71:40:d7:90:c4:65:19:d8:32:
7e:b0:a4:88:5d:66:31:4c:64:96:cd:6d:db:71:95:b5:4c:0e:
bd:78:b1:89:0e:bf:de:67:5c:dd:c3:e9:07:2f:dd:c5:ed:e2:
4a:2f:45:10:ae:dd:e6:30:d9:de:e5:d2:82:7d:4b:d2:e7:9e:
09:a1:df:e7:a6:75:54:99:08:1a:f8:f7:7e:dc:0b:5d:c5:c4:
82:1b:2d:e5:50:1f:d3:33:9b:e3:82:37:8d:2f:fc:e3:dd:67:
cf:47:43:10:d4:00:cb:2c:2b:dd:af:20:f8:d1:bb:f7:d4:b3:
c3:de:90:c4:4c:5e:92:98:5a:4d:b6:65:52:d8:c5:04:6c:60:
5c:51:ea:04:72:03:72:13:6a:c7:cd:07:71:94:89:bc:8d:18:
9c:80:62:1a:87:0f:d6:5b:ee:0b:dc:15:71:76:b4:7d:3a:79:
33:df:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:22 2026 by rpki-client