Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
File: CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft (raw, json)
Hash identifier: s4aRR8ITb294JT9RMVj4E0a4k2U2/7Araunf1a1pXiU=
Subject key identifier: 3D:ED:5B:87:9E:40:9E:A4:A2:1E:35:6B:8A:B2:DA:11:6C:ED:1E:6C
Authority key identifier: 08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
Certificate issuer: /CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Certificate serial: 01A0CFDB3020E25780088D488FBCCEC3F23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
Manifest number: 1A70
Signing time: Wed 23 Sep 2026 20:00:43 +0000
Manifest this update: Wed 23 Sep 2026 20:00:43 +0000
Manifest next update: Thu 24 Sep 2026 20:00:43 +0000
Files and hashes: 1: CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl (hash: a+e45eCN6E+AI0TKXxAZS0f7epPfbMBNDkDdmUdw5o8=)
2: hSyCHHwvePnnhJaLoj0bPLiKrY0.roa (hash: Q5kLVpiwwKotr0YZjLtoW5+DY5vy3ewkjBXAVZYPMBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:30:20:e2:57:80:08:8d:48:8f:bc:ce:c3:f2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Validity
Not Before: Sep 23 20:00:43 2026 GMT
Not After : Sep 24 20:00:43 2026 GMT
Subject: CN=3ded5b879e409ea4a21e356b8ab2da116ced1e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:56:39:6d:96:8b:e9:93:6e:b9:af:ea:80:49:
76:f4:67:fe:e8:53:15:37:73:a8:d5:ea:98:4e:93:
08:c0:48:3a:db:b9:17:6f:6d:9c:4d:4f:01:91:8d:
c7:67:09:a9:4b:01:91:33:d9:72:f4:ef:a3:18:0a:
5d:53:6b:ff:ae:8f:01:11:b6:c8:30:6d:d5:09:8e:
67:a9:4b:4b:77:7d:73:e6:ae:99:b6:95:36:e6:0f:
0f:dc:c1:dd:90:3c:f3:68:27:42:0b:85:84:9a:ae:
3b:9c:52:33:c4:57:7d:8d:66:10:4a:f8:74:ec:77:
e8:d9:e0:97:8a:bf:52:12:40:8d:f7:7f:01:80:1d:
c5:10:75:f6:c3:c2:da:71:58:82:3b:66:54:c5:10:
5f:7d:74:5e:14:a3:2b:b6:1c:82:83:65:78:85:19:
a5:33:14:11:59:32:39:2c:f4:6f:80:fa:1f:a4:33:
18:13:2f:cb:d5:8d:3b:8c:b8:03:8a:58:dc:e5:cb:
4b:0b:da:26:4d:f4:bb:bb:6d:94:de:44:26:f6:b1:
6a:a3:51:30:a2:90:44:18:44:75:72:28:36:79:ec:
94:d6:6f:ad:df:21:e8:72:a7:57:c1:be:71:17:72:
bd:47:cc:0c:bc:5a:55:94:d4:50:9a:84:42:ce:bd:
68:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:ED:5B:87:9E:40:9E:A4:A2:1E:35:6B:8A:B2:DA:11:6C:ED:1E:6C
X509v3 Authority Key Identifier:
keyid:08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:93:37:bf:a4:75:61:71:ee:de:cf:ae:52:d5:71:54:bb:ae:
fb:cd:4e:b3:b1:95:13:cd:c9:20:14:3e:31:e8:7c:e7:fd:2c:
09:75:80:bc:82:e2:98:82:b8:42:0b:44:8f:8a:fe:f2:ef:79:
b6:75:8d:c6:2d:b9:04:35:a5:65:54:fe:13:95:8b:0b:83:9c:
4d:f3:f1:e2:9a:fa:cf:e7:33:32:8b:ca:3b:d5:e8:53:75:04:
18:86:1b:3c:3e:e4:cf:a4:25:00:d5:09:e3:d7:51:62:e4:49:
a5:c0:91:9f:03:99:dc:c0:83:83:20:cb:7f:49:58:b5:10:e0:
cc:d3:25:ce:37:19:bf:61:e1:7d:05:17:65:ec:b0:76:15:f8:
51:86:ff:d4:75:0b:ac:fd:11:fc:c8:22:62:5f:6c:5d:be:fd:
88:88:6d:f0:9f:02:8d:de:be:82:0c:0b:a3:3e:f0:cf:f6:07:
65:e6:22:ed:be:38:7e:7f:cc:79:88:28:2c:ff:01:8a:25:20:
ad:39:c9:1f:d8:d4:30:e1:d9:1a:61:a7:7c:95:47:19:c4:d7:
6b:64:db:75:3c:7e:2a:f2:76:0e:d1:05:a8:04:df:ac:78:13:
70:c6:24:44:42:13:91:57:3c:5c:97:3e:ec:fe:ab:aa:5f:06:
b2:fe:13:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:06:41 2026 by rpki-client