Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
File: ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json)
Hash identifier: KdoJkElZh8NHWll5IiU7m/OtBy0h86FXwN5/svR6mx8=
Subject key identifier: 2F:97:F8:38:05:65:23:75:12:8F:34:F3:E6:20:D5:F2:59:C3:9A:8A
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 019E1D90B2CFFD2883D18D3B658D8029F5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
Manifest number: 08A2
Signing time: Tue 12 May 2026 19:01:22 +0000
Manifest this update: Tue 12 May 2026 19:01:22 +0000
Manifest next update: Wed 13 May 2026 19:01:22 +0000
Files and hashes: 1: 7IBa4M21L1weC-CB5rmV2ELdcjc.roa (hash: r3PNsAmqfmfHmKjnNC5k/puJxwcYNjtuxkNcsT/TBwM=)
2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: /IvaVphEFQzxd0TdN2MFpNVyamPgSrcNV1KjayqOqwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:b2:cf:fd:28:83:d1:8d:3b:65:8d:80:29:f5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: May 12 19:01:22 2026 GMT
Not After : May 13 19:01:22 2026 GMT
Subject: CN=2f97f83805652375128f34f3e620d5f259c39a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:22:93:95:07:e0:bd:61:b1:12:60:54:65:e5:
b0:15:c6:cb:dc:64:0c:40:e7:4c:6b:33:1b:65:d7:
0b:93:5c:86:4c:b0:97:1a:75:a6:b5:d6:1a:ce:cc:
60:84:48:af:94:73:f7:f1:c8:50:a8:e8:16:58:b9:
25:dc:11:3b:d4:6a:cf:ae:4d:85:e6:83:a5:05:70:
64:78:99:3d:bf:0b:a7:49:ca:51:7f:94:79:cd:70:
e4:70:74:c3:78:af:9e:dd:5b:61:06:42:dd:90:0f:
89:de:0d:72:86:13:07:eb:da:36:1c:e2:4f:f0:6b:
61:3c:9b:b6:28:40:69:1c:3f:05:fe:7d:a6:90:b5:
ec:d0:83:9a:3c:37:d0:91:90:89:ce:bd:87:f1:bf:
23:44:22:f0:7b:7e:9f:71:85:2c:19:dd:1b:89:8f:
36:3d:b0:8e:84:c3:f6:db:76:bf:7c:a4:0f:32:72:
9c:e9:91:4c:f6:00:35:25:bc:ff:76:11:ec:1a:a6:
65:58:33:bb:55:38:f4:17:6d:6b:9c:ce:36:80:35:
29:1c:8a:ac:95:cd:1c:8f:5e:a7:22:b7:2a:28:a1:
d4:dc:0a:19:71:55:70:91:f1:45:eb:cc:be:41:8f:
16:0d:b5:11:b2:8b:91:79:22:9f:57:43:fa:01:c7:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:97:F8:38:05:65:23:75:12:8F:34:F3:E6:20:D5:F2:59:C3:9A:8A
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:7a:37:26:15:a7:14:07:fe:06:4d:a3:55:53:52:30:cb:8c:
3c:05:e2:91:24:f2:73:4b:e4:20:3a:bf:5d:73:17:64:e0:21:
94:7a:ba:3e:7a:fb:4b:d3:61:40:56:ba:c7:9d:ae:a9:c6:f4:
ed:b1:fc:eb:61:13:0a:e5:4e:55:23:7a:08:14:8f:15:d3:3e:
1c:5a:b1:74:ab:ae:5c:9c:8e:80:1c:7a:f3:0f:40:e8:4e:a6:
57:d3:ab:57:05:63:9e:58:9a:9b:43:12:1a:f2:21:50:d5:ee:
f6:64:1d:cb:ad:8b:d0:4a:cd:22:db:b6:f7:c2:bd:04:07:fa:
90:8c:fb:8e:f5:0a:2c:a0:34:bd:dc:a7:a7:a5:a9:c4:63:87:
6d:ac:a5:ce:65:09:09:dd:95:cd:d4:8a:0f:22:de:e1:72:db:
f9:a0:4a:95:22:3e:01:2f:89:a7:df:49:5b:a7:40:a2:d0:42:
2c:d5:72:90:5a:00:96:82:95:3b:9c:86:7a:23:2c:d7:b0:ac:
9b:b3:1d:ea:ad:0b:f3:29:0e:94:a3:9a:9d:14:b0:41:db:f2:
97:e7:37:d2:93:87:09:a9:93:ac:95:0c:91:72:13:23:0b:92:
62:bb:dc:94:c8:1d:1b:9c:c6:41:58:45:34:47:45:f8:2b:36:
53:43:d9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:23 2026 by rpki-client