Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
File: ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json)
Hash identifier: x3cZaRRgc3tYL0Ug+I+FxE96qgD+7rMnW6j5mreMl0Q=
Subject key identifier: A2:4A:9E:C1:7E:42:7C:13:C0:9A:3A:52:F3:C1:55:DB:32:65:09:92
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 019F924889314BBE00DFCDFFC0D3D2731BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
Manifest number: 0963
Signing time: Fri 24 Jul 2026 04:00:54 +0000
Manifest this update: Fri 24 Jul 2026 04:00:54 +0000
Manifest next update: Sat 25 Jul 2026 04:00:54 +0000
Files and hashes: 1: 7IBa4M21L1weC-CB5rmV2ELdcjc.roa (hash: r3PNsAmqfmfHmKjnNC5k/puJxwcYNjtuxkNcsT/TBwM=)
2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: 4QcLaPQdOfwC38UXiWxbf/36QUNvKad5SMxeKjOSDuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:89:31:4b:be:00:df:cd:ff:c0:d3:d2:73:1b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: Jul 24 04:00:54 2026 GMT
Not After : Jul 25 04:00:54 2026 GMT
Subject: CN=a24a9ec17e427c13c09a3a52f3c155db32650992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b1:b5:ff:0d:b7:30:5c:04:35:2d:01:d7:ae:
26:2d:b0:55:83:e4:d0:ae:d5:f2:9a:ae:ac:b9:79:
25:17:f9:5e:ef:ac:96:6f:e0:d3:84:52:e5:a5:b4:
56:ea:f2:c6:03:dc:d7:2c:87:32:4d:39:09:84:56:
48:3d:35:50:ff:9f:a5:92:29:69:1c:14:dd:47:89:
f3:c4:9c:52:d1:25:1b:66:4f:68:4c:af:7f:97:50:
55:48:ae:f8:fc:a1:52:02:d1:e6:5e:ed:70:68:0a:
4d:d6:46:ae:15:2e:05:35:b4:27:ce:5c:af:08:28:
27:90:bd:7f:72:a9:e1:9d:fa:6f:5b:2c:89:19:e5:
e0:01:96:47:90:47:2f:e4:23:64:ce:cd:69:bf:85:
00:c7:fa:f3:58:22:bb:3b:4b:05:16:ea:23:66:c8:
20:9c:8e:e2:e1:21:77:03:9f:b0:58:4e:db:10:e2:
be:d0:35:81:eb:71:11:c2:03:83:92:c2:ed:72:e5:
7b:b6:4e:a5:4a:74:9c:8f:ad:3f:9a:f5:37:3e:f7:
33:5c:4d:88:e6:c0:2d:53:ce:d5:f0:ee:9e:3d:1e:
07:46:c5:e7:50:f6:8f:34:2f:bf:63:f8:e6:32:ea:
62:ab:c6:c6:cf:ef:58:9d:ce:15:7a:31:75:c4:9f:
a4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4A:9E:C1:7E:42:7C:13:C0:9A:3A:52:F3:C1:55:DB:32:65:09:92
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:80:d2:34:c3:29:42:1a:23:ad:e7:b0:88:a2:90:60:25:71:
67:0b:a8:2f:42:ea:62:bd:58:8f:e1:ab:f6:5c:f1:17:36:e4:
60:fd:90:fa:6c:3b:09:80:b1:94:57:1f:9a:e9:14:07:0a:20:
98:9c:9d:7a:e8:f3:13:f3:86:d3:f0:14:1d:3c:47:0a:a9:e5:
1c:dc:82:82:bd:5a:71:5e:d7:66:8b:55:44:07:aa:8b:b3:e2:
3c:ac:fb:1e:d6:6a:18:f5:1c:f9:3a:e3:80:69:36:0e:02:db:
a0:b8:83:a1:b9:55:b8:2c:d8:84:2d:3d:a2:fc:d4:36:7e:ff:
c2:d2:80:2f:81:50:31:0b:cf:48:11:e9:a5:e3:b2:1b:29:5e:
de:6e:cf:08:a0:19:d6:dc:3c:0c:e0:fb:c9:a6:fe:d4:d1:76:
23:f2:29:e3:f2:ce:1d:5c:13:58:02:15:81:0b:b2:28:02:20:
bb:bf:24:b2:9f:b7:ae:31:55:9c:de:a7:fa:18:29:5d:11:d2:
ee:7b:85:ee:a9:68:22:79:0d:22:95:6c:ca:1b:65:20:ca:da:
73:50:c1:e2:bf:d9:17:c7:31:1e:d7:1c:fd:4f:ff:43:bf:2c:
d3:be:f6:e7:79:5e:92:70:5f:5f:5e:da:73:22:b6:9f:93:89:
7c:75:28:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:25 2026 by rpki-client