Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
File: CEIhaO2oQjBU2C6wGMOD4tvor98.mft (raw, json)
Hash identifier: c0gpqfwG70Nw4hSHgl0TPdXzuvWeR1fei9uyFxk3+7A=
Subject key identifier: 26:C6:42:A7:FF:30:9A:3E:0C:1D:68:4B:A9:86:BC:76:7C:86:25:91
Authority key identifier: 08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
Certificate issuer: /CN=08422168eda8423054d82eb018c383e2dbe8afdf
Certificate serial: 019EBDDA1C12D6379DDDE3DCA8A78E37826A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
Manifest number: 1683
Signing time: Fri 12 Jun 2026 22:00:48 +0000
Manifest this update: Fri 12 Jun 2026 22:00:48 +0000
Manifest next update: Sat 13 Jun 2026 22:00:48 +0000
Files and hashes: 1: CEIhaO2oQjBU2C6wGMOD4tvor98.crl (hash: FCE3Y4sQC7uBgdmLIWJeM3c6CgCylUO/5hHwPc07qT8=)
2: cFauzwqXomgkVBlhCEWJrgK_IBo.roa (hash: 3eFRfx8k6ux2BDXfQobN4cZglfrrJQFQAkF7k25/Hiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:1c:12:d6:37:9d:dd:e3:dc:a8:a7:8e:37:82:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08422168eda8423054d82eb018c383e2dbe8afdf
Validity
Not Before: Jun 12 22:00:48 2026 GMT
Not After : Jun 13 22:00:48 2026 GMT
Subject: CN=26c642a7ff309a3e0c1d684ba986bc767c862591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:22:a3:c5:2e:84:99:81:67:d4:71:86:d2:d1:
87:d9:3f:ac:29:1a:92:86:92:58:e8:97:36:37:70:
a4:c7:47:0a:b5:c0:db:9c:e1:c8:3e:c7:55:52:af:
22:fa:10:6c:24:46:be:c6:38:c3:2d:1e:0d:c7:71:
03:67:6f:92:a9:bf:8f:66:66:4b:11:4c:a8:ba:8d:
fa:29:c9:07:6e:ff:8e:7e:d5:71:7e:58:45:98:35:
4b:de:10:4a:32:40:7d:16:0c:cf:57:02:0f:68:8e:
c8:47:62:ca:e3:92:fe:12:00:45:d0:24:74:e7:4c:
3d:c1:10:84:37:37:54:c3:6a:31:1c:10:ac:72:d7:
e2:6d:2e:0d:80:32:d3:c3:95:c5:dc:0d:e2:58:d9:
ba:05:64:cb:12:e9:b9:8a:7d:16:82:0c:3a:ac:f0:
49:56:a0:36:92:5d:c9:fe:8d:59:c4:ef:57:46:53:
aa:e3:07:34:7e:30:be:81:ec:d2:23:37:c0:3e:a2:
f2:fb:26:c7:fa:0c:02:a3:29:f6:22:f8:ee:e5:6c:
9f:8e:75:00:3a:19:16:80:00:07:33:9b:ac:6e:e8:
1d:cd:45:f7:35:c7:77:d4:3f:4e:dd:5b:12:05:1c:
ba:fb:a3:36:23:1c:88:fa:37:ee:59:19:5a:46:b3:
10:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C6:42:A7:FF:30:9A:3E:0C:1D:68:4B:A9:86:BC:76:7C:86:25:91
X509v3 Authority Key Identifier:
keyid:08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ae:9e:0c:a8:37:48:86:97:c7:10:6e:d9:dc:08:0e:41:47:
9e:32:16:34:59:b3:2e:56:88:7d:52:8f:59:3a:59:69:d0:3e:
2a:5f:e9:1e:cf:7b:87:72:1a:b2:22:2e:e4:1c:a3:ae:21:6f:
dd:38:70:93:f6:a7:fb:1a:90:3c:9f:53:6d:bc:73:36:65:24:
1e:ed:24:b9:37:6b:b2:91:5d:78:ce:25:9d:ee:e0:c1:63:80:
66:9c:31:98:8a:56:ba:88:d9:12:31:79:05:36:d4:72:51:16:
37:20:6b:b8:5e:12:f7:4e:b6:4a:aa:9e:70:aa:d2:29:47:dd:
52:84:ef:6c:e1:77:5b:29:ee:8c:dd:02:50:7d:43:2f:6e:c0:
6a:8e:c8:64:cd:1e:1a:fc:33:6a:3b:93:80:8e:f9:a3:e5:bc:
72:b2:20:8e:7e:cb:47:d3:f3:e6:ec:62:0a:7b:81:5c:ac:5f:
c0:f8:04:01:84:e8:f7:f9:eb:ea:57:65:4a:ef:0a:26:dd:ca:
5f:99:94:12:aa:48:2d:99:51:f3:9e:c3:a9:c4:e0:a1:df:4e:
b3:ab:79:1c:50:06:58:c0:fb:88:83:1f:8f:96:93:60:c2:48:
da:ec:2b:d4:c5:e2:f0:37:09:2e:96:bb:a4:fb:56:a5:79:88:
8d:8d:0d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:48:27 2026 by rpki-client