Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
File: CEIhaO2oQjBU2C6wGMOD4tvor98.mft (raw, json)
Hash identifier: wjVhuMAkuQIgTWljgeBqt7I6/sk05rIE7yO3MvWVnCE=
Subject key identifier: 76:64:81:1D:B8:27:65:21:A9:49:77:0A:A3:4C:96:84:3C:9E:A0:3D
Authority key identifier: 08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
Certificate issuer: /CN=08422168eda8423054d82eb018c383e2dbe8afdf
Certificate serial: 01A1C0659F03A213516AC383B6EA082D7350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
Manifest number: 1812
Signing time: Mon 09 Nov 2026 13:00:47 +0000
Manifest this update: Mon 09 Nov 2026 13:00:47 +0000
Manifest next update: Tue 10 Nov 2026 13:00:47 +0000
Files and hashes: 1: CEIhaO2oQjBU2C6wGMOD4tvor98.crl (hash: H58mxiN8w18yKpLg/h98lh2ZTSMHJPHjY09khNqOYMM=)
2: cFauzwqXomgkVBlhCEWJrgK_IBo.roa (hash: 3eFRfx8k6ux2BDXfQobN4cZglfrrJQFQAkF7k25/Hiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c0:65:9f:03:a2:13:51:6a:c3:83:b6:ea:08:2d:73:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08422168eda8423054d82eb018c383e2dbe8afdf
Validity
Not Before: Nov 9 13:00:47 2026 GMT
Not After : Nov 10 13:00:47 2026 GMT
Subject: CN=7664811db8276521a949770aa34c96843c9ea03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0d:22:69:64:fe:00:b8:66:dd:c6:56:4a:18:
ff:1d:af:14:02:62:73:24:c9:46:58:63:38:97:a3:
81:e1:fb:96:2f:dc:98:80:b5:d0:41:d1:f7:67:03:
89:32:cd:27:00:42:ca:eb:ee:87:13:c0:34:07:bb:
d9:bd:f6:69:8a:ea:4f:cf:0d:e6:4d:c8:3e:91:c1:
b5:3a:33:3b:51:d7:1e:64:a4:f5:ff:51:66:25:79:
d5:7a:19:96:24:59:a5:a0:a4:57:56:aa:bb:04:fa:
c9:fd:69:ce:98:16:92:e5:1e:7f:a6:59:d4:56:03:
70:de:6b:ba:92:66:20:c4:d8:c9:d9:4c:fb:d0:a1:
0f:91:12:6f:95:95:e4:78:4e:ce:1d:7e:79:90:50:
b0:3e:cd:e8:a9:80:f0:b7:83:ff:94:51:31:40:36:
5e:47:15:64:31:a0:b1:a6:3b:88:37:e4:59:0b:0e:
9a:44:07:20:16:e8:37:69:64:98:68:99:3c:5f:27:
05:36:ef:36:b4:70:80:25:35:c7:f9:a3:45:16:b7:
8a:16:52:eb:6c:d0:0f:16:eb:05:13:5e:2c:91:c3:
97:91:1c:6c:74:ea:1f:c0:f3:cd:67:4f:c0:9f:79:
ee:d4:3a:e4:c5:fb:59:1e:74:be:00:1f:5c:85:91:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:64:81:1D:B8:27:65:21:A9:49:77:0A:A3:4C:96:84:3C:9E:A0:3D
X509v3 Authority Key Identifier:
keyid:08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fd:7b:0a:ed:c3:b5:62:6e:bc:f8:8c:05:de:bb:f6:61:5d:
bf:a9:77:4e:8f:e4:aa:60:bd:99:f5:ab:73:c4:ff:fc:b5:d2:
10:1b:94:15:2e:f3:53:d0:dc:bf:fa:ce:33:21:d0:0a:7c:c5:
97:44:d3:bc:cf:b9:49:94:12:4b:94:ec:03:1a:a6:fd:10:42:
6f:2e:54:f9:3c:a2:31:14:26:2e:b3:a3:b6:d0:f2:00:73:75:
2c:55:6d:b7:51:c6:7e:45:8c:ff:3a:77:dd:33:c8:52:76:e8:
2e:a7:b0:43:73:6b:a6:5e:b9:88:72:63:c8:63:26:9b:60:25:
74:f2:39:bf:7e:c9:66:9a:59:f9:26:25:04:8e:44:81:30:ff:
07:67:cc:86:fe:40:d5:7e:24:17:8c:bc:f3:c5:4e:df:74:3d:
03:0e:a0:1b:44:f0:19:70:14:a7:72:aa:13:6d:d3:00:c3:8a:
c9:85:3f:5f:31:de:e6:89:19:f7:4d:02:e6:b6:25:af:40:3f:
55:57:b4:d0:e3:33:61:e1:5c:64:c3:a3:7e:85:40:cf:44:74:
36:40:9d:dd:f2:e9:ee:06:e5:07:23:79:e8:a6:03:b5:f5:02:
19:40:da:a3:f0:8a:c4:5d:5d:6b:55:6c:02:5b:dc:f7:9a:6b:
8e:2d:76:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHAZZ8DohNRasODtuoILXNQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDIyMTY4ZWRhODQyMzA1NGQ4MmViMDE4YzM4M2UyZGJl
OGFmZGYwHhcNMjYxMTA5MTMwMDQ3WhcNMjYxMTEwMTMwMDQ3WjAzMTEwLwYDVQQD
Eyg3NjY0ODExZGI4Mjc2NTIxYTk0OTc3MGFhMzRjOTY4NDNjOWVhMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Q0iaWT+ALhm3cZWShj/Ha8UAmJz
JMlGWGM4l6OB4fuWL9yYgLXQQdH3ZwOJMs0nAELK6+6HE8A0B7vZvfZpiupPzw3m
Tcg+kcG1OjM7UdceZKT1/1FmJXnVehmWJFmloKRXVqq7BPrJ/WnOmBaS5R5/plnU
VgNw3mu6kmYgxNjJ2Uz70KEPkRJvlZXkeE7OHX55kFCwPs3oqYDwt4P/lFExQDZe
RxVkMaCxpjuIN+RZCw6aRAcgFug3aWSYaJk8XycFNu82tHCAJTXH+aNFFreKFlLr
bNAPFusFE14skcOXkRxsdOofwPPNZ0/An3nu1DrkxftZHnS+AB9chZGexwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZkgR24J2UhqUl3CqNMloQ8nqA9MB8GA1UdIwQY
MBaAFAhCIWjtqEIwVNgusBjDg+Lb6K/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85NjBhMmItMzM3ZC00ZDAyLWJhODEt
NmUxOWY2NzlhNjIzLzEvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS85NjBhMmItMzM3ZC00ZDAyLWJhODEtNmUxOWY2NzlhNjIz
LzEvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/17Cu3D
tWJuvPiMBd679mFdv6l3To/kqmC9mfWrc8T//LXSEBuUFS7zU9Dcv/rOMyHQCnzF
l0TTvM+5SZQSS5TsAxqm/RBCby5U+TyiMRQmLrOjttDyAHN1LFVtt1HGfkWM/zp3
3TPIUnboLqewQ3Nrpl65iHJjyGMmm2AldPI5v37JZppZ+SYlBI5EgTD/B2fMhv5A
1X4kF4y888VO33Q9Aw6gG0TwGXAUp3KqE23TAMOKyYU/XzHe5okZ900C5rYlr0A/
VVe00OMzYeFcZMOjfoVAz0R0NkCd3fLp7gblByN56KYDtfUCGUDao/CKxF1da1Vs
Alvc95prji12xw==
-----END CERTIFICATE-----
Generated at Mon Nov 9 22:38:26 2026 by rpki-client