Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
File: CEIhaO2oQjBU2C6wGMOD4tvor98.mft (raw, json)
Hash identifier: co3AuqAQy/j+OBlPfrO29jOm537GOSF2mu3qJl8Cv3w=
Subject key identifier: 3C:E4:76:46:F0:B6:03:B3:26:65:64:7A:B3:72:5E:29:C7:E2:5D:A1
Authority key identifier: 08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
Certificate issuer: /CN=08422168eda8423054d82eb018c383e2dbe8afdf
Certificate serial: 01A0C557CD3E60A7643BA63A4B4E69C7A86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
Manifest number: 1790
Signing time: Mon 21 Sep 2026 19:01:00 +0000
Manifest this update: Mon 21 Sep 2026 19:01:00 +0000
Manifest next update: Tue 22 Sep 2026 19:01:00 +0000
Files and hashes: 1: CEIhaO2oQjBU2C6wGMOD4tvor98.crl (hash: pBsxXiRfy4PzMpWZ9EwFLvHehlxtUnFvyV5zqCeMA3Q=)
2: cFauzwqXomgkVBlhCEWJrgK_IBo.roa (hash: 3eFRfx8k6ux2BDXfQobN4cZglfrrJQFQAkF7k25/Hiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:cd:3e:60:a7:64:3b:a6:3a:4b:4e:69:c7:a8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08422168eda8423054d82eb018c383e2dbe8afdf
Validity
Not Before: Sep 21 19:01:00 2026 GMT
Not After : Sep 22 19:01:00 2026 GMT
Subject: CN=3ce47646f0b603b32665647ab3725e29c7e25da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:63:1b:f3:a4:51:1f:91:1f:ae:fd:57:a8:5f:
d0:e4:8c:c9:70:13:e6:c5:23:a9:bf:1c:7d:e3:3a:
c4:9b:51:6e:26:01:4e:97:e1:89:68:df:be:83:d1:
d3:58:49:a1:db:96:5c:d0:28:11:73:08:5a:f0:93:
c3:b1:37:99:f2:5a:bf:9f:1b:9a:10:f8:f0:11:ff:
03:93:80:aa:67:56:3b:71:0e:60:36:cb:df:6f:9d:
8a:95:82:40:2a:d2:15:83:15:47:a7:e3:40:16:69:
17:8d:70:a4:c7:ee:95:cb:07:aa:b2:b8:36:68:f6:
dd:60:78:8b:e5:b1:4a:7a:28:f2:f6:6a:90:ca:87:
ed:37:8e:76:f6:d1:e8:71:3e:7a:98:d0:f9:c6:bc:
f7:29:fc:c6:ea:d7:f4:f7:82:91:eb:46:10:1e:34:
c3:c4:4f:79:66:eb:f5:df:29:7f:55:03:48:f6:77:
57:ec:27:c1:69:5c:ca:ce:77:74:cd:dd:f0:a9:f9:
00:48:ca:1a:b1:81:cf:51:29:2d:a8:0b:2f:9b:1a:
fc:2e:e5:f1:72:d1:e5:9c:83:c0:90:6c:17:17:a4:
07:c0:09:92:1d:c6:eb:f4:56:60:7b:0e:cb:15:3d:
7d:52:20:a1:3e:71:aa:32:e2:7e:b7:4e:be:73:93:
36:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E4:76:46:F0:B6:03:B3:26:65:64:7A:B3:72:5E:29:C7:E2:5D:A1
X509v3 Authority Key Identifier:
keyid:08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9f:03:63:68:6d:9e:fd:4a:10:f7:5a:00:6c:6a:72:e8:0b:
55:fb:4c:0f:06:ff:00:eb:bf:d6:28:91:82:d9:63:70:e1:9a:
9f:1c:ba:33:9b:a2:9e:4f:e8:29:b6:55:c6:ee:f2:c5:b5:6f:
ae:63:db:eb:8f:4a:ca:3f:a9:c9:e2:fa:f3:20:58:a4:a0:1c:
d0:6b:cd:fd:ad:84:60:4e:e0:b1:b5:06:03:ce:3a:f0:f8:0b:
2a:de:f1:4b:3d:65:f9:90:e1:7c:49:e4:bc:3d:e8:3e:fa:e3:
54:bf:34:74:bf:7d:14:e0:fb:85:db:ce:ec:14:43:28:e6:7c:
be:8c:e1:bb:1b:ef:ef:3f:28:47:4e:80:d9:e5:d3:a4:98:ef:
89:dc:56:b6:0c:b8:2c:cc:c2:48:de:36:0f:c5:18:85:7b:a1:
76:07:90:f7:4b:15:21:40:2d:2a:a1:c6:8a:1d:56:04:30:c1:
1f:38:f1:7f:da:36:0b:70:3f:af:10:a1:17:26:b8:45:bd:e6:
1c:9a:71:31:8b:a9:55:c4:17:a9:de:2b:02:45:2a:88:65:17:
f1:b5:40:86:07:e6:3c:43:8d:ea:a4:7a:f0:ad:46:d7:4e:13:
2d:03:2b:0d:c0:56:18:4b:81:dc:71:84:41:0a:ea:6f:fa:dc:
91:e8:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:04:09 2026 by rpki-client