Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
File: CEIhaO2oQjBU2C6wGMOD4tvor98.mft (raw, json)
Hash identifier: UtFummSdAd85ZOYc9DUfMlczb9TLi/PAgXb9C+iY8Mk=
Subject key identifier: 42:8E:FE:E1:A2:5C:73:E9:08:DC:FD:B2:76:68:4F:02:08:6A:FE:85
Authority key identifier: 08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
Certificate issuer: /CN=08422168eda8423054d82eb018c383e2dbe8afdf
Certificate serial: 019CAAC624F647B78D563DE51074D2E8A7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
Manifest number: 1570
Signing time: Sun 01 Mar 2026 19:00:38 +0000
Manifest this update: Sun 01 Mar 2026 19:00:38 +0000
Manifest next update: Mon 02 Mar 2026 19:00:38 +0000
Files and hashes: 1: CEIhaO2oQjBU2C6wGMOD4tvor98.crl (hash: 3e6CmmB3TlAJvXi1ly8TqkiDDsVpTEC0WiMxZR7L6kM=)
2: cFauzwqXomgkVBlhCEWJrgK_IBo.roa (hash: 3eFRfx8k6ux2BDXfQobN4cZglfrrJQFQAkF7k25/Hiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:24:f6:47:b7:8d:56:3d:e5:10:74:d2:e8:a7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08422168eda8423054d82eb018c383e2dbe8afdf
Validity
Not Before: Mar 1 19:00:38 2026 GMT
Not After : Mar 2 19:00:38 2026 GMT
Subject: CN=428efee1a25c73e908dcfdb276684f02086afe85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:e3:21:65:1b:63:28:57:af:63:a3:4c:3d:
6b:2f:32:0c:93:7c:a4:44:23:49:a4:61:18:31:b4:
ca:d6:c1:b0:43:62:db:15:b4:58:34:62:b6:55:fb:
f7:94:96:7f:c5:2a:e0:ac:9f:14:54:03:ff:f8:44:
c1:91:b6:69:d2:de:09:95:c3:ff:b0:15:06:db:1e:
ce:12:ad:90:d4:ac:45:58:a1:ca:b2:cb:5e:98:db:
a3:76:22:f2:cc:fd:c7:bc:cf:ff:52:af:aa:0e:56:
ad:c8:06:46:a0:dc:46:bd:f0:a2:77:f0:b9:65:20:
be:9e:e3:e6:df:78:ef:b4:42:18:50:62:d4:28:08:
87:6b:9f:0f:ae:b2:a6:8b:9e:32:5e:86:7e:44:b3:
b7:6c:f4:f4:c0:12:68:80:ab:4a:79:3b:73:57:b2:
e1:a3:1a:b9:63:25:c4:a1:77:e4:b5:ca:1d:49:8c:
42:93:f5:d7:69:3f:a5:44:0e:fc:9d:e7:5e:d8:64:
dd:70:68:65:da:ab:4f:b6:bd:70:0a:db:d5:37:c0:
c4:dd:6f:d0:9a:8d:b0:cc:12:14:aa:b9:7a:68:06:
2f:56:cc:f0:d8:ad:80:6b:80:7d:de:dd:c3:8c:36:
74:b0:00:72:da:23:a1:0c:b0:0f:61:7b:66:ff:d9:
f1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8E:FE:E1:A2:5C:73:E9:08:DC:FD:B2:76:68:4F:02:08:6A:FE:85
X509v3 Authority Key Identifier:
keyid:08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:44:ba:49:0a:f2:36:e2:9d:e3:9c:5e:a9:87:d1:a6:68:9d:
37:a2:83:05:33:91:ff:a4:87:77:a1:ab:72:d0:a9:e1:91:ac:
ab:5a:34:52:0c:84:72:c2:2e:18:6b:79:08:75:3c:bb:2f:3d:
47:b4:84:2d:a5:25:5e:80:e4:1f:40:80:c0:99:73:d3:4b:52:
42:50:37:8a:c3:9c:ad:8c:2a:d5:3d:73:72:19:4e:5d:74:78:
56:b7:72:36:a5:ed:25:77:66:4a:1a:86:0e:eb:34:88:b8:c3:
67:bf:5c:66:35:d5:42:a8:0d:a2:29:07:ca:b1:ba:f7:05:55:
e1:fd:18:7f:4d:9c:75:f8:b8:08:52:a7:0a:b5:b4:db:e1:9c:
6f:ec:eb:d6:e4:a8:f7:0f:36:a5:1d:49:eb:bf:7e:34:de:7a:
9c:fc:19:56:45:e7:6f:e2:67:6c:1f:f0:ca:77:68:57:ae:30:
9b:ab:6c:c5:44:ad:77:44:00:78:d4:52:eb:89:3d:fc:b7:70:
99:49:bc:43:aa:fa:40:ac:b0:bd:01:54:3d:57:6c:78:d3:98:
96:ac:52:7d:f8:0f:4a:e4:54:fa:39:70:ee:82:7a:3b:a0:54:
96:ae:00:f2:96:05:73:ac:09:cf:22:fa:83:a3:61:57:61:3f:
a8:04:13:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:50 2026 by rpki-client