Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
File: CEIhaO2oQjBU2C6wGMOD4tvor98.mft (raw, json)
Hash identifier: 0cIwKpSDGMMA4kQdVCNJCkXfSmr1FNMlZ8DETmegZ1k=
Subject key identifier: 5A:81:C4:CD:3E:99:4C:DA:11:E5:58:A2:46:AA:FE:8F:01:90:21:20
Authority key identifier: 08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
Certificate issuer: /CN=08422168eda8423054d82eb018c383e2dbe8afdf
Certificate serial: 019DA3E67550133E5079E378B91D1D0DF2D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
Manifest number: 15F1
Signing time: Sun 19 Apr 2026 04:01:22 +0000
Manifest this update: Sun 19 Apr 2026 04:01:22 +0000
Manifest next update: Mon 20 Apr 2026 04:01:22 +0000
Files and hashes: 1: CEIhaO2oQjBU2C6wGMOD4tvor98.crl (hash: 3gmPLrmqEV6g28jMsf6poG81X5uE6oij6ebteu4K9T4=)
2: cFauzwqXomgkVBlhCEWJrgK_IBo.roa (hash: 3eFRfx8k6ux2BDXfQobN4cZglfrrJQFQAkF7k25/Hiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:75:50:13:3e:50:79:e3:78:b9:1d:1d:0d:f2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08422168eda8423054d82eb018c383e2dbe8afdf
Validity
Not Before: Apr 19 04:01:22 2026 GMT
Not After : Apr 20 04:01:22 2026 GMT
Subject: CN=5a81c4cd3e994cda11e558a246aafe8f01902120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:fb:7b:7b:bc:1c:94:56:71:e1:82:cc:81:
a2:53:33:d5:ae:64:fe:69:f3:74:c7:cf:dd:19:78:
b5:06:d5:de:ba:18:ab:a0:a2:1c:43:8a:58:4a:04:
10:d5:3f:b4:e0:9a:b9:be:18:fc:d1:e1:16:bc:10:
e8:57:51:67:77:74:18:f2:c0:a0:44:57:e5:06:0e:
c3:86:21:1b:11:1c:9a:c7:00:b9:65:3f:dc:5a:f0:
71:ce:70:16:5b:4a:fc:8f:e7:60:79:80:d0:2d:dc:
e0:28:e5:b6:b5:23:ff:d0:62:c4:27:4c:56:9a:07:
6f:d1:e1:e0:47:41:58:40:6c:f6:4a:02:96:77:32:
7a:53:54:da:6b:b4:35:8e:22:ae:19:83:97:d7:de:
84:93:9f:5c:ff:9a:e3:67:42:34:e1:01:a8:95:e4:
08:26:84:09:bc:35:6f:ec:cd:03:e0:fa:f1:0b:15:
25:08:ab:a0:37:d9:ef:c4:32:b1:e9:a9:a2:c0:0b:
b8:7a:45:e5:96:32:91:7f:7c:d4:66:2b:56:57:ad:
a0:e2:a6:d5:8e:08:7f:6b:71:12:db:8b:5f:d2:f7:
13:fa:a8:3c:f5:26:89:57:04:eb:02:3d:56:eb:91:
50:c2:27:67:2e:14:da:94:44:aa:ca:fe:fd:11:c4:
3a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:81:C4:CD:3E:99:4C:DA:11:E5:58:A2:46:AA:FE:8F:01:90:21:20
X509v3 Authority Key Identifier:
keyid:08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:80:f3:e6:95:37:d2:aa:d7:aa:81:b0:ea:c5:be:48:77:14:
dc:df:f3:fe:71:eb:43:1e:0a:b2:b3:87:77:d3:78:fb:72:d2:
15:2e:ed:29:73:b7:18:fa:50:36:2a:1c:fd:40:1c:2b:d3:c7:
ac:ac:f1:fc:87:73:59:7c:32:97:e8:14:37:69:e7:e2:1f:eb:
46:6f:f2:d1:2c:78:58:6d:e1:c3:8c:91:f2:d0:60:14:8a:42:
04:d5:6f:c1:6d:fc:3e:01:d4:8a:b1:8b:bb:d0:8e:17:a1:dd:
86:db:02:37:19:e8:6c:3f:72:9b:9c:03:d3:33:0b:fd:4a:8a:
e3:a8:5e:fb:3c:be:a8:19:0b:07:47:3a:a4:86:a9:a2:b7:f2:
b3:2c:64:16:66:9c:b5:dd:3d:12:48:87:63:0c:66:48:82:2c:
f9:48:e7:e9:be:81:c8:93:10:d0:7f:7f:40:60:bd:c9:bc:a4:
01:c4:44:5c:ed:17:fe:ec:d4:36:e5:2c:d7:a7:50:52:f4:78:
0a:b3:6c:e0:e3:63:c8:c1:ec:47:90:b5:24:28:00:68:f7:61:
66:47:ba:bf:4f:1a:6e:28:e0:97:de:1b:bd:13:15:dd:d3:3c:
88:0c:92:18:ff:bf:4e:c2:f6:02:ca:fb:54:c5:69:45:bf:24:
66:40:b0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:54:38 2026 by rpki-client