Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft (raw, json)
Hash identifier: MRWVz5AVngIhnhUJRlyaxT/toNlQcbUCdlm4LartuWE=
Subject key identifier: A8:D9:D1:EE:14:F3:13:AC:26:EE:69:F0:EA:9D:69:D9:71:13:FA:A5
Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2
Certificate serial: 019FAABE8BB379141F602CB387376C1BF60A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
Manifest number: 0645
Signing time: Tue 28 Jul 2026 22:00:42 +0000
Manifest this update: Tue 28 Jul 2026 22:00:42 +0000
Manifest next update: Wed 29 Jul 2026 22:00:42 +0000
Files and hashes: 1: 4SGHkhKi4QTLFpo-qosd2bahj-Q.roa (hash: dW+Z69p8lpg56uETMd4OUZVzln7S7hdyAq7PkiXDS3o=)
2: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl (hash: oaIBaiTVaL9Dg5d6aEGZPvzkuQGOInipHKIncnGNNE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:8b:b3:79:14:1f:60:2c:b3:87:37:6c:1b:f6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2
Validity
Not Before: Jul 28 22:00:42 2026 GMT
Not After : Jul 29 22:00:42 2026 GMT
Subject: CN=a8d9d1ee14f313ac26ee69f0ea9d69d97113faa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:bc:64:3c:bb:9f:11:01:11:4a:84:64:f7:
dc:19:2f:b9:43:69:9b:7c:88:f4:cf:87:bb:6b:24:
c8:e8:bf:64:41:b5:6f:21:aa:7c:30:2c:a3:78:5b:
45:1b:4e:6f:5b:3d:db:33:dd:65:39:a5:14:93:8f:
f5:4f:33:6d:fe:2e:1d:f8:62:97:4b:d7:46:bb:87:
f0:e7:e7:55:f9:7b:a9:f5:eb:73:f7:4f:2e:6a:e2:
3a:e9:99:66:f5:a6:e9:97:e6:9e:86:0f:66:4d:c3:
7b:1a:1d:d3:20:2a:3b:c2:c3:b0:7a:94:e9:c1:93:
b9:18:e7:5e:6c:c8:c6:5d:fc:a5:12:9f:6b:58:8b:
74:bb:bb:d4:cb:83:16:22:1c:f2:67:e7:01:16:95:
4c:5d:1b:55:7d:be:84:55:d4:f3:3b:b5:fb:6d:1a:
ed:18:ce:91:51:ee:a9:bc:c6:e4:90:77:40:c6:27:
70:9f:fa:76:7a:5f:94:03:65:3d:e3:87:43:4e:a5:
f9:06:75:f4:f8:bd:96:5f:24:56:dc:01:c2:cd:b7:
6e:c9:1b:02:27:68:8b:c0:31:dc:b6:f5:46:fb:7a:
5f:6e:21:bd:36:63:2f:2c:09:fc:42:0a:5b:b6:40:
14:72:bc:2a:54:0f:b2:5b:15:18:08:91:68:a1:05:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D9:D1:EE:14:F3:13:AC:26:EE:69:F0:EA:9D:69:D9:71:13:FA:A5
X509v3 Authority Key Identifier:
keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4d:ac:87:25:ba:96:e0:e4:24:62:7e:14:51:c7:0a:50:aa:
c5:e7:e2:f7:70:a0:fb:7d:ae:88:65:c3:02:16:db:36:73:48:
27:aa:2b:64:47:3a:74:70:74:0a:0c:46:b6:69:32:e5:a6:f9:
c5:6d:39:e2:bb:a0:f2:a7:68:51:6c:a6:ba:56:52:7a:fc:df:
44:6d:3d:9a:93:b1:20:5c:20:dd:9b:16:3c:51:05:01:fc:6e:
3c:2c:ad:33:91:22:6d:02:a9:2d:c5:3a:64:f9:1a:25:5e:e8:
11:15:d0:47:0e:f0:5e:0e:25:f2:66:53:ce:68:6a:13:ce:13:
38:9a:a6:ed:36:81:73:be:a9:dd:89:68:c2:73:4d:0f:35:8e:
d4:00:82:1e:6b:46:35:08:26:26:58:56:ef:ec:a5:38:99:0a:
f4:52:5f:1a:50:5f:1f:33:d1:3f:bf:1f:ff:48:15:4d:17:cf:
61:be:04:41:b9:3c:8a:40:83:25:00:88:27:16:7a:b7:e7:5a:
32:43:c7:5b:7f:28:43:70:fd:2c:a9:dc:8d:81:f3:64:57:43:
c1:a8:f7:d5:a3:a6:0d:32:c0:48:e5:4c:e0:88:02:44:6e:19:
66:b9:97:c4:c0:f2:14:e9:c9:b1:bf:74:32:a8:bf:3a:d5:dc:
db:f9:7f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:51 2026 by rpki-client