Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft (raw, json)
Hash identifier: t2Tf2bmNJDpNdvNabmawoINoS3CBG99NqzxRlMCboFs=
Subject key identifier: 28:FD:B4:7C:D6:1E:CC:BA:A9:FE:EA:D3:00:82:00:70:BD:1B:93:24
Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2
Certificate serial: 01A0C4B313CE1ED923F2FC085CADF2633BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
Manifest number: 06D7
Signing time: Mon 21 Sep 2026 16:01:05 +0000
Manifest this update: Mon 21 Sep 2026 16:01:05 +0000
Manifest next update: Tue 22 Sep 2026 16:01:05 +0000
Files and hashes: 1: 4SGHkhKi4QTLFpo-qosd2bahj-Q.roa (hash: dW+Z69p8lpg56uETMd4OUZVzln7S7hdyAq7PkiXDS3o=)
2: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl (hash: yp9fHjUFWVFwFHCga7rkSMk5q5enPe1fWL8nGKWrJV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b3:13:ce:1e:d9:23:f2:fc:08:5c:ad:f2:63:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2
Validity
Not Before: Sep 21 16:01:05 2026 GMT
Not After : Sep 22 16:01:05 2026 GMT
Subject: CN=28fdb47cd61eccbaa9feead300820070bd1b9324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d2:7b:27:b4:60:43:76:c2:b6:e3:b0:fe:57:
5b:24:da:b8:a5:08:dd:62:ab:33:12:40:59:54:44:
e1:08:2e:1c:8b:09:b0:11:8e:73:c6:b0:df:95:84:
a9:04:7e:81:d5:33:e5:44:e6:58:84:9c:38:94:e3:
a1:66:49:d8:e4:ca:2e:7c:b0:c7:3b:70:ce:06:eb:
b8:9a:a1:3d:5e:80:ad:94:37:df:98:41:7f:95:d7:
d3:de:de:b8:c9:00:be:ff:fa:92:71:43:5b:e4:2b:
8a:42:8e:95:5d:36:45:5d:8c:ec:c0:72:c7:49:ba:
c5:8f:0e:9c:75:09:58:36:5a:c8:91:f0:b1:b1:9c:
c1:25:f7:1d:3c:7d:20:78:ba:25:65:f6:5e:c2:32:
d3:e6:ae:3f:b2:36:82:39:36:be:11:dc:bb:af:d4:
e5:6e:6b:b8:96:a1:5f:fb:4f:33:f2:2d:b9:3a:68:
8d:44:ad:be:4f:4f:93:e7:57:f5:cd:7b:80:cc:09:
e8:1c:23:ce:d0:94:18:1b:4c:6e:a1:e9:bd:c5:80:
25:88:75:31:c6:10:2f:d2:78:dd:c3:4f:a8:85:88:
bf:3e:c8:6a:e7:50:37:10:2f:da:ce:b4:87:44:d5:
87:f1:1c:f8:cb:61:6f:7c:b0:16:b7:e7:73:d0:4e:
1a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FD:B4:7C:D6:1E:CC:BA:A9:FE:EA:D3:00:82:00:70:BD:1B:93:24
X509v3 Authority Key Identifier:
keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:21:fe:70:70:fa:d8:f2:82:fb:4a:bd:eb:b4:aa:b5:79:45:
a0:a3:07:30:0d:01:82:ca:50:bd:f1:8c:cf:f2:cd:84:8c:fc:
65:c5:6c:78:49:6a:36:56:f3:83:50:88:2f:d3:d4:cb:d3:4a:
da:14:ef:72:27:b6:04:55:da:59:b8:f0:1a:e3:cf:ff:0b:35:
39:b5:58:db:31:29:6f:9e:8c:d2:73:3a:37:df:fa:ee:24:65:
8c:3a:f8:a8:69:65:0e:ca:79:e2:8a:21:bf:54:fc:26:f9:ef:
bc:4b:fa:98:20:12:2d:9e:60:ba:83:d8:f4:05:1a:66:d2:3f:
3f:87:cf:07:dc:44:bb:2e:0f:45:48:48:31:8c:87:9e:fc:06:
0f:59:96:b2:09:29:22:c6:63:79:8b:11:19:bd:db:10:3e:58:
5b:a5:b7:a0:cb:92:db:b7:58:a2:ab:75:c1:0e:cc:6e:78:d0:
de:69:92:d3:3e:36:fc:05:ad:bf:e2:ba:a4:ac:83:a4:71:7e:
c7:53:f2:e5:64:79:d5:b7:be:5c:83:64:bc:77:12:95:9b:52:
e1:c3:cb:64:e0:cb:73:e2:46:bf:12:dc:b4:fd:b7:21:43:ec:
f7:17:44:ca:e4:f0:8b:31:80:03:22:f2:89:3f:c1:97:0c:79:
2d:05:02:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:39:00 2026 by rpki-client