Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft (raw, json)
Hash identifier: 1UUTxnfQq4NcNb5IFe95KxCFE6mHehPN9lmoHdu2epg=
Subject key identifier: 1B:45:DA:FF:74:10:7F:B6:1F:59:87:7D:EF:22:61:25:A6:9B:4E:12
Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2
Certificate serial: 01A1E09580516236D2EA0B97612F5399147F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
Manifest number: 076A
Signing time: Sun 15 Nov 2026 19:00:56 +0000
Manifest this update: Sun 15 Nov 2026 19:00:56 +0000
Manifest next update: Mon 16 Nov 2026 19:00:56 +0000
Files and hashes: 1: 4SGHkhKi4QTLFpo-qosd2bahj-Q.roa (hash: dW+Z69p8lpg56uETMd4OUZVzln7S7hdyAq7PkiXDS3o=)
2: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl (hash: 9jeeh+56ZQB/LawKPo3+/l3WTM6GNjFNI0L/KmZ1Jco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:95:80:51:62:36:d2:ea:0b:97:61:2f:53:99:14:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2
Validity
Not Before: Nov 15 19:00:56 2026 GMT
Not After : Nov 16 19:00:56 2026 GMT
Subject: CN=1b45daff74107fb61f59877def226125a69b4e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:3d:d1:42:f3:1c:4c:3a:d6:25:64:9a:02:
e5:0c:e6:9c:44:d4:9b:62:fe:8f:cf:d7:00:7b:71:
f9:e5:63:4d:39:31:de:df:49:48:32:e9:2c:8f:d2:
eb:f5:de:c9:89:b2:2a:29:05:34:4d:c6:ff:85:ff:
b1:c9:a0:54:d5:c1:6a:81:ce:01:7d:a1:dc:6a:41:
79:8f:c9:5c:7e:89:cd:55:26:39:0c:25:1b:3c:e2:
70:5d:8d:64:96:6a:9d:2d:3a:47:aa:9e:2b:87:88:
49:fe:06:62:b6:60:2e:4b:0f:e4:bd:b5:ef:d1:bf:
ca:fe:ce:d7:ae:76:88:4c:3b:7e:58:51:1a:77:c5:
fa:21:0c:f4:eb:68:95:49:04:ee:ec:25:d8:0c:fd:
9f:89:a1:45:13:71:32:3c:0d:5a:e5:c5:e3:46:55:
67:8c:bc:b7:4b:df:0f:54:9e:16:06:90:39:df:79:
81:1a:e4:14:48:16:ee:0b:78:43:8b:28:2f:27:6a:
0a:78:b5:de:77:b5:de:05:52:42:1c:c2:4f:2d:bf:
8b:fd:10:6a:59:d1:ae:01:ed:d9:06:7f:cb:c0:cd:
1b:04:a9:ec:60:19:1c:1b:b8:a0:6f:5c:f3:58:9d:
d0:1c:0c:3d:80:57:68:52:6b:c2:91:2d:ff:56:69:
d3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:45:DA:FF:74:10:7F:B6:1F:59:87:7D:EF:22:61:25:A6:9B:4E:12
X509v3 Authority Key Identifier:
keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:98:96:76:6e:f0:d5:16:18:fd:47:4e:84:d2:5f:34:4b:34:
2e:5a:0e:c3:52:87:92:dc:99:13:92:69:88:41:e7:73:f4:1a:
01:08:13:5b:35:2b:2d:d9:df:62:cc:a9:15:1b:5a:65:40:5d:
69:ff:91:8f:52:95:75:15:bd:5f:05:88:d9:83:c7:b4:f3:1d:
ca:ef:ca:ec:a3:6e:6e:56:3f:f4:ef:0b:3a:82:71:8a:0f:a8:
8f:c2:55:ee:2b:34:85:c0:cf:15:5a:b6:2d:1d:c6:a5:9f:f9:
7c:aa:14:42:7d:76:c9:de:f3:4c:af:06:5a:6a:22:8c:87:f3:
5b:c4:e6:8a:db:e8:47:4a:47:3d:06:ed:dc:8d:b0:5b:f2:25:
b0:60:fa:ee:79:b3:94:8d:ab:72:7c:74:e7:33:7f:ad:d6:4a:
55:eb:ed:18:f2:26:d8:a2:c8:27:ee:78:65:c1:74:29:90:e5:
e2:ca:a8:17:7d:fc:be:5a:e9:88:02:b9:1a:63:fa:88:83:51:
5c:fc:bf:f8:9d:dc:13:ba:6d:ed:15:ea:15:80:70:98:90:87:
38:45:7b:49:4c:ba:c1:e1:b2:57:92:12:d8:bc:e8:32:35:0d:
34:b9:c1:b2:8a:32:88:82:da:ec:7c:72:b9:3f:34:b1:2e:24:
ee:4c:d2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:53:02 2026 by rpki-client