Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
File: ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json)
Hash identifier: M8amVcgH4MMpZWz5hKnIovpv7h31CWkuHFgaVx6QXus=
Subject key identifier: 1B:F6:90:72:44:B1:15:6E:66:43:42:F6:5F:E5:C6:EC:2C:5B:E1:43
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 019CAAC69987CF72C277B3B77A6EF892F38E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
Manifest number: 07E2
Signing time: Sun 01 Mar 2026 19:01:07 +0000
Manifest this update: Sun 01 Mar 2026 19:01:07 +0000
Manifest next update: Mon 02 Mar 2026 19:01:07 +0000
Files and hashes: 1: 7IBa4M21L1weC-CB5rmV2ELdcjc.roa (hash: r3PNsAmqfmfHmKjnNC5k/puJxwcYNjtuxkNcsT/TBwM=)
2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: kFXAD1xzl/92peSFE3IzhWZNnyqF/1eP+NXFyDdz4fU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:99:87:cf:72:c2:77:b3:b7:7a:6e:f8:92:f3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: Mar 1 19:01:07 2026 GMT
Not After : Mar 2 19:01:07 2026 GMT
Subject: CN=1bf6907244b1156e664342f65fe5c6ec2c5be143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:73:20:4c:8c:8f:32:69:a7:da:c6:c4:7d:
3e:df:29:b7:11:76:63:83:32:b3:90:5b:5b:cd:16:
4f:b7:66:4c:ba:06:6e:67:4b:4f:27:16:02:96:dd:
0e:aa:9a:41:4a:b5:b7:a4:24:7b:7b:84:be:19:64:
f7:fa:31:fa:fc:45:bd:fd:ae:1e:87:c6:b5:1a:3d:
61:c3:7a:bb:c8:48:47:18:6c:0a:be:3e:19:6b:3d:
c3:75:2e:ee:09:a3:9c:ea:c6:35:3b:5e:69:97:52:
1d:d2:c4:b0:02:f7:ef:88:ed:82:e7:ef:eb:05:7c:
32:b5:7e:2d:c3:88:eb:26:7c:49:60:a8:5e:09:e3:
5d:3a:f9:65:cd:9c:e2:51:3c:3b:52:73:45:88:78:
08:41:71:3a:40:52:e8:ff:9e:54:e0:ee:80:85:7c:
bc:0d:ed:23:65:f2:d1:54:a1:ab:67:e8:99:32:35:
1c:7f:d3:37:23:20:37:e8:4d:78:6a:26:84:27:44:
0c:0f:5c:5c:30:b7:f4:65:99:c4:f0:1b:b5:50:13:
08:d3:ca:df:9e:ae:9d:49:06:0f:92:bc:dd:12:b8:
e8:2e:41:83:89:cd:d7:4d:91:26:e9:56:85:7c:2d:
d5:27:31:29:e7:2b:b3:e5:9e:97:ec:8b:44:ad:5b:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F6:90:72:44:B1:15:6E:66:43:42:F6:5F:E5:C6:EC:2C:5B:E1:43
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:90:d4:e1:f3:7b:d4:a0:5d:c1:96:76:c8:49:ea:0c:7f:33:
01:ec:eb:74:9c:ce:38:85:f6:37:82:fe:39:28:92:ed:79:85:
da:4d:4c:74:a8:fb:88:00:18:ce:e6:d6:0b:e1:35:36:79:0f:
8b:87:82:2a:07:95:f7:ce:59:48:2b:66:d9:9f:62:a6:08:87:
2b:7a:04:59:26:f3:de:a8:54:8e:15:32:a8:63:75:b5:b4:b3:
cb:d3:fe:69:9f:67:f7:50:d9:d8:0a:45:a3:32:42:db:56:55:
7e:3c:2b:4a:c0:67:8d:8b:1b:d7:67:db:ba:7a:8b:41:42:6e:
b8:55:31:6b:38:77:ee:69:17:18:00:48:d5:c1:ae:0b:ca:45:
d4:e5:08:8a:7a:63:1a:71:a1:78:33:c3:16:bd:76:28:7e:41:
24:95:67:17:19:2d:0c:fe:ac:0f:ea:8e:50:f2:17:eb:44:b5:
a5:8c:9c:2e:c4:8d:8e:a8:48:5e:e2:20:b1:06:c7:50:4c:2a:
e0:d6:94:f9:6d:e6:96:4b:85:8c:85:31:ef:a2:a2:ec:9d:2d:
49:c3:63:88:e0:4a:0d:7b:5a:2e:58:60:93:d0:56:ca:58:f4:
b6:2f:dc:62:f9:0d:e8:5f:8c:53:bf:1a:f8:03:90:ed:21:fa:
ba:1e:9e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:58 2026 by rpki-client