Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
File: ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json)
Hash identifier: 9wPerKC9rLatAGIVpiGLRtRqDq2RACBu2SGRhLyQMsE=
Subject key identifier: 89:21:AC:B7:4E:B8:70:49:7E:18:B7:A1:90:85:6B:00:E0:3E:87:9C
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 019ED507B9C822EE952F5D3262B92B3F9B84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
Manifest number: 0901
Signing time: Wed 17 Jun 2026 10:01:53 +0000
Manifest this update: Wed 17 Jun 2026 10:01:53 +0000
Manifest next update: Thu 18 Jun 2026 10:01:53 +0000
Files and hashes: 1: 7IBa4M21L1weC-CB5rmV2ELdcjc.roa (hash: r3PNsAmqfmfHmKjnNC5k/puJxwcYNjtuxkNcsT/TBwM=)
2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: TJlxoQx1myQoerjlYrdS9U46NpwuFC1J/dXIKWVKCw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:07:b9:c8:22:ee:95:2f:5d:32:62:b9:2b:3f:9b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: Jun 17 10:01:53 2026 GMT
Not After : Jun 18 10:01:53 2026 GMT
Subject: CN=8921acb74eb870497e18b7a190856b00e03e879c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:69:44:bd:5c:76:18:38:b1:59:31:34:6e:d9:
ce:85:7a:71:47:80:81:3a:6e:74:76:1c:9e:13:ad:
a2:70:58:ce:e4:b3:0a:f1:71:2b:36:e3:85:6e:fa:
b6:5c:14:9c:80:34:83:29:79:29:c7:1b:a1:30:a7:
8b:93:71:a9:94:e6:14:bc:7c:64:40:f3:27:a6:cb:
cd:15:fd:cf:e6:27:0a:ed:00:5b:c0:31:f7:89:89:
b3:27:2c:ae:e6:66:f9:47:af:a9:e2:47:81:57:ae:
45:6e:55:e6:92:85:0f:9b:35:b1:c0:01:ef:30:0b:
c6:32:b7:38:0b:a6:94:f3:8b:24:91:29:60:a5:00:
3b:b2:b9:4b:ed:81:dd:b9:3d:9d:89:d9:3c:02:dc:
fd:e9:46:ea:cb:69:05:de:20:17:df:72:c1:2c:3a:
84:f1:a6:91:0f:0a:3b:52:61:aa:82:b0:e2:d2:f4:
17:a4:a9:ea:7b:8f:4c:20:30:bc:2c:bb:b8:48:13:
af:fe:14:34:8b:a1:62:ee:a1:90:d1:70:81:2c:45:
1f:32:6d:5f:09:25:a7:e2:fe:8d:a2:bd:2d:b6:b5:
39:bf:d3:8d:02:1c:3a:33:fd:95:b5:37:05:01:19:
10:99:7d:7c:22:c9:f7:d1:f6:db:1c:fd:e3:27:0a:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:21:AC:B7:4E:B8:70:49:7E:18:B7:A1:90:85:6B:00:E0:3E:87:9C
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:22:90:ae:dd:fa:01:d6:42:98:1c:14:7c:73:69:d3:b0:98:
c7:82:29:61:11:d7:74:81:d4:96:64:57:10:d5:d8:ff:84:25:
f5:82:29:80:b6:86:7b:91:12:8b:3a:c5:4a:78:7e:88:e8:e1:
39:50:94:4b:36:7f:39:d2:8c:50:04:b6:23:5b:e7:1a:d2:c9:
d6:e6:15:d3:19:93:2b:82:3e:7f:a6:3d:49:9d:24:0a:73:1d:
01:fd:7a:f9:e3:52:dc:0a:3b:9a:bf:6e:0f:8e:89:f9:d1:81:
69:2f:0f:75:35:bf:c6:4a:2b:ce:a3:70:94:d4:23:a1:1e:42:
db:a3:76:e4:13:6e:17:02:98:97:23:1e:4f:13:5b:74:8c:36:
df:a9:95:73:69:b1:81:f2:b5:dc:d2:fd:5d:f5:93:87:c8:37:
2f:f3:ae:9e:d9:bf:d8:42:fe:47:ee:e8:1d:3f:ca:22:89:e3:
c8:c4:77:2f:27:c8:22:a3:95:52:64:e3:01:25:02:8b:92:4c:
8e:98:59:12:73:34:9a:01:7b:59:e2:8b:c5:f3:f8:6b:3d:e4:
c8:c1:08:a2:0b:a7:48:88:14:54:da:b3:de:64:ca:96:23:06:
42:1b:3a:9e:f0:e3:30:45:b3:0b:b6:3c:1c:0c:6b:29:3b:4e:
6d:73:e6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:48:10 2026 by rpki-client