Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
File: CEIhaO2oQjBU2C6wGMOD4tvor98.mft (raw, json)
Hash identifier: XN0Ly8t29r3dGrrqVAROSoJLs2YB9QAu/SXV5jhNohQ=
Subject key identifier: 0B:CE:5B:3D:92:A7:15:1E:4D:DB:AB:1B:F4:D7:18:A2:97:A5:B3:05
Authority key identifier: 08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
Certificate issuer: /CN=08422168eda8423054d82eb018c383e2dbe8afdf
Certificate serial: 01A13F023A7C78ECA9CB11A9F23266941FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
Manifest number: 17CF
Signing time: Thu 15 Oct 2026 10:01:12 +0000
Manifest this update: Thu 15 Oct 2026 10:01:12 +0000
Manifest next update: Fri 16 Oct 2026 10:01:12 +0000
Files and hashes: 1: CEIhaO2oQjBU2C6wGMOD4tvor98.crl (hash: d+jF40XbDOTSllfjYLDfze+RyixQDV3KOUg6trLQUgA=)
2: cFauzwqXomgkVBlhCEWJrgK_IBo.roa (hash: 3eFRfx8k6ux2BDXfQobN4cZglfrrJQFQAkF7k25/Hiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:02:3a:7c:78:ec:a9:cb:11:a9:f2:32:66:94:1f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08422168eda8423054d82eb018c383e2dbe8afdf
Validity
Not Before: Oct 15 10:01:12 2026 GMT
Not After : Oct 16 10:01:12 2026 GMT
Subject: CN=0bce5b3d92a7151e4ddbab1bf4d718a297a5b305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:46:85:42:4b:06:99:65:88:33:6c:71:0a:cc:
1e:6d:3f:7f:2b:de:47:60:f3:4e:bd:39:f1:2c:c7:
6a:85:95:b2:f0:ce:ed:21:6e:f8:70:da:59:c0:ca:
c7:63:79:df:b8:22:6f:3b:b0:24:2e:2d:ad:97:d9:
87:ab:c5:d9:db:5e:42:b3:1d:0b:d9:ad:8e:9c:de:
77:ee:d0:92:48:7f:7c:02:39:d9:a0:58:7a:a3:59:
ab:78:5d:35:b1:41:4c:c9:19:e0:4f:d2:bf:93:89:
ab:a3:4b:dc:c0:fb:5c:e2:1c:2c:26:6b:19:9a:52:
f2:c3:ca:eb:a9:46:0a:c4:0f:cc:e3:82:70:8b:e8:
1f:6b:a3:f3:0a:f9:4c:34:7b:4a:7d:47:92:08:cf:
67:63:51:28:06:06:1c:72:6f:e6:37:c9:86:87:90:
c1:23:95:59:a3:f2:27:15:b9:15:57:2d:c9:56:25:
03:07:96:6f:68:2a:12:86:b1:00:5f:64:08:3d:2a:
52:de:ab:67:ce:f7:17:25:1e:3b:c9:c4:17:56:35:
58:92:e9:98:3c:db:f7:eb:fc:f3:e2:3c:53:80:d4:
c1:4b:8c:2b:d2:ce:29:6d:e2:cb:31:41:40:01:d2:
78:34:75:ff:a2:aa:e7:6f:1f:e2:ec:8f:e0:f0:a8:
be:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CE:5B:3D:92:A7:15:1E:4D:DB:AB:1B:F4:D7:18:A2:97:A5:B3:05
X509v3 Authority Key Identifier:
keyid:08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:80:28:d8:c2:ee:85:36:72:8e:37:a7:47:64:48:d8:a7:56:
49:16:0b:e6:27:dd:8c:52:a1:af:b1:e2:c5:9d:39:66:5b:bf:
3c:f6:c4:95:6b:99:0c:5a:21:35:27:4f:8a:40:55:57:1c:6e:
74:95:3a:6a:36:06:96:e4:38:f8:fc:b6:da:b0:78:3e:f7:ca:
f4:fb:7c:24:63:0e:22:39:90:f5:68:32:8a:00:4a:a6:ed:8f:
b9:71:17:1c:77:d5:c0:21:08:71:f7:a8:13:72:3f:37:51:ca:
99:a2:15:52:e1:b5:1e:56:66:27:60:36:8b:8a:b4:cb:fb:8d:
c1:e6:a9:15:1b:b4:62:8f:1a:ba:23:da:c1:5d:b5:4d:7f:b6:
88:c2:b7:69:22:05:96:16:14:4d:92:f1:a9:d1:7e:f4:a0:b3:
6b:ad:ca:bb:49:94:7b:2c:c4:0d:32:e5:c1:47:e8:90:a0:35:
2f:95:42:75:49:34:9f:f0:75:ec:03:1d:96:d5:c9:01:bd:b5:
fd:12:71:60:ba:17:ed:03:9d:0d:69:e9:0b:7a:ab:42:fe:65:
5b:da:50:bc:b5:55:7d:be:c7:dd:af:80:09:4f:db:6d:f8:27:
c1:c5:2e:4d:69:d2:17:a9:98:65:f5:a0:41:db:6a:77:fd:12:
fd:51:9b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:00 2026 by rpki-client