Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
File: CEIhaO2oQjBU2C6wGMOD4tvor98.mft (raw, json)
Hash identifier: OTZO4ZZHcXr/DEExUL8scNN+tdTKmOJvEiVTtd/rnhU=
Subject key identifier: FC:A6:6D:25:5C:5E:84:64:7C:2A:10:F5:24:AC:3C:0E:5F:4A:B1:06
Authority key identifier: 08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
Certificate issuer: /CN=08422168eda8423054d82eb018c383e2dbe8afdf
Certificate serial: 01A0005C696C39C9A1E8D1E1543A513D6819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
Manifest number: 172A
Signing time: Fri 14 Aug 2026 13:00:51 +0000
Manifest this update: Fri 14 Aug 2026 13:00:51 +0000
Manifest next update: Sat 15 Aug 2026 13:00:51 +0000
Files and hashes: 1: CEIhaO2oQjBU2C6wGMOD4tvor98.crl (hash: jdIZ8TGsoCetVzyq+rSfFgBk7ZmrRJTOT8COh3LxYUc=)
2: cFauzwqXomgkVBlhCEWJrgK_IBo.roa (hash: 3eFRfx8k6ux2BDXfQobN4cZglfrrJQFQAkF7k25/Hiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:69:6c:39:c9:a1:e8:d1:e1:54:3a:51:3d:68:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08422168eda8423054d82eb018c383e2dbe8afdf
Validity
Not Before: Aug 14 13:00:51 2026 GMT
Not After : Aug 15 13:00:51 2026 GMT
Subject: CN=fca66d255c5e84647c2a10f524ac3c0e5f4ab106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7e:ff:c9:af:cf:d0:73:2e:c5:b5:5d:5d:a2:
e6:c0:7b:5f:81:3b:65:44:90:c2:6b:8a:6f:53:2b:
d3:dc:be:b4:99:25:5a:7e:5b:53:19:bd:29:8d:e3:
df:36:69:75:3a:c5:01:12:77:a9:e5:90:92:de:12:
84:57:d7:e0:af:10:74:82:4d:97:2f:a0:b3:6b:d4:
bf:e6:76:3b:5a:9d:14:bb:29:9c:9a:52:93:1a:48:
94:67:09:7c:ff:8b:1c:af:48:e8:45:d0:25:7e:2a:
97:29:e2:78:f9:f4:f7:10:62:58:ce:91:30:ce:3a:
a2:d8:87:31:d2:45:c7:e2:9f:96:21:4a:b7:7f:4e:
8f:dc:cb:4c:1f:e2:6e:16:7d:22:6e:f8:31:54:4e:
e2:44:f3:8d:f9:d4:a0:f4:00:e3:4e:0e:45:13:7e:
4d:c2:86:a2:40:ef:11:74:8f:f8:8a:09:cb:0c:75:
d9:2c:5c:cf:8f:7c:c5:85:06:8f:55:26:04:91:29:
50:8b:55:54:7c:7c:ad:d4:92:c9:13:a6:af:6a:8e:
74:d7:42:9a:5a:79:36:c5:54:23:0a:4e:24:7c:b7:
8b:2b:e1:22:6b:f0:f5:58:74:5d:f7:0d:d0:73:a3:
db:41:62:c6:d9:fe:fe:69:86:a3:60:2e:ec:dd:86:
27:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A6:6D:25:5C:5E:84:64:7C:2A:10:F5:24:AC:3C:0E:5F:4A:B1:06
X509v3 Authority Key Identifier:
keyid:08:42:21:68:ED:A8:42:30:54:D8:2E:B0:18:C3:83:E2:DB:E8:AF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEIhaO2oQjBU2C6wGMOD4tvor98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/960a2b-337d-4d02-ba81-6e19f679a623/1/CEIhaO2oQjBU2C6wGMOD4tvor98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:51:f7:bd:73:be:55:3b:0c:d3:90:1c:ac:d0:5b:89:fe:cd:
d7:08:25:f8:cb:84:61:3a:82:16:70:7d:1f:14:92:47:0a:fc:
72:80:46:2d:bb:01:bd:a4:db:2e:31:3f:5f:e3:25:02:4d:d1:
25:8d:0e:10:e4:34:b0:b1:56:e9:a3:64:03:e7:d9:80:05:f5:
50:05:26:ac:eb:61:e6:91:29:73:07:5c:1a:40:28:25:ac:81:
e4:57:ac:d5:26:11:eb:b5:c3:4d:31:c4:26:6c:81:12:6a:1b:
d1:ff:b1:4f:b8:53:dd:87:c3:4a:e7:3f:ff:2c:d0:de:f0:d4:
d4:3b:ad:ba:51:f3:f0:c4:7a:5d:0d:b7:55:66:b1:d2:ef:53:
d2:16:65:bf:8c:86:16:09:54:13:83:97:05:cd:b0:de:39:cb:
55:36:f6:e4:f0:20:ad:2a:64:99:6b:49:34:b0:a7:4a:f5:28:
93:fa:9e:e6:26:4f:a0:1b:3c:c9:ad:f8:5c:31:c6:62:35:0e:
d7:05:36:92:0b:28:17:9c:17:ca:33:a7:d3:2a:c7:c7:96:01:
dc:56:4e:6d:0a:d5:84:b4:80:f9:de:0a:3e:40:c6:2f:97:d5:
01:1b:a2:b5:60:59:cb:e9:1a:fc:19:82:40:12:72:ab:a3:52:
c7:d2:67:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXGlsOcmh6NHhVDpRPWgZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDIyMTY4ZWRhODQyMzA1NGQ4MmViMDE4YzM4M2UyZGJl
OGFmZGYwHhcNMjYwODE0MTMwMDUxWhcNMjYwODE1MTMwMDUxWjAzMTEwLwYDVQQD
EyhmY2E2NmQyNTVjNWU4NDY0N2MyYTEwZjUyNGFjM2MwZTVmNGFiMTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH7/ya/P0HMuxbVdXaLmwHtfgTtl
RJDCa4pvUyvT3L60mSVafltTGb0pjePfNml1OsUBEnep5ZCS3hKEV9fgrxB0gk2X
L6Cza9S/5nY7Wp0UuymcmlKTGkiUZwl8/4scr0joRdAlfiqXKeJ4+fT3EGJYzpEw
zjqi2Icx0kXH4p+WIUq3f06P3MtMH+JuFn0ibvgxVE7iRPON+dSg9ADjTg5FE35N
woaiQO8RdI/4ignLDHXZLFzPj3zFhQaPVSYEkSlQi1VUfHyt1JLJE6avao5010Ka
Wnk2xVQjCk4kfLeLK+Eia/D1WHRd9w3Qc6PbQWLG2f7+aYajYC7s3YYnxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPymbSVcXoRkfCoQ9SSsPA5fSrEGMB8GA1UdIwQY
MBaAFAhCIWjtqEIwVNgusBjDg+Lb6K/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS85NjBhMmItMzM3ZC00ZDAyLWJhODEt
NmUxOWY2NzlhNjIzLzEvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS85NjBhMmItMzM3ZC00ZDAyLWJhODEtNmUxOWY2NzlhNjIz
LzEvQ0VJaGFPMm9RakJVMkM2d0dNT0Q0dHZvcjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1H3vXO+
VTsM05AcrNBbif7N1wgl+MuEYTqCFnB9HxSSRwr8coBGLbsBvaTbLjE/X+MlAk3R
JY0OEOQ0sLFW6aNkA+fZgAX1UAUmrOth5pEpcwdcGkAoJayB5Fes1SYR67XDTTHE
JmyBEmob0f+xT7hT3YfDSuc//yzQ3vDU1DutulHz8MR6XQ23VWax0u9T0hZlv4yG
FglUE4OXBc2w3jnLVTb25PAgrSpkmWtJNLCnSvUok/qe5iZPoBs8ya34XDHGYjUO
1wU2kgsoF5wXyjOn0yrHx5YB3FZObQrVhLSA+d4KPkDGL5fVARuitWBZy+ka/BmC
QBJyq6NSx9JnQw==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:11:03 2026 by rpki-client