Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft (raw, json)
Hash identifier: gM04swcIGoHFR1evdo0fEQaPymjEz8lIhIFkGqmn1fk=
Subject key identifier: 86:C5:5C:88:D3:A5:15:69:27:3B:1B:98:F6:0C:3C:32:AF:09:74:CA
Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2
Certificate serial: 019FA6E169D5B0158865B2CF2604449E4A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
Manifest number: 0643
Signing time: Tue 28 Jul 2026 04:00:18 +0000
Manifest this update: Tue 28 Jul 2026 04:00:18 +0000
Manifest next update: Wed 29 Jul 2026 04:00:18 +0000
Files and hashes: 1: 4SGHkhKi4QTLFpo-qosd2bahj-Q.roa (hash: dW+Z69p8lpg56uETMd4OUZVzln7S7hdyAq7PkiXDS3o=)
2: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl (hash: 6y4O9pXP1XYIp+zUudOXu7uGRlWwf7IoS71LIr2Xbag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 22:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a6:e1:69:d5:b0:15:88:65:b2:cf:26:04:44:9e:4a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2
Validity
Not Before: Jul 28 04:00:18 2026 GMT
Not After : Jul 29 04:00:18 2026 GMT
Subject: CN=86c55c88d3a51569273b1b98f60c3c32af0974ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:80:45:c4:36:27:13:b2:b8:cf:69:9a:7c:
df:fb:db:94:f2:14:bb:fe:39:39:50:26:78:4d:53:
98:80:c2:7b:ec:e6:1b:40:55:f7:e2:e9:39:77:09:
64:8c:58:0d:b5:86:1c:ff:2b:7f:0f:12:59:02:e6:
f8:7d:01:89:0e:b0:73:02:03:d2:58:96:17:1f:ad:
7c:37:2a:3d:4c:09:5a:44:c3:14:82:97:02:8e:c6:
b1:fc:d9:a4:2f:1b:41:6b:b4:a7:49:3d:f9:39:62:
c9:99:82:cf:64:fe:c9:c8:6e:39:5a:2f:72:44:8c:
5f:a4:c3:e2:79:86:1d:c8:45:58:50:dc:af:00:4f:
17:0b:f7:8f:1b:b9:85:0f:c1:1c:06:85:84:f3:77:
37:7a:59:21:83:eb:51:98:8f:92:01:b1:3a:bf:2b:
fb:86:37:9a:f6:f5:59:52:1c:ba:d4:5c:68:b4:a3:
67:6b:42:62:c1:82:7e:06:38:7d:c3:ff:41:da:3b:
73:f3:d6:4c:ab:7b:b5:0c:69:93:31:f7:05:67:41:
a9:95:21:0b:58:f8:11:eb:44:fc:e7:b9:e9:bc:fa:
c7:f8:7b:f2:af:33:35:7c:8e:25:9e:f6:82:7b:0f:
4e:ba:ed:1d:ea:5a:c6:ba:e4:a0:7e:96:1f:9d:ce:
63:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C5:5C:88:D3:A5:15:69:27:3B:1B:98:F6:0C:3C:32:AF:09:74:CA
X509v3 Authority Key Identifier:
keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:6f:f5:1e:5c:80:21:21:d6:83:7c:fa:00:94:e0:6f:ca:d0:
ec:d6:db:34:8e:29:2a:36:14:bb:86:64:98:72:a1:e5:46:4b:
92:98:13:f7:15:f2:ab:4e:c7:1d:91:67:15:3e:81:1a:cc:ee:
7a:64:3d:8b:fb:a6:e3:22:21:fd:8d:ed:68:e4:ed:57:96:3a:
33:10:bb:c0:b3:77:cc:91:6d:b6:81:a7:7d:2b:89:33:d7:a9:
6e:e8:15:ca:6c:81:f5:f5:7a:68:8a:14:f2:81:56:ca:6e:88:
be:07:37:3b:c9:ee:86:92:6e:09:ab:68:a6:d8:f1:9a:b4:f1:
8c:2c:56:6d:91:b1:8d:47:51:5f:95:25:54:70:f9:b8:33:cd:
b1:14:01:92:51:df:0f:b4:b6:d5:da:37:0b:7f:e4:ae:c8:5d:
c7:0d:da:a3:ba:14:42:1f:31:92:e1:5b:e0:67:aa:23:67:05:
b6:fa:1a:a8:63:c0:5e:3e:2b:3f:7f:b6:3f:00:7d:a6:0b:c0:
ec:2f:3c:b8:ae:dd:f7:86:e2:a9:e5:d7:93:15:dd:6c:80:4b:
cc:c1:50:3c:12:e5:54:3c:5a:20:e8:35:34:93:8f:ac:c6:a5:
eb:ac:3f:c0:dc:2a:62:b9:40:13:08:e5:cb:3a:59:da:04:d9:
f9:71:c9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 07:33:18 2026 by rpki-client