Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft (raw, json)
Hash identifier: NsJwO5gfVjBP44QhCM9nAtx6KPM9/7a3nfir564+thw=
Subject key identifier: 73:55:7C:DC:72:63:2C:F1:23:08:D4:14:5A:93:BE:E3:E7:94:ED:A7
Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2
Certificate serial: 01A0908E2CAA35E8E5AE663F8A276BB19921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
Manifest number: 06BC
Signing time: Fri 11 Sep 2026 13:00:31 +0000
Manifest this update: Fri 11 Sep 2026 13:00:31 +0000
Manifest next update: Sat 12 Sep 2026 13:00:31 +0000
Files and hashes: 1: 4SGHkhKi4QTLFpo-qosd2bahj-Q.roa (hash: dW+Z69p8lpg56uETMd4OUZVzln7S7hdyAq7PkiXDS3o=)
2: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl (hash: tQPp7AGuHaRQLW/JyDHsOwsY3580UNCmgnPYxeTpp+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:8e:2c:aa:35:e8:e5:ae:66:3f:8a:27:6b:b1:99:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2
Validity
Not Before: Sep 11 13:00:31 2026 GMT
Not After : Sep 12 13:00:31 2026 GMT
Subject: CN=73557cdc72632cf12308d4145a93bee3e794eda7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:5e:84:fe:15:58:10:79:fb:94:4c:7a:4b:
78:33:33:61:83:2c:28:22:02:e0:32:86:b2:a8:fe:
53:3e:57:d2:3d:c0:1f:e5:eb:b4:26:a7:9c:07:36:
93:3d:79:08:57:61:2d:41:cf:ea:02:83:ab:70:47:
55:aa:17:ef:23:6d:f0:8a:27:0b:da:e3:5a:34:51:
c5:cd:c5:61:70:dc:32:63:e0:c1:a7:95:8b:17:25:
e6:a9:fe:6f:82:0e:21:a4:08:20:b6:60:3d:aa:4b:
94:5a:36:0c:d0:f8:57:db:a0:14:4b:91:18:ce:3e:
0e:67:12:61:99:1b:eb:0c:0e:05:ed:81:f0:15:43:
e4:c8:2a:86:3b:96:2c:6b:e8:66:fa:a4:22:a5:59:
4d:49:d4:2b:af:7b:d5:a7:e7:4a:32:3e:45:0b:81:
17:63:92:c9:3a:36:7e:7d:e7:6d:47:e6:3c:9e:33:
31:90:fa:be:b0:1d:35:51:ca:3e:72:00:45:b3:b0:
3a:40:9e:3c:92:42:b4:97:e2:d4:31:d1:90:01:b3:
80:cb:9a:30:9f:05:92:b6:f2:e6:0e:d9:8a:44:2e:
19:35:7f:83:44:28:15:49:0b:e2:25:ea:a4:cd:8c:
85:19:78:be:ea:d1:bc:7d:0b:9c:85:43:f6:5b:e6:
a4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:55:7C:DC:72:63:2C:F1:23:08:D4:14:5A:93:BE:E3:E7:94:ED:A7
X509v3 Authority Key Identifier:
keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e1:9f:7b:9a:9e:77:8b:4f:af:06:73:b6:fc:8e:1b:f7:b2:
a7:b1:8c:d8:bf:bf:f5:28:28:eb:99:e3:12:df:f7:89:fa:9e:
e4:6d:ba:68:c5:91:b1:24:a3:f6:6c:51:8b:d8:03:5b:ba:3d:
4c:33:fb:a2:70:aa:84:69:ff:3c:2f:ea:b0:e1:b9:3c:4f:c9:
c2:eb:2a:52:b0:b3:17:04:ce:c5:b9:55:87:47:46:96:21:da:
56:91:5e:22:f9:45:cd:4b:3d:a1:c9:e7:d0:ce:85:66:a8:a5:
63:cc:8a:d2:b2:8a:a5:5b:a6:54:01:46:2f:45:12:7a:2b:0c:
43:c8:5c:d0:05:bd:5b:59:27:2e:95:d8:82:38:ea:6b:33:fa:
fc:03:a1:af:11:a4:24:e7:9b:e3:eb:a7:c4:e7:c2:82:d8:49:
34:0b:c2:4d:06:12:36:25:89:85:80:79:2a:d1:f0:45:8c:be:
69:cb:55:0a:ca:5c:46:86:d6:64:4b:43:78:ba:00:30:86:4f:
1b:13:1a:73:b3:14:bb:1f:f2:ea:f4:e7:a7:96:4c:3a:d8:d6:
e1:9c:ec:a4:a6:95:6b:b7:d7:f5:ac:d0:2b:59:04:32:03:1e:
31:a1:0f:6a:27:d5:16:98:3d:3b:ee:a9:fa:04:b5:d1:e1:a9:
78:49:15:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCQjiyqNejlrmY/iidrsZkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDI3NTlhMDRmY2ZkOWRkMzg2NDg2ZjA0ODIwZTRhMDYw
Mzk3ZjIwHhcNMjYwOTExMTMwMDMxWhcNMjYwOTEyMTMwMDMxWjAzMTEwLwYDVQQD
Eyg3MzU1N2NkYzcyNjMyY2YxMjMwOGQ0MTQ1YTkzYmVlM2U3OTRlZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn79ehP4VWBB5+5RMekt4MzNhgywo
IgLgMoayqP5TPlfSPcAf5eu0JqecBzaTPXkIV2EtQc/qAoOrcEdVqhfvI23wiicL
2uNaNFHFzcVhcNwyY+DBp5WLFyXmqf5vgg4hpAggtmA9qkuUWjYM0PhX26AUS5EY
zj4OZxJhmRvrDA4F7YHwFUPkyCqGO5Ysa+hm+qQipVlNSdQrr3vVp+dKMj5FC4EX
Y5LJOjZ+fedtR+Y8njMxkPq+sB01Uco+cgBFs7A6QJ48kkK0l+LUMdGQAbOAy5ow
nwWStvLmDtmKRC4ZNX+DRCgVSQviJeqkzYyFGXi+6tG8fQuchUP2W+akpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNVfNxyYyzxIwjUFFqTvuPnlO2nMB8GA1UdIwQY
MBaAFAhCdZoE/P2d04ZIbwSCDkoGA5fyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VKMW1nVDhfWjNUaGtodkJJSU9TZ1lEbF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zZGZlN2YtNTdhZS00NTBjLTkyZTEt
NzAyNWUxODgwNjhjLzEvQ0VKMW1nVDhfWjNUaGtodkJJSU9TZ1lEbF9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8zZGZlN2YtNTdhZS00NTBjLTkyZTEtNzAyNWUxODgwNjhj
LzEvQ0VKMW1nVDhfWjNUaGtodkJJSU9TZ1lEbF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOGfe5qe
d4tPrwZztvyOG/eyp7GM2L+/9Sgo65njEt/3ifqe5G26aMWRsSSj9mxRi9gDW7o9
TDP7onCqhGn/PC/qsOG5PE/JwusqUrCzFwTOxblVh0dGliHaVpFeIvlFzUs9ocnn
0M6FZqilY8yK0rKKpVumVAFGL0USeisMQ8hc0AW9W1knLpXYgjjqazP6/AOhrxGk
JOeb4+unxOfCgthJNAvCTQYSNiWJhYB5KtHwRYy+actVCspcRobWZEtDeLoAMIZP
GxMac7MUux/y6vTnp5ZMOtjW4ZzspKaVa7fX9azQK1kEMgMeMaEPaifVFpg9O+6p
+gS10eGpeEkVQA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 19:40:01 2026 by rpki-client