
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
File: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft (raw, json)
Hash identifier: EJIqK9jBtkai5hFJsHRjLgjS0CtAIP8Q6R4uuj1wAGY=
Subject key identifier: F0:23:F0:F5:1E:09:4A:F2:79:2D:E8:28:53:FE:F2:F4:99:6A:37:AC
Authority key identifier: 08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
Certificate issuer: /CN=0842759a04fcfd9dd386486f04820e4a060397f2
Certificate serial: 01A18B9C1F3DB488EDC8C48AB7391F2F0032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
Manifest number: 073E
Signing time: Fri 30 Oct 2026 07:00:26 +0000
Manifest this update: Fri 30 Oct 2026 07:00:26 +0000
Manifest next update: Sat 31 Oct 2026 07:00:26 +0000
Files and hashes: 1: 4SGHkhKi4QTLFpo-qosd2bahj-Q.roa (hash: dW+Z69p8lpg56uETMd4OUZVzln7S7hdyAq7PkiXDS3o=)
2: CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl (hash: Os3RMvy0CDH5PJyYA/X47TOfXhuVjG/sJf/+V2WK3LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 07:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:9c:1f:3d:b4:88:ed:c8:c4:8a:b7:39:1f:2f:00:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0842759a04fcfd9dd386486f04820e4a060397f2
Validity
Not Before: Oct 30 07:00:26 2026 GMT
Not After : Oct 31 07:00:26 2026 GMT
Subject: CN=f023f0f51e094af2792de82853fef2f4996a37ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:1d:7a:d5:73:7b:52:6b:d8:73:16:05:1e:
07:56:ef:85:83:f9:77:b2:14:43:66:1b:24:db:94:
01:35:15:ea:70:36:e5:c0:46:3d:9e:db:38:0f:27:
f5:70:a9:df:a7:f2:89:51:02:5c:03:62:dd:dd:e2:
7a:01:ba:c7:a1:96:18:64:93:09:ca:18:78:da:d0:
79:10:32:23:d4:2f:0a:32:ce:dd:a6:5f:09:ab:97:
5e:a2:6c:2a:96:34:72:35:69:49:be:57:40:78:39:
f5:10:16:8c:17:98:cb:e2:cd:8e:95:d3:b5:fd:b8:
7b:5e:a4:53:ee:e0:50:b3:20:0f:5d:b9:9f:5c:c6:
ea:d5:73:a6:a0:da:6c:e6:b1:4b:cb:88:b1:60:ab:
99:55:3b:49:3d:18:a4:39:89:96:b6:c9:db:48:3c:
0a:12:fd:cd:1d:77:2e:56:f4:7e:be:e7:64:79:67:
c9:42:cc:c9:26:7d:6e:41:65:90:c4:80:d8:21:33:
cb:8d:eb:79:0b:a6:8e:00:e5:ac:8c:69:0a:43:06:
05:aa:ac:f1:9f:26:38:51:38:ee:b4:2a:b4:0d:04:
62:84:dd:14:0d:1f:78:4f:7a:07:84:f8:e7:ef:38:
ec:77:64:87:e4:f7:3f:17:cd:a4:54:f1:9b:b7:85:
44:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:23:F0:F5:1E:09:4A:F2:79:2D:E8:28:53:FE:F2:F4:99:6A:37:AC
X509v3 Authority Key Identifier:
keyid:08:42:75:9A:04:FC:FD:9D:D3:86:48:6F:04:82:0E:4A:06:03:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/3dfe7f-57ae-450c-92e1-7025e188068c/1/CEJ1mgT8_Z3ThkhvBIIOSgYDl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:7d:3c:2b:6f:41:bb:64:19:a6:5a:ef:1e:76:fe:50:7f:75:
e6:22:b9:bb:38:1e:6b:a3:aa:38:87:2e:d5:ea:1a:a1:3c:0e:
97:7b:15:c5:49:b3:a8:35:12:77:ba:54:01:cb:0a:fb:63:80:
b1:98:33:d6:d6:70:17:58:d2:25:71:32:43:9b:9e:45:0d:41:
8f:60:cb:49:b8:78:33:91:9f:49:01:90:e3:7f:3f:d2:90:c6:
15:5f:82:cd:e4:dd:6c:36:dc:f7:2f:af:aa:e1:9a:11:6b:d9:
ba:44:2a:04:fb:9a:b6:2d:db:19:d8:44:b9:90:f2:e2:4f:af:
26:70:2f:ea:cc:29:0e:69:50:39:56:4f:42:50:cb:83:15:17:
1c:a9:52:19:6f:e3:fa:6c:1c:42:16:49:ac:21:91:09:72:b0:
a7:c8:e7:ec:1a:21:15:e5:02:ad:3d:75:45:69:01:96:d6:6c:
1a:d4:9b:96:2e:25:64:99:9a:a8:f3:a4:4a:d6:cd:11:f2:88:
c9:81:1a:de:0d:05:f7:fb:54:28:a8:a1:4f:e7:df:45:fb:19:
52:39:8a:bd:de:6a:6f:a3:2b:3b:2a:9c:3d:cc:37:0b:63:d8:
51:0d:5c:61:b5:19:db:41:6b:1d:87:18:97:9d:91:15:cf:48:
dd:f9:14:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:24:39 2026 by rpki-client