Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
File: CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft (raw, json)
Hash identifier: s1fNMUpqIZtSXMFtHWYS7exxVA4jJOJxHzNP7vj0khs=
Subject key identifier: F0:C4:A6:C0:8D:B4:99:5E:F0:D8:DA:62:F5:B0:2A:38:75:9B:EE:90
Authority key identifier: 08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
Certificate issuer: /CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Certificate serial: 01A13FDDF983DC34B4AF394295D7265231FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
Manifest number: 1AAA
Signing time: Thu 15 Oct 2026 14:01:14 +0000
Manifest this update: Thu 15 Oct 2026 14:01:14 +0000
Manifest next update: Fri 16 Oct 2026 14:01:14 +0000
Files and hashes: 1: CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl (hash: +xeI+FNk0/RSo6cVnPaNPrFQXilZ6RcIdnvzGylZPNE=)
2: hSyCHHwvePnnhJaLoj0bPLiKrY0.roa (hash: Q5kLVpiwwKotr0YZjLtoW5+DY5vy3ewkjBXAVZYPMBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:dd:f9:83:dc:34:b4:af:39:42:95:d7:26:52:31:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0843e9c2487954691227b1e32175d8f7a1cc3ef5
Validity
Not Before: Oct 15 14:01:14 2026 GMT
Not After : Oct 16 14:01:14 2026 GMT
Subject: CN=f0c4a6c08db4995ef0d8da62f5b02a38759bee90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:b8:20:46:ef:fd:6b:54:be:9a:ef:bc:72:
8a:41:ef:5d:fa:96:43:91:4a:0c:a1:17:99:d8:e6:
37:4d:9a:e6:b3:f4:2d:a8:dc:e1:c3:1e:64:b8:54:
62:32:e7:c6:8e:77:80:fb:01:10:85:09:22:c5:06:
a2:ef:14:76:fe:6e:a5:a3:fd:5e:5a:ed:cf:c0:66:
5f:b1:2e:c0:86:7e:b2:3a:03:da:2b:fe:f7:75:ec:
fc:25:b3:b2:b1:a8:e6:2b:3f:61:46:68:58:86:1f:
9d:5a:24:62:75:3e:7e:e7:7a:71:2f:c9:b5:16:6a:
9a:41:ee:a4:53:d6:00:cc:10:cf:da:b8:46:2e:6e:
a6:63:a5:cd:5a:a9:f0:83:06:61:c7:47:ea:4f:ec:
04:92:d4:7b:e8:82:55:5f:71:10:22:bb:9c:48:03:
59:03:00:62:d3:79:53:d4:19:b8:fa:8d:47:bf:aa:
f2:16:dd:4d:2e:98:81:bb:67:98:a2:fb:97:05:b9:
af:9c:0e:93:4d:f3:90:2d:24:bb:03:d1:30:6d:43:
02:a2:48:c1:75:bc:ee:50:60:0d:13:37:41:40:19:
79:13:d4:30:40:b9:36:be:39:50:f5:e9:3d:c2:07:
e9:9d:bd:b2:51:93:06:ce:c0:fc:d4:ce:59:73:65:
50:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C4:A6:C0:8D:B4:99:5E:F0:D8:DA:62:F5:B0:2A:38:75:9B:EE:90
X509v3 Authority Key Identifier:
keyid:08:43:E9:C2:48:79:54:69:12:27:B1:E3:21:75:D8:F7:A1:CC:3E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEPpwkh5VGkSJ7HjIXXY96HMPvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0c4e20-d591-415e-a06f-008a508bae9d/1/CEPpwkh5VGkSJ7HjIXXY96HMPvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:f8:30:60:8f:f4:59:84:da:96:56:52:08:bb:97:d3:78:9d:
92:94:27:a0:ac:0d:58:41:9e:19:14:88:14:2e:05:7f:7f:a6:
10:61:69:4f:ed:b2:90:cc:be:56:cb:bf:c8:d7:9b:cd:9a:fa:
4d:22:eb:46:a4:d7:21:73:e5:d8:75:46:ae:5a:93:24:3f:44:
7d:e6:b2:0a:77:da:c2:40:58:c4:85:7f:c9:b1:d6:d2:39:94:
31:d6:84:3f:80:15:74:8c:75:4f:34:d5:d1:3d:54:76:5b:f2:
15:ce:98:14:26:3e:c8:20:cb:cb:d0:cf:4b:8b:25:0c:ce:f2:
78:25:77:cc:62:07:55:3d:78:a6:ac:74:9c:50:af:dc:65:14:
e4:3a:91:1d:8d:31:f0:02:d9:26:23:db:06:00:98:73:05:82:
68:5f:d7:2c:d4:25:32:f2:e0:cd:57:2b:0c:48:97:3d:29:30:
8a:3d:5f:9e:1a:19:c8:3e:33:21:bf:bd:72:43:fe:50:3f:64:
27:a2:66:45:c7:b8:50:69:4c:4d:44:d1:dc:31:52:f6:be:a5:
9a:0f:2c:53:ef:77:dc:cd:4f:f3:90:50:3d:47:ca:63:6a:50:
8a:e9:91:ce:fe:2c:1e:bf:1a:06:51:d1:48:8d:22:9d:1f:8d:
38:63:a4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:27 2026 by rpki-client