Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.mft
File: CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.mft (raw, json)
Hash identifier: vBbJyB4hRIZ3uaeg7N51K82+B6EYCmP4yRH6VGMakGc=
Subject key identifier: 3E:AA:80:B1:E1:78:69:82:58:B2:B5:89:6C:79:A8:60:0C:3B:A3:40
Authority key identifier: 08:42:91:FB:02:92:A3:C8:EC:A7:FF:98:E7:39:6B:41:91:A6:7C:B4
Certificate issuer: /CN=084291fb0292a3c8eca7ff98e7396b4191a67cb4
Certificate serial: 01A040F2862FCCBA5D3163B7AF88E14AE594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.mft
Manifest number: 0145
Signing time: Thu 27 Aug 2026 02:00:30 +0000
Manifest this update: Thu 27 Aug 2026 02:00:30 +0000
Manifest next update: Fri 28 Aug 2026 02:00:30 +0000
Files and hashes: 1: CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.crl (hash: IXG76rJI9l35qSvk5kFSS1avKsMds81VHgHO8diExPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f2:86:2f:cc:ba:5d:31:63:b7:af:88:e1:4a:e5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=084291fb0292a3c8eca7ff98e7396b4191a67cb4
Validity
Not Before: Aug 27 02:00:30 2026 GMT
Not After : Aug 28 02:00:30 2026 GMT
Subject: CN=3eaa80b1e178698258b2b5896c79a8600c3ba340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:3d:0a:5c:e6:b6:a9:05:a1:4a:f9:79:71:
ee:64:1c:71:7a:32:a9:3e:77:ce:62:9d:20:e9:1b:
5c:be:39:45:52:4b:69:dc:c6:db:c6:3e:d4:2b:e8:
57:46:f7:bd:6e:e1:d6:14:ba:8d:cb:21:43:02:f1:
61:66:9e:4d:3e:08:d3:e7:59:90:5e:82:4e:3c:39:
ff:e3:53:6f:65:de:f4:63:b7:d2:31:7f:c3:c7:89:
22:bb:0b:a4:c1:45:04:10:1c:78:bc:a7:10:30:d7:
ef:e6:bf:79:b4:25:20:73:30:5d:6c:ad:62:2b:80:
5b:a7:22:1c:c1:d6:5b:00:53:ab:12:fd:41:32:0d:
c7:ec:f4:39:0e:41:0f:bc:38:af:37:97:58:bb:86:
ed:fe:5c:e5:b3:44:3e:fb:a4:26:2d:a1:6b:1e:05:
d7:34:1e:85:25:71:7c:36:25:5d:7f:a7:10:dd:13:
db:34:7b:69:af:c5:6b:fc:30:3b:08:eb:f0:ec:ea:
45:ec:53:bb:19:e0:bb:f0:07:e4:6f:81:95:ed:6e:
9a:25:80:a6:be:b0:51:a6:3e:18:fb:fb:db:49:f4:
05:f4:b2:96:e4:e0:01:84:2f:b8:fd:58:09:51:a7:
8f:5d:87:0e:c4:f8:1d:0a:3c:65:18:7a:f9:9f:cd:
f6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AA:80:B1:E1:78:69:82:58:B2:B5:89:6C:79:A8:60:0C:3B:A3:40
X509v3 Authority Key Identifier:
keyid:08:42:91:FB:02:92:A3:C8:EC:A7:FF:98:E7:39:6B:41:91:A6:7C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fdd42e-8694-4e6e-b299-df471589b04e/1/CEKR-wKSo8jsp_-Y5zlrQZGmfLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:81:61:44:af:35:19:72:5e:0a:64:12:4f:fe:2e:05:d9:a2:
37:48:c3:b4:a3:7d:61:2a:d9:99:6f:9c:b6:97:8b:e2:cb:60:
a5:56:41:43:c5:f9:5e:fe:5a:41:0d:7c:4c:f0:71:34:1a:f3:
fa:92:60:76:5c:26:ba:9d:59:93:54:ec:87:03:78:08:5b:ec:
35:5a:72:ff:46:dc:f3:5c:55:6b:ba:9c:6a:1d:a6:13:a5:0c:
54:21:8b:2f:bc:8a:9e:ab:d2:91:20:7a:ce:df:8c:22:ee:37:
93:42:d7:57:d6:6d:46:0f:d8:12:05:f1:c1:14:8a:b8:43:4e:
25:10:bb:a5:06:6a:0b:81:74:40:99:9b:cf:0f:01:85:ff:38:
85:d7:95:08:3e:2c:6f:cc:c5:54:e5:c4:57:68:47:53:51:30:
f8:73:55:b9:b9:94:bc:dc:ee:a2:b4:a2:78:18:b2:cf:35:9a:
34:6b:dc:a2:af:ec:15:28:10:f7:fd:89:24:7c:d7:5f:e1:af:
1a:0c:cb:c1:0b:6a:01:eb:ef:8e:d6:92:c2:2a:f5:46:2b:f5:
ff:9e:2a:6a:20:52:7e:4e:5f:e5:a0:a8:db:5f:8b:24:eb:8b:
79:47:9f:1d:c8:1b:05:fa:62:9f:10:a5:76:18:16:66:f3:f6:
6d:ce:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:45 2026 by rpki-client