Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
File: ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json)
Hash identifier: R0ZO38kb5ZMXI4eNyzN81+uaNdaFLtrZZwoNwR0bYgA=
Subject key identifier: 68:35:07:64:C4:77:8E:CD:7D:C6:42:BE:66:F3:6A:7F:10:B7:68:81
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 019FFE6E80BC4C54F99DE577E78B2E939FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
Manifest number: 099B
Signing time: Fri 14 Aug 2026 04:01:22 +0000
Manifest this update: Fri 14 Aug 2026 04:01:22 +0000
Manifest next update: Sat 15 Aug 2026 04:01:22 +0000
Files and hashes: 1: 7IBa4M21L1weC-CB5rmV2ELdcjc.roa (hash: r3PNsAmqfmfHmKjnNC5k/puJxwcYNjtuxkNcsT/TBwM=)
2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: sil3iCRGSBMcGofLVWsi5VLgddGVJZ5Pth3zMrenLPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fe:6e:80:bc:4c:54:f9:9d:e5:77:e7:8b:2e:93:9f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: Aug 14 04:01:22 2026 GMT
Not After : Aug 15 04:01:22 2026 GMT
Subject: CN=68350764c4778ecd7dc642be66f36a7f10b76881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:23:9f:d3:96:2c:a9:f4:a6:54:35:75:34:
d8:5a:9a:7e:04:6c:ec:b1:89:9d:51:fc:96:bf:24:
f9:6f:58:60:7b:51:0d:a8:9c:71:52:ed:d6:df:16:
ad:4e:8b:4a:b5:28:ea:4f:3a:ff:d3:f3:f6:a3:9c:
7b:45:97:ed:cd:84:57:b1:fd:2a:10:2d:b0:29:3d:
27:85:a3:5c:e8:05:72:41:a2:9b:8f:47:33:83:f8:
d3:65:91:f4:30:fc:29:70:8e:0e:c6:93:07:5c:fd:
04:19:cd:19:c1:07:1b:04:6a:50:b9:11:3b:13:b0:
90:bf:cd:ab:29:3a:a1:57:5a:cf:96:09:01:fd:c3:
49:a4:5e:f5:c0:e1:ed:e6:1e:6a:db:4e:49:bd:f4:
02:2d:8a:f4:aa:c1:6c:1d:57:ed:c6:20:81:36:63:
77:75:b2:fe:4e:72:93:9a:60:12:46:bd:6e:5c:09:
c5:6a:ce:7f:27:9e:b0:ba:bd:e2:d7:21:2f:24:ac:
4e:6c:56:46:ee:1c:6a:08:bf:a6:69:9d:48:f7:34:
7c:90:99:39:89:cb:3a:1c:50:a6:49:d2:be:32:c3:
3a:88:a5:ff:0a:91:fe:f1:c3:c7:b6:9e:fe:34:88:
0b:d0:fd:4b:df:4a:20:bd:53:de:3a:ea:67:86:a1:
ae:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:35:07:64:C4:77:8E:CD:7D:C6:42:BE:66:F3:6A:7F:10:B7:68:81
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:50:3e:62:47:9d:7d:e6:49:42:16:eb:f9:4b:4b:04:16:2f:
9d:98:fd:df:a0:6e:0e:62:4d:2a:c4:a9:7b:36:50:bd:e3:72:
74:d4:a3:92:27:8c:1e:3a:1c:68:c0:e9:96:57:e4:ba:49:0d:
6d:0f:b1:9c:ff:b6:2f:5d:76:24:77:aa:9c:05:1e:32:87:57:
d2:b6:e6:ce:53:22:7c:b0:1f:c8:69:b0:be:d4:49:a7:7e:fd:
e2:a5:7e:50:1b:c7:f1:4e:82:6c:cb:1d:5c:ac:04:6d:83:44:
a0:54:bb:94:6c:f9:6c:9a:b9:94:55:2f:e3:de:30:87:5b:04:
26:dd:8b:32:5e:31:2f:8e:85:c7:67:79:7d:d9:9d:16:c4:9c:
0c:a6:02:30:ef:63:92:fd:d0:3d:19:4a:08:a0:10:03:f0:fb:
8a:7f:18:a3:37:e5:5e:02:78:91:7b:4b:f2:fd:5b:20:f2:12:
a5:20:34:90:2b:97:89:be:2a:3f:ea:cd:1e:3f:ee:23:d1:d1:
55:21:6c:35:a0:d6:d3:f0:46:dc:9f:30:5e:1a:e7:b1:90:f8:
ec:d6:b8:7f:93:e5:b3:59:e8:c4:e4:05:6e:5e:ba:44:0e:6c:
bf:cf:5c:a2:f9:a1:df:89:e1:7b:8a:e7:2f:ac:a8:f6:24:05:
81:cb:99:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 10:10:53 2026 by rpki-client