Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: 3vKaqhBUx0jqF4DWdSRrb8OAD3UswTiVokKyYSa4zL4=
Subject key identifier: 05:6B:9B:A7:BD:3E:83:F8:E1:20:83:7A:B0:88:11:B2:FE:69:B7:35
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 019D273AF978819799B2E481BB65CC4ACC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 0F93
Signing time: Wed 25 Mar 2026 23:01:09 +0000
Manifest this update: Wed 25 Mar 2026 23:01:09 +0000
Manifest next update: Thu 26 Mar 2026 23:01:09 +0000
Files and hashes: 1: _z2uZVdWVofMNDXIfpAr7x8K_Pw.roa (hash: moGqRZrZjmmem4RcH2GHZPdoIwD9Iav/z8dOsylXWfw=)
2: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: IjTRF60lBVbLIE+Ykij83mdrom8+kfj+dqoli8LXiH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f9:78:81:97:99:b2:e4:81:bb:65:cc:4a:cc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Mar 25 23:01:09 2026 GMT
Not After : Mar 26 23:01:09 2026 GMT
Subject: CN=056b9ba7bd3e83f8e120837ab08811b2fe69b735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:2e:8d:7b:6a:48:10:f5:9b:41:5c:55:3a:
f5:a9:21:f0:3b:de:61:30:4e:e5:e0:54:3b:75:b1:
1c:e4:d6:2f:78:43:d2:26:49:2b:f3:dd:d7:24:a7:
6e:e1:19:fc:f2:54:dc:f3:ab:f5:97:6d:01:96:7e:
3a:a0:32:90:6d:a1:3b:09:3c:8f:1d:9a:0c:bf:cd:
dc:c6:a8:85:b2:a1:1e:fc:f3:8e:a8:a1:6c:bb:82:
c1:62:64:99:8f:36:ba:3e:81:2b:ce:24:05:35:0a:
43:8c:fc:58:e5:cc:2b:b1:b2:1f:10:50:02:9c:7f:
71:d4:1f:5c:de:c4:9e:fa:28:0c:1f:bc:0e:01:dd:
01:90:17:ad:72:c4:e1:1a:e0:2c:63:1d:8e:ce:48:
c9:43:f6:e7:b1:1c:b0:db:50:81:ce:91:82:7a:10:
a0:fb:df:3e:27:50:71:6b:03:cd:75:07:f1:77:2b:
07:5f:a2:3b:24:6a:a1:45:69:89:2d:f4:fb:93:8f:
b3:90:b9:7c:17:9b:31:63:7d:dd:69:9f:30:85:f4:
21:dd:b6:f9:3a:c1:6d:ad:b3:5e:15:a7:a2:75:be:
e9:b8:49:77:22:15:c3:c2:8e:d4:99:02:3f:79:3a:
62:c2:75:68:53:71:ed:a5:61:b9:40:06:1e:50:33:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6B:9B:A7:BD:3E:83:F8:E1:20:83:7A:B0:88:11:B2:FE:69:B7:35
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:38:c4:93:a6:d5:3a:bb:2b:b5:0c:68:3d:d3:d3:f3:d0:a1:
2b:8a:e1:a4:8e:43:d3:a4:6e:75:5f:94:35:77:4c:6e:ef:68:
98:aa:a8:cb:ac:a7:ff:b9:06:70:20:73:7d:52:2b:c1:f4:e5:
6a:46:df:c7:c9:cb:63:36:93:c6:71:fb:86:07:4f:ab:d9:55:
d8:96:ca:cf:49:c0:7c:b3:21:e5:dc:73:00:b1:82:2e:d8:59:
8a:ac:0a:f7:f2:1a:57:6c:fd:f1:01:10:de:ca:c0:9d:2b:8d:
2f:a2:60:61:fe:54:9f:36:67:9b:ac:d9:ca:cb:49:6b:d3:6a:
1e:96:31:13:ec:ef:e8:5b:71:ff:d1:72:43:16:17:14:55:74:
79:62:a4:03:76:aa:5e:6b:e9:2e:58:2c:fd:83:a4:66:4a:e2:
d4:d8:fd:42:0e:3d:6f:2a:5d:c9:88:6f:09:f8:72:76:a8:a5:
54:14:6a:11:d1:9f:e6:ad:f0:9a:01:e8:88:80:58:79:b9:43:
58:28:7f:c7:c1:32:02:76:78:21:12:34:d9:7b:30:9f:f9:14:
5f:33:71:7f:59:c3:b9:3d:fe:a8:22:2c:73:41:87:03:3c:c9:
06:8d:6f:55:9c:aa:01:b3:ed:b0:a2:22:a4:83:ad:7a:ff:7e:
fd:e4:80:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:12 2026 by rpki-client