Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: hfeTViXQaQ8Ekp5dN95HUnJSpcA1aTc+OJY/WD7BHXs=
Subject key identifier: B2:52:BB:23:73:0D:83:2B:CE:76:BF:28:9D:1A:75:5F:63:5C:0D:81
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 01A0E709F6EFE413BA6606B4392A402A7A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 1184
Signing time: Mon 28 Sep 2026 08:03:04 +0000
Manifest this update: Mon 28 Sep 2026 08:03:04 +0000
Manifest next update: Tue 29 Sep 2026 08:03:04 +0000
Files and hashes: 1: _z2uZVdWVofMNDXIfpAr7x8K_Pw.roa (hash: moGqRZrZjmmem4RcH2GHZPdoIwD9Iav/z8dOsylXWfw=)
2: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: i2nPPPLyZ6XbrEnBjrrKKMBGhYUvcYesHgA0WAzJeyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:09:f6:ef:e4:13:ba:66:06:b4:39:2a:40:2a:7a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Sep 28 08:03:04 2026 GMT
Not After : Sep 29 08:03:04 2026 GMT
Subject: CN=b252bb23730d832bce76bf289d1a755f635c0d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f6:4d:58:73:19:74:65:dc:36:e9:ac:d6:af:
58:20:9f:89:46:a5:8f:74:f6:56:1d:8a:1e:45:49:
c9:1f:62:0c:fb:52:a2:04:60:6e:89:a3:21:bc:e7:
3c:76:57:c0:25:e4:28:a1:bc:a0:06:66:35:c9:f5:
9a:ad:c2:06:d7:44:5e:9f:c5:47:01:64:bb:c1:e1:
8e:a9:e1:a2:52:cb:31:47:ea:79:36:f0:5e:87:6c:
fa:de:fe:02:0d:76:7b:b2:97:a9:64:c3:8e:7a:eb:
8c:a0:4d:21:b1:e7:f0:ca:e9:59:a3:66:37:d0:ba:
d5:1e:cd:ed:dc:9b:fd:75:ec:f3:48:57:00:ff:b7:
29:8f:8d:e5:6b:d2:65:94:ca:6e:40:04:ad:d9:c0:
af:9e:01:c0:6c:db:95:86:82:1f:2f:53:16:df:78:
5b:3d:c4:9a:2c:4e:6e:f6:4d:f1:a7:b3:06:cf:e2:
0c:7e:39:11:ad:ec:3e:40:aa:30:d4:6a:7f:3b:01:
ca:fa:17:ca:b6:82:2d:d5:e1:9f:ef:6b:ac:ca:a4:
a0:0b:41:68:f7:98:8a:36:fa:ad:22:41:3d:27:a0:
a9:2b:4f:74:33:fc:d4:b2:36:b2:d1:66:eb:31:e3:
da:af:16:ab:00:c7:2b:f5:bb:40:32:85:8e:cb:3f:
c4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:52:BB:23:73:0D:83:2B:CE:76:BF:28:9D:1A:75:5F:63:5C:0D:81
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:42:df:a6:a8:7f:58:a3:10:4a:29:01:31:0f:f6:d0:83:72:
6a:71:94:69:9a:5e:1d:68:23:66:a3:86:c5:45:3c:24:0a:f1:
49:c2:d8:34:6a:42:54:53:7d:cb:ff:41:1f:41:5b:0a:e0:24:
22:9b:57:66:82:4e:56:ea:64:59:b6:f7:d6:71:ae:01:b5:72:
ae:f8:bf:17:55:58:f5:f3:84:8a:be:06:3a:99:52:14:94:42:
6a:0f:e2:91:ed:e4:a4:43:7b:b5:fd:99:0f:a6:05:8b:08:a9:
71:cb:03:28:c3:e8:dd:69:b8:97:7b:d5:62:91:8a:b2:2d:93:
88:32:1f:16:24:1f:19:c7:5b:ba:83:cd:e7:14:6e:30:99:a2:
77:79:71:5a:e7:73:15:23:86:3d:00:81:65:06:69:2f:8f:75:
69:19:3a:6b:89:da:e7:93:9a:6a:83:85:c3:bd:ed:d0:6a:0e:
29:2b:b7:ce:8a:02:46:58:4f:90:bb:c0:78:b6:e3:2b:a8:79:
2f:86:ba:9b:98:ad:02:0b:df:1c:94:56:c0:33:34:d5:2b:af:
db:aa:7d:f7:39:7f:78:61:c3:7f:23:75:ce:10:f3:b3:69:b7:
95:41:ba:f3:c1:e4:07:6e:9f:cf:90:8a:80:9c:a6:ef:ee:1e:
e1:18:e4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 13:08:04 2026 by rpki-client