Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: /Yfn23cKKj88GehIyu1rtzohRnQRbrBg9zBI3xKMkJE=
Subject key identifier: D9:B2:11:84:13:BB:3E:C3:75:A0:FA:A4:FE:6B:C5:1E:CC:B5:92:78
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 019F93240432A63F0DD728B81F308A944421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 10D4
Signing time: Fri 24 Jul 2026 08:00:38 +0000
Manifest this update: Fri 24 Jul 2026 08:00:38 +0000
Manifest next update: Sat 25 Jul 2026 08:00:38 +0000
Files and hashes: 1: _z2uZVdWVofMNDXIfpAr7x8K_Pw.roa (hash: moGqRZrZjmmem4RcH2GHZPdoIwD9Iav/z8dOsylXWfw=)
2: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: Flkl6Vy8PXIfuG4MMFo7OvAcAWpg25VlwRouk55x8Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:04:32:a6:3f:0d:d7:28:b8:1f:30:8a:94:44:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Jul 24 08:00:38 2026 GMT
Not After : Jul 25 08:00:38 2026 GMT
Subject: CN=d9b2118413bb3ec375a0faa4fe6bc51eccb59278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:7a:75:b6:28:1f:f3:1e:9a:a4:a4:e5:78:
c0:48:14:29:f4:3f:79:64:3e:17:91:07:0e:e8:6a:
2b:81:b9:80:88:b4:a1:9e:cc:73:12:1d:c0:70:99:
93:3e:f0:c5:6a:d5:02:a6:6c:d7:7d:36:bc:4d:9f:
93:ba:0e:86:91:c5:8e:e8:bd:b4:2a:06:7d:2e:b1:
7a:51:f9:f8:3c:e1:68:68:e2:98:72:4d:1f:0e:af:
bc:21:51:8c:40:b1:21:6b:04:4b:1b:cf:49:b4:a7:
2a:40:24:84:79:54:cb:7b:ec:17:b4:73:54:66:e8:
18:5b:a1:2c:7c:7b:9f:1e:b1:50:66:a8:50:ed:ab:
a8:3f:07:1a:f8:0e:e6:3f:11:5a:a2:dc:53:93:4e:
8b:8f:52:24:ea:d8:16:0a:10:e0:fb:91:bd:b9:1f:
6d:a7:c9:6c:05:d2:7b:5b:4e:00:16:06:6c:a3:cd:
57:a5:ef:67:8a:97:00:c1:c8:a5:12:c7:12:a1:27:
db:5a:ae:08:48:22:2d:c8:5a:37:54:ed:d2:a0:7a:
92:dd:d3:50:a9:0d:a4:ff:68:66:45:3d:44:bb:34:
92:a8:d3:fb:c2:5f:10:4d:18:bb:19:d9:df:c6:42:
6e:66:e9:23:74:81:e0:f6:a1:77:e2:e9:d5:1c:e3:
ff:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B2:11:84:13:BB:3E:C3:75:A0:FA:A4:FE:6B:C5:1E:CC:B5:92:78
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ec:14:d7:5e:b0:88:71:48:f8:4d:e4:78:17:9e:05:c6:27:
c8:96:e4:5b:cb:2e:0a:c9:4f:65:ea:1c:5a:1c:d5:43:2b:f3:
94:96:53:96:ee:9a:22:1a:ad:d6:95:a8:1a:28:3b:d9:e7:a0:
cf:85:fd:0b:23:ce:53:53:4e:85:36:bb:67:33:2b:8c:71:ff:
33:d2:ed:ef:6d:90:b3:fe:e5:43:1b:f0:58:43:3e:8a:f7:dd:
b7:02:3d:21:50:b9:35:fc:44:52:35:7f:3b:c6:ab:b5:5d:03:
e7:9c:74:9f:a9:05:3d:86:c0:0e:d1:76:8b:ae:61:44:93:da:
81:b3:e3:80:44:8c:67:7b:af:cc:e6:17:e1:06:7c:59:7c:fd:
d3:fa:fd:f0:07:f5:17:94:cb:67:2a:e1:92:ba:48:3b:eb:2d:
71:72:5e:6d:ac:31:18:90:ae:f2:0a:31:99:26:8d:4c:64:4b:
2e:77:a8:18:8f:b3:17:39:5d:dc:e1:65:d4:f3:4c:f5:22:80:
db:e6:4b:e1:95:74:72:46:2b:d8:1d:4c:52:dc:fb:2f:47:12:
8c:e5:32:83:ed:6d:f7:9b:af:fd:4e:65:73:a0:c9:db:40:cd:
ac:e3:f2:68:74:1a:32:98:40:80:e8:63:53:3c:b3:c5:a9:2b:
de:15:8c:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJAQypj8N1yi4HzCKlEQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZWU3ZWQ0YTZhOTEwNTRlNmJjMjQ5ODY5M2ZlMGMyZjg2
MjEwMWQwHhcNMjYwNzI0MDgwMDM4WhcNMjYwNzI1MDgwMDM4WjAzMTEwLwYDVQQD
EyhkOWIyMTE4NDEzYmIzZWMzNzVhMGZhYTRmZTZiYzUxZWNjYjU5Mjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGt6dbYoH/MemqSk5XjASBQp9D95
ZD4XkQcO6GorgbmAiLShnsxzEh3AcJmTPvDFatUCpmzXfTa8TZ+Tug6GkcWO6L20
KgZ9LrF6Ufn4POFoaOKYck0fDq+8IVGMQLEhawRLG89JtKcqQCSEeVTLe+wXtHNU
ZugYW6EsfHufHrFQZqhQ7auoPwca+A7mPxFaotxTk06Lj1Ik6tgWChDg+5G9uR9t
p8lsBdJ7W04AFgZso81Xpe9nipcAwcilEscSoSfbWq4ISCItyFo3VO3SoHqS3dNQ
qQ2k/2hmRT1EuzSSqNP7wl8QTRi7GdnfxkJuZukjdIHg9qF34unVHOP/2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmyEYQTuz7DdaD6pP5rxR7MtZJ4MB8GA1UdIwQY
MBaAFHHuftSmqRBU5rwkmGk/4ML4YhAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83MzhlZGItZDlmZi00YWY1LTgzNDEt
ZmM1Y2M2NGRiNzQ5LzEvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83MzhlZGItZDlmZi00YWY1LTgzNDEtZmM1Y2M2NGRiNzQ5
LzEvY2U1LTFLYXBFRlRtdkNTWWFUX2d3dmhpRUIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlewU116w
iHFI+E3keBeeBcYnyJbkW8suCslPZeocWhzVQyvzlJZTlu6aIhqt1pWoGig72eeg
z4X9CyPOU1NOhTa7ZzMrjHH/M9Lt722Qs/7lQxvwWEM+ivfdtwI9IVC5NfxEUjV/
O8artV0D55x0n6kFPYbADtF2i65hRJPagbPjgESMZ3uvzOYX4QZ8WXz90/r98Af1
F5TLZyrhkrpIO+stcXJebawxGJCu8goxmSaNTGRLLneoGI+zFzld3OFl1PNM9SKA
2+ZL4ZV0ckYr2B1MUtz7L0cSjOUyg+1t95uv/U5lc6DJ20DNrOPyaHQaMphAgOhj
Uzyzxakr3hWMqA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:43 2026 by rpki-client