Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
File: ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json)
Hash identifier: uEDt1IG7Pk4/EOCnlhZeYCcPHQMb1TT4tBXasdXTfSQ=
Subject key identifier: 73:8B:42:06:E6:8D:D9:CA:D7:E8:26:1C:93:30:C8:23:E0:DD:98:49
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 01A0E25000B1A771AAE261AD116272A4F40C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
Manifest number: 0A11
Signing time: Sun 27 Sep 2026 10:01:28 +0000
Manifest this update: Sun 27 Sep 2026 10:01:28 +0000
Manifest next update: Mon 28 Sep 2026 10:01:28 +0000
Files and hashes: 1: 7IBa4M21L1weC-CB5rmV2ELdcjc.roa (hash: r3PNsAmqfmfHmKjnNC5k/puJxwcYNjtuxkNcsT/TBwM=)
2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: SZeOn+obEG/IWGK6qSURSfUJZJiCCMbrcdb1CK9zB54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:50:00:b1:a7:71:aa:e2:61:ad:11:62:72:a4:f4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: Sep 27 10:01:28 2026 GMT
Not After : Sep 28 10:01:28 2026 GMT
Subject: CN=738b4206e68dd9cad7e8261c9330c823e0dd9849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a4:8a:4c:aa:ea:3f:7c:d6:de:b5:13:c1:99:
14:ce:27:6c:bf:0b:9d:5b:5f:5b:49:39:0c:72:ec:
88:52:d4:04:83:e9:48:08:1c:c2:c0:67:e6:73:b4:
00:a5:34:2b:f6:88:fa:40:18:a7:7b:9e:8d:9c:08:
32:36:1b:44:66:d7:59:21:ab:56:f5:98:13:de:a9:
24:16:fb:f8:89:0b:eb:95:fd:ef:a0:52:c6:55:95:
a8:49:d9:5d:db:d0:48:67:78:52:58:d3:23:02:d4:
20:74:45:dc:77:d5:0d:41:23:fb:54:ef:c5:55:f6:
66:92:46:7a:eb:23:ec:66:4e:99:86:08:b5:92:c1:
8e:24:a5:91:ba:3e:f8:b9:57:85:64:40:a4:a6:ca:
d2:b9:f0:53:f9:3a:47:c7:a4:c1:6a:bb:8f:4c:ac:
d8:53:c5:b0:9b:ca:e2:de:5b:f2:af:d2:22:2b:39:
2e:5e:f2:36:b2:97:9b:52:29:2a:29:bc:ef:d6:9c:
54:d5:98:1d:16:9d:7e:9f:82:90:1d:00:7d:2b:58:
f6:ce:bb:c8:24:d5:60:73:bc:8a:47:cc:b3:f3:3b:
c8:e6:2b:f3:a7:75:d8:5b:4b:94:d4:e6:14:03:00:
6c:24:89:36:ee:07:fd:5e:a7:8a:c7:f1:5c:ac:15:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8B:42:06:E6:8D:D9:CA:D7:E8:26:1C:93:30:C8:23:E0:DD:98:49
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ff:56:f4:f9:39:21:c3:f1:13:21:2f:77:90:e5:ac:19:d3:
1b:5c:b2:b8:9c:2b:bc:dd:05:08:3a:a4:b2:2a:bb:e7:79:07:
d4:30:0e:6f:8a:7b:2a:4b:64:de:7b:73:2d:c4:55:da:33:78:
21:4e:e4:f7:77:ab:9b:9f:70:d9:5b:ef:6a:2f:ea:7b:d6:3d:
db:9b:bb:55:ba:6d:cd:dd:3b:4e:c4:1a:7e:ae:18:a7:47:60:
29:8b:30:91:29:3c:94:64:2c:32:0b:db:75:ab:03:71:62:d1:
17:49:8f:fd:fc:3e:af:e7:4a:0c:26:c2:93:63:58:6e:83:90:
a8:53:f0:53:bc:de:f8:85:62:96:b3:81:ef:9c:04:63:c8:a4:
b8:b1:3d:c6:26:17:77:b6:01:38:ef:56:08:2c:4c:dc:db:23:
6e:b6:d0:0e:7e:b8:e0:bc:24:fd:b2:73:af:8e:88:91:0b:3b:
67:bd:f6:c5:c4:04:e0:54:f4:1a:cb:22:37:24:b0:01:10:1d:
3e:25:37:cf:d8:59:87:70:70:cb:a9:e7:68:4b:e3:b1:8f:00:
87:3a:36:4d:eb:62:f0:e5:d7:9e:63:99:68:b1:98:7e:8f:93:
8e:42:6e:21:5f:29:15:32:be:26:ca:c5:7e:e5:7b:65:30:5f:
0a:39:f3:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDiUACxp3Gq4mGtEWJypPQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZTU4MmYzN2Y0MTY0OThjMThiNjYyNDhkZWJjY2YyMjQx
YWJjNzYwHhcNMjYwOTI3MTAwMTI4WhcNMjYwOTI4MTAwMTI4WjAzMTEwLwYDVQQD
Eyg3MzhiNDIwNmU2OGRkOWNhZDdlODI2MWM5MzMwYzgyM2UwZGQ5ODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qSKTKrqP3zW3rUTwZkUzidsvwud
W19bSTkMcuyIUtQEg+lICBzCwGfmc7QApTQr9oj6QBine56NnAgyNhtEZtdZIatW
9ZgT3qkkFvv4iQvrlf3voFLGVZWoSdld29BIZ3hSWNMjAtQgdEXcd9UNQSP7VO/F
VfZmkkZ66yPsZk6Zhgi1ksGOJKWRuj74uVeFZECkpsrSufBT+TpHx6TBaruPTKzY
U8Wwm8ri3lvyr9IiKzkuXvI2spebUikqKbzv1pxU1ZgdFp1+n4KQHQB9K1j2zrvI
JNVgc7yKR8yz8zvI5ivzp3XYW0uU1OYUAwBsJIk27gf9XqeKx/FcrBWQ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOLQgbmjdnK1+gmHJMwyCPg3ZhJMB8GA1UdIwQY
MBaAFHHlgvN/QWSYwYtmJI3rzPIkGrx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2VXQzgzOUJaSmpCaTJZa2pldk04aVFhdkhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9mZDllYTAtODM1Ny00NThiLWI1OTYt
OWYzNGY2NzE2MjU5LzEvY2VXQzgzOUJaSmpCaTJZa2pldk04aVFhdkhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9mZDllYTAtODM1Ny00NThiLWI1OTYtOWYzNGY2NzE2MjU5
LzEvY2VXQzgzOUJaSmpCaTJZa2pldk04aVFhdkhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv/9W9Pk5
IcPxEyEvd5DlrBnTG1yyuJwrvN0FCDqksiq753kH1DAOb4p7Kktk3ntzLcRV2jN4
IU7k93erm59w2Vvvai/qe9Y925u7Vbptzd07TsQafq4Yp0dgKYswkSk8lGQsMgvb
dasDcWLRF0mP/fw+r+dKDCbCk2NYboOQqFPwU7ze+IVilrOB75wEY8ikuLE9xiYX
d7YBOO9WCCxM3NsjbrbQDn644Lwk/bJzr46IkQs7Z732xcQE4FT0GssiNySwARAd
PiU3z9hZh3Bwy6nnaEvjsY8Ahzo2Teti8OXXnmOZaLGYfo+TjkJuIV8pFTK+JsrF
fuV7ZTBfCjnzDQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 14:07:07 2026 by rpki-client