Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: 7wuVjxw5hMpOXfjyNBgw4wP9etjgfd9BlRaUDVedqok=
Subject key identifier: A8:55:1E:0A:03:B7:EF:9A:47:4C:14:3D:16:C5:C1:7C:3D:BC:71:02
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 019CA9B3AAFBAE7A4D2B03C4BDD3D2217686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 0F52
Signing time: Sun 01 Mar 2026 14:00:49 +0000
Manifest this update: Sun 01 Mar 2026 14:00:49 +0000
Manifest next update: Mon 02 Mar 2026 14:00:49 +0000
Files and hashes: 1: _z2uZVdWVofMNDXIfpAr7x8K_Pw.roa (hash: moGqRZrZjmmem4RcH2GHZPdoIwD9Iav/z8dOsylXWfw=)
2: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: 44BqXVdWJmYilWcP6K9S10g8JmgPip6T/5vYoXGDy8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:aa:fb:ae:7a:4d:2b:03:c4:bd:d3:d2:21:76:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Mar 1 14:00:49 2026 GMT
Not After : Mar 2 14:00:49 2026 GMT
Subject: CN=a8551e0a03b7ef9a474c143d16c5c17c3dbc7102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:39:dd:27:f5:36:d4:59:87:dc:e3:f8:2c:20:
ae:71:ba:df:24:f1:5d:c2:8b:b5:2a:af:5c:a5:bc:
45:a5:5a:e3:f2:ee:0e:a7:e4:3c:8e:60:15:da:6a:
b9:48:49:f5:c5:7e:bc:de:09:ca:82:7c:e1:b0:5b:
fe:31:24:30:9a:d9:05:4a:9c:9f:e4:e9:ad:00:6f:
2e:5a:af:fc:4c:b7:d0:17:ef:c3:20:6c:d8:00:96:
ed:ab:ba:c1:5e:ce:e0:47:01:57:a0:6f:20:7f:b7:
9f:71:0f:4d:e9:a6:7d:7c:fc:9c:16:59:7d:cd:3f:
3f:1b:da:79:b2:43:a1:fa:97:89:30:04:a8:0d:69:
e4:8f:d1:3b:c9:fb:2a:ab:a0:32:5f:8d:ee:32:01:
5c:5b:6c:69:2b:8f:85:29:a7:56:5f:df:95:b4:fd:
37:10:bc:b1:b4:5b:b6:5c:f3:fb:96:fd:0b:15:92:
04:c9:87:ff:6b:40:65:2e:51:df:99:a9:cb:06:8a:
9b:f3:41:9e:f3:65:9a:5f:a8:d6:6d:78:c9:49:5d:
56:a8:cb:27:f2:0b:d8:30:93:40:20:bc:04:4c:e0:
d2:99:d6:48:de:e2:7a:cf:68:21:77:4c:3c:1e:ae:
47:82:1b:94:d9:32:da:bc:75:18:8f:3d:0b:7b:c2:
c9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:55:1E:0A:03:B7:EF:9A:47:4C:14:3D:16:C5:C1:7C:3D:BC:71:02
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4e:42:fc:9f:d2:6b:71:ef:22:31:2a:14:80:ff:87:88:c8:
b3:53:da:be:b7:1d:55:f9:87:98:63:3b:03:b3:ec:a5:6f:0f:
41:b0:5c:30:6a:4d:35:ce:ea:2f:9f:56:a1:29:ea:39:f3:31:
67:64:11:22:22:84:2d:e2:fe:14:a5:69:c7:93:88:0d:ec:f9:
a4:b9:f9:4b:d1:57:4d:cd:7b:90:6d:d5:c1:fc:92:4d:36:86:
1d:04:c4:56:1b:6a:83:17:a0:74:5a:17:dc:59:be:bd:68:76:
dc:cd:9a:70:da:5d:65:13:c2:65:7d:8e:d0:c2:f1:81:9b:b1:
22:b5:0b:f6:3d:5d:45:aa:50:56:16:8d:a6:b7:f3:49:e5:ca:
6d:83:ce:93:73:9c:ed:dc:0f:8d:1d:06:1f:c2:9e:58:2b:64:
5a:f8:2c:5a:70:32:9b:c5:b4:45:b2:a7:db:1a:41:31:64:81:
12:02:58:c7:17:d7:f0:34:ca:46:1c:12:f5:ce:15:d8:3a:76:
d5:66:6a:99:cd:e9:f3:fe:89:ef:37:40:13:fe:41:c0:39:1e:
5c:1a:de:3d:01:16:97:1a:8d:59:9e:b5:51:08:6e:b3:a5:3d:
82:49:48:d3:1e:52:92:e4:63:71:c0:2b:22:ef:de:c4:b8:d1:
d3:21:e1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:19 2026 by rpki-client