Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: jAKDeHDknQFomiwyvCMAKyWmDeUi53Yb9bfhOK2GlQU=
Subject key identifier: 1F:42:47:37:D9:3E:BD:36:6D:2E:9E:AE:33:EF:F5:D1:D1:45:DA:5C
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 019FAA50E91FE8DCC30AFD61906BA9CF492E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 10E0
Signing time: Tue 28 Jul 2026 20:00:56 +0000
Manifest this update: Tue 28 Jul 2026 20:00:56 +0000
Manifest next update: Wed 29 Jul 2026 20:00:56 +0000
Files and hashes: 1: _z2uZVdWVofMNDXIfpAr7x8K_Pw.roa (hash: moGqRZrZjmmem4RcH2GHZPdoIwD9Iav/z8dOsylXWfw=)
2: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: i0ej+mf2SwbVR1mI73+MU9/3Ei0Xx9Azh32oN+UR3T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:e9:1f:e8:dc:c3:0a:fd:61:90:6b:a9:cf:49:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Jul 28 20:00:56 2026 GMT
Not After : Jul 29 20:00:56 2026 GMT
Subject: CN=1f424737d93ebd366d2e9eae33eff5d1d145da5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:de:68:ee:38:5e:cf:3f:ef:e4:be:a8:d6:ab:
a6:00:14:a9:a6:63:83:72:4e:0c:b8:6d:97:a2:b2:
db:c6:21:dc:ca:3b:70:84:16:9a:e3:83:95:7d:2d:
0b:33:b4:7e:ca:3b:95:3f:68:28:d6:5a:83:33:8e:
3c:e5:d4:7d:04:ae:89:99:d6:4a:06:6d:01:88:94:
f5:04:36:51:23:28:c5:b1:ca:dc:b0:00:19:f7:d6:
47:d8:a8:9a:c0:56:16:63:fa:bb:10:0e:69:9b:2c:
cf:05:75:ef:bb:06:1a:df:17:73:3e:cb:b0:61:3f:
0d:70:d8:1f:02:e3:43:ca:11:10:aa:8b:89:4c:70:
53:c0:35:db:ca:a7:fd:e0:6d:47:f3:95:6e:68:85:
cf:5f:ec:55:62:a4:d3:36:74:86:ed:46:04:b1:b6:
38:97:45:6f:66:cb:d8:b6:0a:4d:c9:48:98:11:b6:
22:4a:50:a8:b8:04:a8:1f:fb:eb:6d:40:35:80:2d:
ff:5d:46:26:32:05:fb:c1:49:3c:6d:59:c7:4b:f7:
3a:04:0e:1e:fc:a6:d4:c7:d4:d9:45:b9:1a:da:84:
b6:04:ec:75:44:c6:3e:84:89:99:e1:4d:eb:d2:1c:
72:4f:0f:7d:c5:f6:ae:27:db:1a:a8:e3:46:1e:9e:
26:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:42:47:37:D9:3E:BD:36:6D:2E:9E:AE:33:EF:F5:D1:D1:45:DA:5C
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:5f:a7:83:b9:fd:a4:c4:ee:15:26:ef:86:4e:d5:ed:96:74:
4b:0a:25:7c:8e:e5:71:70:4b:9c:9b:54:93:10:32:b4:b8:08:
d1:ac:d5:dd:d2:45:e5:1e:25:29:2e:2e:11:68:07:85:48:77:
87:a1:b9:23:10:b1:09:ac:91:b1:72:f4:4d:e7:0b:23:ab:f0:
1b:c5:64:7f:1f:1a:2c:76:6c:e8:63:13:2e:5c:3c:67:89:2e:
01:c8:33:cb:97:80:7e:0a:1d:12:fd:1a:f1:13:41:68:e9:e5:
67:a1:8b:36:2b:c2:2f:9e:c6:7f:87:b3:15:5a:4f:8c:ca:c0:
2c:17:b0:ec:ef:fa:a1:d7:90:0a:0a:b8:98:bf:80:34:c3:62:
8f:c3:65:7b:26:15:60:f9:bf:77:04:75:d9:7d:c2:c1:43:ff:
9d:a4:5c:60:ce:6c:fe:95:71:72:b0:3c:94:b4:13:0f:48:7a:
05:ab:ea:11:9d:53:10:fb:2e:ab:13:29:ac:b6:f4:2d:81:2a:
4e:5d:12:9a:76:c0:51:3e:fd:75:b0:ba:9e:53:5f:36:5d:66:
aa:9c:97:44:2e:60:fa:81:b6:09:0e:b9:98:74:fc:3c:9c:dc:
03:47:aa:28:94:12:2c:04:40:a8:56:a1:ad:3a:f2:66:e8:78:
3a:23:21:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:54:39 2026 by rpki-client