Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: aHrsQJCMoO/AJ26IHw0JjaJQIjuLnCvxefqLdRNs6+c=
Subject key identifier: 70:20:11:C0:C8:53:CF:69:D5:B0:E0:A3:0F:EA:E6:61:A3:0D:EF:B9
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 01A0CBFE46E2B3DA24E2E45C3A949A40C472
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 1176
Signing time: Wed 23 Sep 2026 02:00:34 +0000
Manifest this update: Wed 23 Sep 2026 02:00:34 +0000
Manifest next update: Thu 24 Sep 2026 02:00:34 +0000
Files and hashes: 1: _z2uZVdWVofMNDXIfpAr7x8K_Pw.roa (hash: moGqRZrZjmmem4RcH2GHZPdoIwD9Iav/z8dOsylXWfw=)
2: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: Ckc3kLW4jNdvXrUfB3rIjcITySBjd9pQ9DS/NZsVpis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:46:e2:b3:da:24:e2:e4:5c:3a:94:9a:40:c4:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Sep 23 02:00:34 2026 GMT
Not After : Sep 24 02:00:34 2026 GMT
Subject: CN=702011c0c853cf69d5b0e0a30feae661a30defb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ac:ef:86:f7:3d:c2:d7:75:fb:0c:47:c5:16:
ca:cd:15:16:38:a4:04:31:44:ce:44:12:19:e5:f5:
9b:a2:07:e8:65:97:69:6e:4e:11:bd:32:bd:25:f2:
e9:26:2e:bc:91:1f:f1:77:8f:74:c1:d7:f6:7c:d7:
3a:96:d5:b8:fd:7e:db:81:9a:c0:a0:2a:e9:25:5b:
e5:7c:74:cb:b9:7a:41:d1:6d:e1:ac:aa:11:3a:3e:
c5:6b:94:ea:8e:64:ae:3f:70:83:d3:00:eb:55:15:
c5:70:40:8d:cb:fe:ec:f5:78:03:69:c2:ae:8a:b8:
ca:88:32:e9:7e:48:c8:f6:9d:02:ce:94:70:7c:eb:
e1:0b:53:f4:92:e6:03:2f:c7:a2:7f:fd:c9:80:d3:
21:27:e1:09:76:6a:72:19:c5:8f:8c:2f:02:32:59:
8c:25:a8:bf:81:15:04:01:14:f2:a4:2e:67:5d:8a:
3a:e9:db:7b:22:6d:31:ff:8f:f4:37:c2:bd:22:7e:
ba:07:e1:ce:fb:9b:7f:0f:1f:50:46:2b:01:c5:52:
11:f5:3b:81:ef:00:df:9b:8b:1f:81:ad:1c:45:93:
6c:33:37:01:db:ad:b0:89:f2:a0:86:f3:be:b9:0c:
a4:b3:73:bf:54:0a:34:d7:d5:79:af:e7:51:4f:6c:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:20:11:C0:C8:53:CF:69:D5:B0:E0:A3:0F:EA:E6:61:A3:0D:EF:B9
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:0d:5f:34:4a:25:55:90:77:2a:ce:6e:fe:cf:30:d0:ee:48:
4a:cc:ac:55:7f:8c:9d:4e:05:c7:19:d1:ce:50:3d:62:58:d8:
c5:b8:d4:83:c9:49:54:e6:f2:4e:62:d3:56:87:47:f0:be:87:
fb:32:25:9b:7d:87:46:02:8a:af:46:60:d6:79:18:57:35:a2:
cd:67:f0:be:3e:01:e9:29:2f:13:66:5b:3f:3a:d6:64:a6:15:
32:d2:46:9a:de:f7:0f:1e:4e:b3:eb:18:79:8c:b7:b7:b5:00:
3d:bf:6a:3a:49:9e:ac:5a:18:41:09:47:b4:c2:24:88:d2:7d:
cc:ec:2d:53:a7:b3:68:ea:e1:36:d0:c4:d7:b9:8e:26:34:cd:
04:17:c5:25:20:0b:cf:01:d9:2e:32:b5:14:db:eb:50:8a:88:
29:ad:d4:75:fc:3f:f5:2c:e0:07:5c:77:dc:03:a9:ba:82:2f:
9f:66:54:2a:5d:2d:06:38:af:1d:2b:4c:75:24:ce:d7:60:80:
cb:17:36:4b:4f:b5:88:cd:37:6e:68:e4:bb:de:b0:ab:f7:65:
8e:0f:c8:18:dd:e2:e5:60:b8:8b:39:57:76:31:16:d8:46:13:
74:48:d3:15:3c:2b:53:e0:1b:ed:87:96:4f:14:7c:f7:46:14:
86:7d:dd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:57:53 2026 by rpki-client