Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: lwEms/oGsFR1dXhpkmVKCi/gFALa9bIm2ERqUM2HGpY=
Subject key identifier: F8:84:EB:65:9E:50:8D:A4:B7:03:82:D4:49:E2:35:F2:14:A8:A2:00
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 019D992AEF361C423D473C21CC962691C4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 0FCE
Signing time: Fri 17 Apr 2026 02:00:20 +0000
Manifest this update: Fri 17 Apr 2026 02:00:20 +0000
Manifest next update: Sat 18 Apr 2026 02:00:20 +0000
Files and hashes: 1: _z2uZVdWVofMNDXIfpAr7x8K_Pw.roa (hash: moGqRZrZjmmem4RcH2GHZPdoIwD9Iav/z8dOsylXWfw=)
2: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: H9yoee93gEflYZemjG4rHVpyElzcjOS31Y2a38aiVnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:ef:36:1c:42:3d:47:3c:21:cc:96:26:91:c4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Apr 17 02:00:20 2026 GMT
Not After : Apr 18 02:00:20 2026 GMT
Subject: CN=f884eb659e508da4b70382d449e235f214a8a200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:37:92:da:4c:74:e9:94:fd:fd:0e:03:0c:9e:
e8:ea:ea:f0:d3:91:44:11:a7:07:8e:9a:63:8a:58:
a5:cb:88:c6:2d:92:41:49:33:e3:d7:a2:4b:f3:d1:
95:10:55:97:6a:a1:7c:de:ba:22:a3:7c:77:35:b5:
6b:6d:da:9b:d8:90:67:82:78:1d:bb:7e:27:84:45:
16:be:e1:bf:95:1d:6a:23:c3:a1:da:26:38:61:02:
f5:5d:d4:9f:76:ab:74:d8:43:30:47:4e:3d:0f:c7:
df:83:94:1f:78:b3:8d:6f:5b:37:6a:6b:5c:32:fe:
b3:62:25:44:5e:67:52:82:14:52:59:3a:67:26:f4:
3b:ff:34:57:c2:17:8f:6d:00:20:82:1a:3d:07:a4:
51:71:2e:12:ad:68:b0:49:e1:12:99:ae:ce:72:c0:
2c:d6:3e:25:3f:9c:f7:81:52:07:db:df:e2:f1:cb:
73:86:12:79:3b:f5:d7:49:c0:c1:92:bb:1a:cd:01:
48:e8:74:d8:71:a9:3f:ae:55:e5:cc:32:58:b1:8a:
e3:ec:f0:85:43:6f:eb:08:aa:d5:77:01:cb:de:63:
7d:11:76:cc:45:f8:4b:1b:3b:15:64:cb:50:15:f1:
3e:6c:65:f9:ed:55:41:21:fb:50:cc:3e:5c:89:19:
39:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:84:EB:65:9E:50:8D:A4:B7:03:82:D4:49:E2:35:F2:14:A8:A2:00
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2f:d7:79:5e:40:59:3e:c7:c8:8d:85:f6:3c:fc:24:cb:9c:
a2:9e:81:54:9e:ca:cb:43:3c:1a:55:5e:1b:90:57:0d:49:7b:
d9:8b:53:d2:a8:f7:24:86:cb:ff:73:8c:b9:59:98:15:82:7c:
f0:24:cb:fa:7e:a2:18:2e:d1:c3:92:3f:02:2e:90:83:f5:15:
5f:e9:52:c7:26:71:14:47:73:77:fb:5e:44:9d:10:ec:e1:7f:
e3:70:35:d3:ed:97:fe:24:93:59:5d:81:e0:8e:03:36:3e:2d:
61:ec:94:4e:88:8a:9f:19:21:44:43:66:1a:7d:8a:b3:5e:d9:
e5:6f:c0:24:1c:6b:af:b3:c9:39:6e:3d:11:f0:97:d6:bf:3b:
17:78:92:0b:9d:60:5a:85:30:28:06:63:c6:10:1c:98:29:0a:
ce:d1:5a:6e:14:e2:7e:d6:71:c0:42:97:57:cb:3e:2d:42:a8:
a8:4f:17:12:cb:6b:bd:24:2d:f7:5d:73:07:1b:37:e9:ad:d4:
11:e8:25:c1:5e:14:a3:f3:e5:cb:15:3c:53:6a:96:39:72:08:
e1:b3:fe:9e:3f:cf:46:ae:b4:6c:d3:63:5f:34:a2:86:bd:3a:
ea:e8:df:5b:45:68:57:66:72:6e:94:5a:6c:80:2b:bb:9c:c5:
97:fd:ec:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:16 2026 by rpki-client