Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
File: ce5-1KapEFTmvCSYaT_gwvhiEB0.mft (raw, json)
Hash identifier: jJ9RqUm7W43sPH7r4udwNiBm1h1fiVij90MdORxBUoY=
Subject key identifier: 4F:13:9B:92:D9:24:C7:D1:4F:34:7F:95:0E:AB:65:22:67:91:31:F2
Authority key identifier: 71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
Certificate issuer: /CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Certificate serial: 019EC0A42A24A397F91E9D6341159E01ED5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
Manifest number: 1067
Signing time: Sat 13 Jun 2026 11:00:44 +0000
Manifest this update: Sat 13 Jun 2026 11:00:44 +0000
Manifest next update: Sun 14 Jun 2026 11:00:44 +0000
Files and hashes: 1: _z2uZVdWVofMNDXIfpAr7x8K_Pw.roa (hash: moGqRZrZjmmem4RcH2GHZPdoIwD9Iav/z8dOsylXWfw=)
2: ce5-1KapEFTmvCSYaT_gwvhiEB0.crl (hash: sAd6jTkRSW2HGqZzZHSHT2YWMNCNsJI+tO9FGt9c0uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:2a:24:a3:97:f9:1e:9d:63:41:15:9e:01:ed:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71ee7ed4a6a91054e6bc2498693fe0c2f862101d
Validity
Not Before: Jun 13 11:00:44 2026 GMT
Not After : Jun 14 11:00:44 2026 GMT
Subject: CN=4f139b92d924c7d14f347f950eab6522679131f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:03:b7:41:cd:4c:18:6c:60:35:f8:7a:8c:
45:c4:01:b8:b9:31:c3:44:21:ce:d9:c7:e8:fe:1b:
5f:73:6b:75:a8:92:08:8f:ef:fc:bb:86:13:61:91:
6e:69:83:8a:51:7a:6e:6a:21:82:e0:c0:74:2a:94:
03:3a:47:af:6e:4e:0f:2e:ea:b8:1f:2e:39:c6:44:
85:78:49:a3:af:11:7e:49:48:b4:b0:ee:6e:2a:db:
4c:21:2e:0b:18:5c:b5:61:8c:05:17:ec:00:ee:fc:
ad:2c:24:c8:7d:a9:42:46:70:72:9f:0b:a4:57:cc:
dd:96:e2:54:8d:a0:c0:52:df:c3:28:1f:48:8f:dc:
0b:6a:e7:65:3a:c2:18:cb:be:63:70:2d:20:6c:68:
a9:77:1c:9f:76:26:61:36:77:71:60:82:ed:5f:6c:
c9:0b:72:d1:8e:5b:7c:1a:8f:2c:8d:7e:dc:9c:9f:
0a:b8:1d:a1:26:90:48:9b:e2:fb:1a:e6:c2:23:f2:
73:a8:d4:90:8c:cb:da:59:bb:da:2d:7d:0f:d7:98:
cc:28:53:63:bd:5a:40:f6:56:53:cf:41:b5:82:15:
b7:44:e8:c7:b1:23:f1:be:be:c6:ce:1d:40:51:08:
c3:40:6f:73:33:ea:39:69:74:92:d0:04:35:56:d1:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:13:9B:92:D9:24:C7:D1:4F:34:7F:95:0E:AB:65:22:67:91:31:F2
X509v3 Authority Key Identifier:
keyid:71:EE:7E:D4:A6:A9:10:54:E6:BC:24:98:69:3F:E0:C2:F8:62:10:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce5-1KapEFTmvCSYaT_gwvhiEB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/738edb-d9ff-4af5-8341-fc5cc64db749/1/ce5-1KapEFTmvCSYaT_gwvhiEB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4a:ab:ed:25:8e:7d:9c:ec:84:f2:ca:d5:c9:73:90:7e:33:
7f:10:22:51:12:de:e8:09:f6:c0:46:5c:b1:c4:33:56:21:04:
44:53:53:e6:d9:3b:70:b4:c7:3b:3c:b0:cb:b0:b8:e0:b1:3a:
d4:73:97:b3:81:38:4b:5f:e8:56:3b:b3:8a:c8:d8:34:f8:62:
a9:2d:17:77:73:17:c0:dc:af:5b:28:e0:1e:5c:29:08:4f:05:
e9:ef:a6:26:73:5b:69:21:08:23:39:fe:62:f4:24:f3:ba:0d:
ec:e3:f3:d0:77:30:72:ea:e2:9b:38:20:41:d6:a7:85:08:42:
bf:6a:2b:79:ae:3e:60:a3:76:48:f7:83:45:1c:01:e4:18:cb:
0a:35:ab:92:a8:3d:25:ca:47:62:58:de:31:3c:b0:b2:3c:a1:
28:46:bb:71:2f:7d:45:f2:e8:19:73:61:d1:ab:17:55:1a:b5:
42:3b:78:c2:58:09:f0:8d:96:76:92:ee:27:93:0d:42:b3:94:
21:0a:a7:ee:92:a1:e7:cb:cc:7f:8c:72:24:92:32:08:2b:64:
f8:49:fa:5b:b6:10:77:c3:f2:0a:8b:2a:ad:bd:35:33:1a:27:
f9:d8:63:3e:e7:37:6c:35:f3:3d:7e:2f:45:e9:a6:5e:a7:11:
37:e1:83:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:59:07 2026 by rpki-client