Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
File: ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json)
Hash identifier: vBJQXNWoqzkK4VVssSqOnvjbGyopXCPXAxtqU+JB0dQ=
Subject key identifier: 0D:3D:CA:0C:0B:B4:4E:32:B7:3B:A3:F9:34:09:C8:70:84:02:4D:5B
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 01A0CB22D410B2B87C9DEDE3212EDAFA80C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
Manifest number: 0A05
Signing time: Tue 22 Sep 2026 22:00:52 +0000
Manifest this update: Tue 22 Sep 2026 22:00:52 +0000
Manifest next update: Wed 23 Sep 2026 22:00:52 +0000
Files and hashes: 1: 7IBa4M21L1weC-CB5rmV2ELdcjc.roa (hash: r3PNsAmqfmfHmKjnNC5k/puJxwcYNjtuxkNcsT/TBwM=)
2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: Q6BFIHBAz+OjYXw1ej+KDyPOzsTYSPoyM/QK9eobWWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:d4:10:b2:b8:7c:9d:ed:e3:21:2e:da:fa:80:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: Sep 22 22:00:52 2026 GMT
Not After : Sep 23 22:00:52 2026 GMT
Subject: CN=0d3dca0c0bb44e32b73ba3f93409c87084024d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:61:92:ed:9a:ab:39:08:ed:df:29:19:a9:74:
84:bb:20:79:95:7d:ec:1c:08:dc:fe:0b:5a:87:e1:
da:aa:4b:e5:44:b9:31:d8:08:1f:a1:36:ac:17:97:
ce:00:b0:fc:d4:8d:77:0e:1e:b3:22:48:28:06:40:
2c:fb:aa:68:7e:7f:28:3c:ff:33:30:52:74:c5:68:
79:79:50:2a:f8:80:6a:52:52:f2:3b:3d:30:9e:71:
d1:de:a1:20:e3:41:c7:ef:3b:ce:87:ba:d4:0e:32:
da:9f:c0:3e:9f:a9:08:a2:ae:0e:92:34:5b:7e:7b:
dc:a0:dc:c4:80:0b:50:62:76:c1:4b:49:a4:6a:ae:
19:df:df:8e:8d:4c:35:90:75:24:62:5e:62:21:22:
8e:c1:55:0b:8f:b5:56:a2:4f:ac:c8:8d:fa:9b:7f:
8a:8c:16:22:a1:cd:47:52:c3:cb:ee:23:5c:c4:36:
0d:7c:f3:7f:b1:a2:28:c0:3c:e9:b1:51:bd:60:e7:
7e:cd:61:bd:76:9c:0e:11:14:ce:06:a1:6a:5e:dc:
14:b2:75:12:94:d7:ab:ca:07:df:fc:07:59:bc:86:
4a:86:ae:7f:d9:da:90:21:68:64:02:79:02:87:7a:
58:45:10:1c:cb:69:a2:7a:77:84:e4:09:d7:8c:a0:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3D:CA:0C:0B:B4:4E:32:B7:3B:A3:F9:34:09:C8:70:84:02:4D:5B
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:29:20:f8:9f:49:65:6d:02:fb:88:ee:30:13:e1:37:6d:32:
e9:74:2c:c5:95:f1:be:50:f1:f9:c6:f5:a5:c6:37:2a:44:25:
7e:15:e5:86:e9:39:b9:7d:0e:43:04:bf:77:11:50:88:3a:0b:
41:53:23:b5:fe:f1:7d:8f:f9:e1:d7:a5:c6:b0:5b:79:f5:84:
12:15:ad:3c:c5:6a:48:51:44:81:4c:bb:a6:90:a1:d7:a6:06:
7a:07:5a:6f:90:e8:2d:e4:d7:7d:0e:93:14:95:06:85:01:03:
9d:d0:dc:ff:ae:01:2b:0d:22:fb:d5:43:69:f4:ea:5f:e9:f3:
af:4b:0e:ea:a1:2d:77:cf:f8:bf:57:6f:d5:f5:df:99:c5:5f:
52:cd:75:14:a5:b0:95:7a:67:14:fb:58:ff:3e:e3:46:a1:ec:
ad:e5:96:fa:7a:f2:32:3f:1e:b2:6d:a0:06:99:1b:9c:a2:9f:
28:e6:1a:d9:3b:0c:9c:f9:70:41:f9:5b:9f:d8:db:7e:2b:8c:
a7:1a:b1:51:2e:0d:e2:f8:ef:fc:8c:b3:0a:79:a5:4c:14:a6:
45:ce:65:73:57:49:08:b3:8b:67:15:de:e7:a8:ae:7d:b7:9f:
51:57:30:4f:f7:5b:33:71:72:6c:0c:55:ab:6c:55:b6:65:28:
c7:95:7b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:59:26 2026 by rpki-client