
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft (raw, json)
Hash identifier: sQ/jQWbB2VWhfo+9SsIfBPpUI3nJJhp+xV5UPISfdFw=
Subject key identifier: 5A:83:91:7B:DA:58:6A:20:40:A3:F1:6F:63:06:7B:99:46:8E:96:A1
Authority key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Certificate issuer: /CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Certificate serial: 01A111F24A603D4A8AA1FD23CA21E8E16CF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
Manifest number: 0BD6
Signing time: Tue 06 Oct 2026 16:00:53 +0000
Manifest this update: Tue 06 Oct 2026 16:00:53 +0000
Manifest next update: Wed 07 Oct 2026 16:00:53 +0000
Files and hashes: 1: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl (hash: MKkSGJ0hqRAfi85NJnEIwIt4Bcb81bj+AsR253j6J/c=)
2: UyoOwt_mkkio7rcKttEYqMqc4tE.roa (hash: 3ZPFWtYV3D6s10XCwOHklQ6Iqj8jHJrAUWODxNNBQcY=)
3: u7wi03kSUsP8y2tILiBs4RyN014.roa (hash: pYeJLWg472+6gUx7OvkaeELMhWeboOiwVGtw7KA43sM=)
4: uaEkmuhb7WRqiclbUmM34EjbO5o.roa (hash: h2MPog8U0B3WrxFfdEojnmYSGAZiWQIlg+muWLvtr1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:f2:4a:60:3d:4a:8a:a1:fd:23:ca:21:e8:e1:6c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Validity
Not Before: Oct 6 16:00:53 2026 GMT
Not After : Oct 7 16:00:53 2026 GMT
Subject: CN=5a83917bda586a2040a3f16f63067b99468e96a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:48:33:b8:44:4b:8b:9c:ff:7e:f1:d8:a8:37:
94:15:a8:c0:ab:1c:45:a6:9d:25:fb:a6:df:0e:a2:
ae:67:c8:d8:76:34:fe:a7:d7:02:a5:78:4c:19:77:
b5:1b:df:00:b6:81:28:de:60:ef:f5:4a:a0:5f:5d:
10:5e:6a:07:73:1a:f2:bb:53:9b:a4:e0:88:27:f1:
75:33:98:92:da:b5:0d:27:d9:03:e8:ff:b9:62:4a:
a2:53:a6:2e:d5:d6:1b:d3:b1:f6:14:39:19:d0:bc:
de:54:a6:20:89:30:3d:8a:0e:8d:39:18:6a:35:be:
a3:39:b8:e4:13:51:74:6e:bd:f7:ec:bf:07:3a:16:
06:69:1b:1c:e8:fb:f6:d4:46:0b:5d:df:d0:eb:fa:
6b:b1:78:2d:40:da:e6:da:a7:bc:6e:ad:9e:fe:30:
9a:d1:5f:d0:6e:2b:82:50:4f:9b:43:51:03:b7:e8:
cb:99:24:38:61:78:7d:25:ea:af:ed:f1:e6:11:37:
43:4b:35:7c:5a:a7:15:b7:14:cd:f8:0f:a6:05:fa:
12:b7:7d:45:21:4e:ab:72:75:51:54:fd:ce:4d:53:
b5:e1:bd:3a:f4:29:c2:49:af:d4:c3:6d:5d:ba:6c:
bb:0a:a1:02:bb:8a:e4:54:e9:69:e9:ab:c3:97:3b:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:83:91:7B:DA:58:6A:20:40:A3:F1:6F:63:06:7B:99:46:8E:96:A1
X509v3 Authority Key Identifier:
keyid:09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:22:6f:c3:42:0c:a9:6f:43:71:a9:b0:4c:a1:be:07:75:e0:
23:17:af:e9:17:50:f5:c0:f1:15:b0:02:d0:b9:0c:4a:77:16:
41:77:f4:64:97:7e:19:10:b1:81:90:2b:df:74:72:9b:e7:de:
4c:7e:09:e8:3c:ab:ce:62:a2:b8:62:0b:f7:3e:b8:32:49:23:
71:2c:70:d0:82:ac:f8:91:d4:21:71:2a:13:4f:9e:bf:fd:25:
29:a9:46:f8:7d:62:25:0b:3e:7a:b6:ed:c7:69:ec:57:99:26:
ac:99:0e:f5:4c:68:e0:a6:a4:98:6c:f9:b8:80:3f:9b:65:b3:
6b:5a:a2:3f:6f:34:c4:2c:ce:0f:d5:8e:42:52:aa:38:16:ef:
b3:80:f8:f4:86:34:db:f8:93:62:61:af:7a:de:75:f4:7a:df:
23:4b:ee:28:06:d4:a5:2e:70:27:35:8f:8f:00:ca:f0:d5:26:
40:cd:fa:e8:56:12:ae:97:e9:4f:8c:05:0d:b6:d8:dc:93:1b:
40:88:b4:fd:7b:92:2d:20:90:37:d6:d1:fc:cf:14:e8:43:33:
89:af:57:fd:76:94:e1:74:b8:29:7e:27:ed:9c:af:cc:ca:b8:
17:87:c3:65:0c:62:42:25:47:e0:f9:3f:a5:0b:4e:fd:27:37:
9f:f6:e8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:57:36 2026 by rpki-client