Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
File: ceWC839BZJjBi2YkjevM8iQavHY.mft (raw, json)
Hash identifier: Mk/2wXH7k/nzACl0LkYZru+UntREDJLAWiDfuGpAeco=
Subject key identifier: C5:70:83:E6:CB:C6:43:B1:10:3B:D2:54:07:1E:BD:01:26:C8:B2:6E
Authority key identifier: 71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
Certificate issuer: /CN=71e582f37f416498c18b66248debccf2241abc76
Certificate serial: 01A13D134EB4417BE2BB0552951DBAAE1A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
Manifest number: 0A40
Signing time: Thu 15 Oct 2026 01:00:37 +0000
Manifest this update: Thu 15 Oct 2026 01:00:37 +0000
Manifest next update: Fri 16 Oct 2026 01:00:37 +0000
Files and hashes: 1: 7IBa4M21L1weC-CB5rmV2ELdcjc.roa (hash: r3PNsAmqfmfHmKjnNC5k/puJxwcYNjtuxkNcsT/TBwM=)
2: ceWC839BZJjBi2YkjevM8iQavHY.crl (hash: OWIwxXnKUj/6HxKN+1OVfnrIFEozGYP+y0GhRr0MYjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:4e:b4:41:7b:e2:bb:05:52:95:1d:ba:ae:1a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e582f37f416498c18b66248debccf2241abc76
Validity
Not Before: Oct 15 01:00:37 2026 GMT
Not After : Oct 16 01:00:37 2026 GMT
Subject: CN=c57083e6cbc643b1103bd254071ebd0126c8b26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:54:a9:84:b9:2d:d8:89:e7:06:a7:ef:86:
1e:11:db:e5:0e:fd:46:47:1b:a9:f2:60:cc:21:33:
69:89:64:4d:65:05:93:f8:97:42:9b:3f:be:aa:4b:
c9:25:0a:72:6e:d4:f4:2c:1f:5a:ae:de:d1:c4:46:
f8:6a:f7:4f:57:dd:a5:8b:8f:ca:92:d7:c7:99:fa:
ac:4b:c9:4b:cc:5c:55:94:93:8c:0b:97:28:87:72:
2c:55:6a:11:89:c8:47:45:2e:21:9c:e5:6e:61:38:
8f:5b:0c:0f:74:fb:4e:90:1a:4f:e9:81:d2:9d:ea:
bf:29:54:ec:f6:92:46:ba:7c:8a:78:2f:79:0d:f6:
09:87:1a:d6:ae:6c:ad:b2:2f:91:40:08:7a:98:65:
29:f4:22:6a:3a:8d:e1:33:2d:ad:33:32:60:00:4a:
36:2c:b8:e7:d1:25:9e:f5:b9:d3:5d:8a:6a:54:23:
7f:4b:00:5d:9e:94:82:6f:5c:06:be:3e:e9:b4:66:
01:cb:97:ac:37:4b:cb:da:1c:8c:b5:92:93:6f:05:
6a:09:de:6b:e4:4a:e8:4b:07:2a:52:e6:0f:a5:32:
1e:9e:6d:dd:fc:aa:ce:71:6d:8d:f4:22:05:33:f2:
35:14:66:4f:be:db:67:1b:88:62:c1:26:ef:62:f5:
ac:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:70:83:E6:CB:C6:43:B1:10:3B:D2:54:07:1E:BD:01:26:C8:B2:6E
X509v3 Authority Key Identifier:
keyid:71:E5:82:F3:7F:41:64:98:C1:8B:66:24:8D:EB:CC:F2:24:1A:BC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ceWC839BZJjBi2YkjevM8iQavHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/fd9ea0-8357-458b-b596-9f34f6716259/1/ceWC839BZJjBi2YkjevM8iQavHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:25:31:ad:9a:de:13:bf:0e:18:28:26:0e:61:0d:a8:81:e4:
63:7c:25:ff:d0:be:2a:5e:4d:a6:f6:78:08:07:ab:35:36:16:
b3:95:8a:7f:85:8e:15:17:aa:e5:e9:83:95:37:7f:1e:f9:8b:
87:d6:8b:11:ea:a1:d6:fd:2b:85:c6:0c:b2:ef:93:ef:05:42:
3c:f9:30:a3:e4:dd:4e:5f:8f:12:42:de:04:3c:06:ea:07:ba:
5e:6e:fc:2f:4c:b3:76:97:c2:86:42:31:f1:33:04:00:96:87:
fb:59:d1:a0:6e:2a:bc:98:b1:03:b9:0c:ac:05:ba:fd:4a:fa:
e9:c0:09:b8:b5:5b:d9:14:ac:13:be:fe:b9:a5:0d:0b:ae:e2:
9c:dd:e5:51:28:6e:68:21:2f:4b:69:e8:b0:cc:cd:f4:2d:e9:
3c:37:54:fe:29:0d:71:11:d1:7a:8a:c8:44:b8:9d:59:b6:23:
43:df:02:bc:ce:8c:d4:af:39:34:a6:ab:fe:37:e2:fa:84:6f:
1b:2f:ac:a1:de:0c:98:ec:08:21:76:44:a5:9b:89:e1:35:69:
cb:89:e6:f7:80:df:20:1f:93:47:d3:5f:99:8f:6c:40:c0:7b:
49:0d:cc:7f:06:a3:a3:1e:1e:26:e2:38:0b:6a:60:e1:2d:ac:
cc:d6:41:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:55:35 2026 by rpki-client