Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
File: cegLwpz58rQKwwJOD3I126LVelQ.mft (raw, json)
Hash identifier: LIjiCYmd2DxCBEOWHwC6dJo7mCWeyq5Z42WHmNBGZbA=
Subject key identifier: FC:A6:01:2C:3E:22:D7:78:8D:CF:35:2E:B8:93:64:2F:A6:F0:E6:3A
Authority key identifier: 71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
Certificate issuer: /CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Certificate serial: 01A0F9EA2CF395B38EE314AF60505FF152AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
Manifest number: 09D0
Signing time: Fri 02 Oct 2026 00:01:08 +0000
Manifest this update: Fri 02 Oct 2026 00:01:08 +0000
Manifest next update: Sat 03 Oct 2026 00:01:08 +0000
Files and hashes: 1: 5yU150CYFgmc1HknqQyGIZoghLc.asa (hash: +sPV0wEE3/G/TLyCFBEC22Hxf7c2lJSk/W51oGGyXzc=)
2: cegLwpz58rQKwwJOD3I126LVelQ.crl (hash: iLxXHPI4l5MrYmMfPDKG8PxCNBjshRjievz0kNUTRVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:ea:2c:f3:95:b3:8e:e3:14:af:60:50:5f:f1:52:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Validity
Not Before: Oct 2 00:01:08 2026 GMT
Not After : Oct 3 00:01:08 2026 GMT
Subject: CN=fca6012c3e22d7788dcf352eb893642fa6f0e63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:56:91:20:d9:e1:84:ca:29:43:54:c2:48:
a9:a3:a6:ed:b2:29:b7:83:50:5e:19:98:aa:9b:7d:
d3:9f:60:d6:e7:b1:e9:1b:31:b0:02:7b:f4:9f:07:
dc:14:a7:51:ba:b3:88:6e:ea:03:ab:3b:0a:57:86:
cc:21:24:c1:fe:bd:72:e1:32:8d:e1:15:bb:6b:0b:
71:50:6d:31:f7:95:c0:c1:cc:98:b6:23:4b:64:55:
e6:72:c2:d7:b6:76:0e:c7:1b:7d:94:ad:1e:e8:85:
0b:be:56:58:d6:e1:c1:18:74:e0:82:a8:40:d9:60:
84:d7:c3:dc:cb:a4:fe:a9:10:22:2e:55:63:3b:34:
eb:41:57:4f:19:bf:c0:5f:9c:8d:fe:f5:8c:7a:c9:
4f:d8:2c:43:bf:dd:5f:54:48:e8:3e:2d:8c:54:20:
b2:61:0b:0b:0c:76:dd:9b:52:d2:5d:a2:6b:4f:ae:
28:ba:53:50:62:e5:62:43:c7:25:4a:a2:06:88:32:
47:df:35:50:f9:b1:80:7c:ba:2a:98:89:f5:6a:f5:
38:31:89:02:6d:c7:0f:15:e3:48:c7:a8:a0:d9:af:
e5:86:11:a1:c7:27:90:98:8a:53:da:d1:8a:8f:ab:
a1:4d:00:35:18:41:25:23:4a:96:c5:5b:b6:19:e9:
db:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A6:01:2C:3E:22:D7:78:8D:CF:35:2E:B8:93:64:2F:A6:F0:E6:3A
X509v3 Authority Key Identifier:
keyid:71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:64:9b:96:a2:27:35:df:b4:76:6e:2b:94:c8:1c:07:6f:6d:
e9:ff:3c:64:0c:80:6d:d0:d9:e8:9e:d5:23:38:bc:30:67:2e:
e3:47:01:42:83:1b:1f:02:15:f1:2b:dd:fd:81:27:60:fd:95:
13:00:e5:26:90:2b:2f:fc:5d:8c:96:41:00:89:af:74:3b:29:
6d:ab:b4:ef:11:be:fd:ad:a8:92:5f:92:2d:dc:23:01:ac:73:
06:0d:0b:3b:74:95:c6:41:9f:98:3c:9d:84:5e:49:4f:4b:b1:
e6:dc:1f:f0:e4:38:2b:2a:53:74:cc:20:6f:ae:6a:17:47:c5:
ff:75:26:cb:e4:6a:c0:10:d7:28:a7:4a:d5:4a:16:a3:91:13:
68:d2:90:39:97:20:fd:b6:fb:93:31:b9:1c:ef:04:a5:a4:92:
f0:cc:51:8a:ea:a5:62:59:4e:91:fa:cb:12:24:e4:26:3c:c1:
46:c8:a5:79:da:85:58:ea:e5:62:c8:b6:4e:77:58:c6:5d:62:
07:08:50:a0:a3:67:4d:e3:5e:8e:97:57:be:66:a1:e7:98:45:
17:2c:00:96:6b:d9:76:88:ac:96:12:7b:2f:fa:d6:da:96:d7:
80:90:7e:69:79:ac:94:ed:93:e5:5a:17:20:b0:ae:64:85:06:
ca:96:a0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 13:26:59 2026 by rpki-client