Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
File: CegPaQPGpVbSifWLpes41VyzAHE.mft (raw, json)
Hash identifier: m+lXxwdYMBnU7soto7xJfqdDmLPtAG12GPsddLqHnng=
Subject key identifier: 19:A7:44:AA:BE:10:4D:ED:04:DA:C1:92:BB:A4:06:BC:60:CA:DD:B2
Authority key identifier: 09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
Certificate issuer: /CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Certificate serial: 019D37F73B5B0C8EE02DC3391819389FEB46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
Manifest number: 0258
Signing time: Sun 29 Mar 2026 05:00:42 +0000
Manifest this update: Sun 29 Mar 2026 05:00:42 +0000
Manifest next update: Mon 30 Mar 2026 05:00:42 +0000
Files and hashes: 1: CegPaQPGpVbSifWLpes41VyzAHE.crl (hash: VTv1zqst4QJsxnwiMMdqYRF4iFK3TmU/Im8fzXBEiF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:3b:5b:0c:8e:e0:2d:c3:39:18:19:38:9f:eb:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Validity
Not Before: Mar 29 05:00:42 2026 GMT
Not After : Mar 30 05:00:42 2026 GMT
Subject: CN=19a744aabe104ded04dac192bba406bc60caddb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cb:8b:48:9d:b3:65:4b:dc:a9:8c:82:ac:8f:
be:1f:27:07:b5:59:71:ba:0d:bc:1b:53:1f:9a:96:
80:e4:74:1a:de:b7:42:81:42:4c:fa:92:d0:1c:23:
f7:78:77:77:f3:96:67:79:7d:28:61:8f:82:d6:f3:
82:91:e5:8c:98:de:67:13:4f:c0:da:cc:e8:cf:95:
11:20:54:28:dc:48:5b:cc:dc:d4:75:27:55:44:ea:
57:fa:72:98:16:ac:c8:5e:06:b5:77:5d:f9:bf:b7:
6b:de:d4:7a:3f:35:40:c8:d5:ea:1c:75:83:5c:49:
a5:98:0d:95:a2:01:df:cb:24:b4:d0:60:3b:ca:b3:
56:7f:d2:4d:a0:e3:7c:0b:ad:5a:9c:e3:f2:de:76:
2f:75:8f:28:bc:80:67:68:e1:42:68:c7:b0:80:e2:
72:6f:5e:d1:fa:3f:eb:6a:1c:fb:3c:45:98:00:2f:
db:e2:d4:0a:f2:c2:57:c9:56:e8:31:6d:1e:fd:9e:
f2:01:4f:22:9f:ba:fe:15:41:f1:2d:ec:ce:b0:4c:
ba:f1:fa:db:46:1f:40:64:4a:d4:78:e5:65:43:4b:
4d:38:8c:ea:f7:5f:ca:3d:9d:ce:d1:ea:9f:81:b5:
7b:af:24:9c:e7:5b:8e:ab:77:1e:f5:f0:9d:c9:86:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A7:44:AA:BE:10:4D:ED:04:DA:C1:92:BB:A4:06:BC:60:CA:DD:B2
X509v3 Authority Key Identifier:
keyid:09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:29:64:62:e8:ce:de:38:67:fe:cb:23:a9:df:c6:41:f3:c9:
70:c1:0f:3e:22:5d:a5:ae:e7:2b:a1:09:4f:c9:09:d4:42:1f:
0c:ba:69:df:00:17:ce:c5:40:af:4a:17:54:fb:b5:01:0c:a0:
14:9b:5d:4d:f3:fd:97:51:5f:3f:3c:a2:b7:c6:f1:ba:86:35:
fb:b0:d5:14:39:b8:9c:f0:e9:5d:eb:41:ad:0a:7a:49:27:40:
8f:c6:51:6b:b5:04:f8:83:b3:a6:51:19:b3:56:49:7c:6d:52:
63:34:50:d6:56:78:30:c5:46:8e:03:fc:56:4f:d3:41:71:86:
18:39:bd:be:08:87:4b:4f:d9:52:d7:0d:98:f1:4d:97:1c:2b:
7a:77:b2:7e:08:9d:09:57:53:7c:54:e8:d3:e8:a1:a2:c0:e0:
49:2d:92:93:e3:be:23:69:20:1f:fc:df:0c:09:8c:5a:7b:67:
9a:04:ba:8d:2e:c9:3c:9b:80:35:70:29:a2:f5:48:fa:83:8f:
25:b8:5a:fa:95:ff:fe:26:60:ad:11:c1:43:f3:78:9f:17:2c:
cf:18:0b:6f:f7:d7:28:d4:f7:79:1d:02:3e:ae:cf:65:2c:53:
39:ca:0d:ef:67:18:68:3d:8b:9a:09:bd:c4:aa:39:34:3d:75:
4f:23:f0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:39 2026 by rpki-client