Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
File: CegPaQPGpVbSifWLpes41VyzAHE.mft (raw, json)
Hash identifier: RM5wOImDjOt6kl12z8QGLjORnqLfdOPWKIaQlFBhdtg=
Subject key identifier: 6F:5D:29:86:EF:53:94:1F:BF:D7:54:3D:32:45:2B:50:E3:17:3F:DE
Authority key identifier: 09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
Certificate issuer: /CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Certificate serial: 01A0404E335B0ABE96EF23CE8E2D4D5DD86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
Manifest number: 03EA
Signing time: Wed 26 Aug 2026 23:01:01 +0000
Manifest this update: Wed 26 Aug 2026 23:01:01 +0000
Manifest next update: Thu 27 Aug 2026 23:01:01 +0000
Files and hashes: 1: CegPaQPGpVbSifWLpes41VyzAHE.crl (hash: qFTU4ualv+v1muA69X2W2ZOTIyJfx2SAV9h/ziXL2Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:33:5b:0a:be:96:ef:23:ce:8e:2d:4d:5d:d8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Validity
Not Before: Aug 26 23:01:01 2026 GMT
Not After : Aug 27 23:01:01 2026 GMT
Subject: CN=6f5d2986ef53941fbfd7543d32452b50e3173fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:60:2a:a9:34:e3:5f:9e:18:d3:45:50:3f:05:
4e:62:86:cf:95:0e:76:20:3c:a8:5a:2b:f6:a8:6b:
b6:64:dd:de:df:9c:ee:dc:e1:91:f1:3b:e7:ee:d4:
52:de:2d:b5:f5:05:85:5a:ba:f0:0b:3c:40:f0:43:
d8:30:4e:86:93:18:4b:56:18:30:6a:43:d0:14:06:
17:e3:58:6b:a5:bb:90:3f:2a:32:3e:cb:ef:54:73:
1d:ea:61:4c:79:85:3b:a0:8e:14:3a:78:3d:fc:ee:
0c:17:1b:f5:7b:e7:cc:d3:68:8e:17:e2:96:cb:1e:
6c:e7:5f:af:fa:af:78:81:40:bd:0b:19:4e:1d:7f:
bf:26:d5:4e:77:c4:39:b9:d6:63:f6:05:c2:1a:90:
9c:c1:d5:10:62:00:50:e3:fe:33:3d:e2:3c:c3:57:
33:35:08:57:ea:49:83:0c:3c:dc:26:44:9e:08:f5:
75:c8:e3:97:6e:39:5b:ed:65:ef:b0:54:5c:df:61:
61:30:db:a1:29:29:c1:f3:5d:7b:f7:c6:7b:a6:c1:
bf:6e:c8:9e:de:aa:c1:3a:96:66:6f:09:6d:a8:44:
dd:39:5b:c7:23:34:ca:ad:4c:e9:c1:8e:79:a8:66:
50:ab:7c:7b:ad:54:4b:53:bd:69:55:3c:8a:0d:b5:
cb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:5D:29:86:EF:53:94:1F:BF:D7:54:3D:32:45:2B:50:E3:17:3F:DE
X509v3 Authority Key Identifier:
keyid:09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:86:6b:8a:d1:b9:48:16:df:a6:15:0c:2f:d3:a8:d9:4b:17:
2d:2b:ee:57:23:6a:74:2b:75:b7:e9:84:89:ce:6e:28:b6:af:
20:dd:57:54:3d:13:36:a9:01:c2:93:0e:fc:11:b4:44:9c:3c:
fd:a2:61:a4:a1:16:e8:59:37:43:c5:86:1d:1b:90:de:3b:0e:
33:07:c5:40:a5:06:b8:a2:30:97:7d:b2:fe:f7:42:5b:75:a2:
28:59:32:b6:a9:27:0b:1d:58:1e:e9:67:4e:80:49:3d:4e:13:
18:1b:92:9b:65:61:3e:52:00:e5:4c:1e:f9:ca:61:ff:c7:46:
08:a2:a7:cb:14:63:a8:c9:47:f8:bf:62:99:60:26:df:cb:ad:
88:3c:5a:a8:74:90:71:29:19:55:b4:27:7c:14:31:21:97:10:
90:fb:01:31:8a:45:cd:dd:dd:dc:0a:6c:0b:f9:fd:32:71:01:
63:5f:f8:ac:68:d3:55:ce:34:6f:8b:3e:ba:76:f2:f6:8e:b2:
9f:b8:69:2e:39:e8:8c:06:0e:4d:a9:2c:09:97:2e:01:c7:53:
e8:50:2b:88:ba:cd:f5:a1:49:d3:2c:5a:15:fb:c0:78:c9:7b:
3c:8c:f0:3c:0b:70:86:b9:55:83:ff:4f:1d:ce:55:c9:cf:52:
52:d2:da:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:36:43 2026 by rpki-client