Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
File: CEGOlpDQ-3Eavzh04cUApidpPAo.mft (raw, json)
Hash identifier: zpEMTbfkT7VxXib0iWULAOoF4JYqECOvUo/+6YCJUro=
Subject key identifier: 6F:B3:4F:39:F4:C5:B3:3D:7E:49:06:6C:31:06:9B:7E:14:C4:1A:8C
Authority key identifier: 08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A
Certificate issuer: /CN=08418e9690d0fb711abf3874e1c500a627693c0a
Certificate serial: 01A13CA5E3EB13EE38A31E3A2514A213864B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
Manifest number: 13BC
Signing time: Wed 14 Oct 2026 23:01:07 +0000
Manifest this update: Wed 14 Oct 2026 23:01:07 +0000
Manifest next update: Thu 15 Oct 2026 23:01:07 +0000
Files and hashes: 1: CEGOlpDQ-3Eavzh04cUApidpPAo.crl (hash: vHAFWjdcFhx8w0AxZmAxD82EBz72JRW8umGij7dJE0I=)
2: bsglp_YaCzq1ZbW59TrfMCZMvqQ.roa (hash: XgQ95AvaHQg4VEsCdEh5u3f7R7yDQIeF4yBEzRXjfaY=)
3: c_9m0xgcLh9YaBDewGJWYh_14As.roa (hash: LgXs4WCpXr8O/VOFf7/hPYK7Aqr9ArHatWk7VUk10XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:e3:eb:13:ee:38:a3:1e:3a:25:14:a2:13:86:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08418e9690d0fb711abf3874e1c500a627693c0a
Validity
Not Before: Oct 14 23:01:07 2026 GMT
Not After : Oct 15 23:01:07 2026 GMT
Subject: CN=6fb34f39f4c5b33d7e49066c31069b7e14c41a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:fc:da:07:9b:36:09:b8:1c:17:fe:d0:df:
a2:d0:6e:6a:1e:92:1c:f8:79:78:18:72:1d:27:90:
12:77:94:4a:c7:e4:81:12:e4:28:90:af:58:18:7f:
6b:ef:ae:8b:d2:da:6a:cc:6a:b1:f3:1c:97:48:b7:
d0:06:fb:a6:40:76:94:7e:22:30:8d:80:93:c8:53:
d9:78:46:a2:ee:c4:f9:e0:a9:19:bf:d9:2d:ee:2f:
0e:9b:64:54:3b:78:ad:dd:a3:62:47:0a:7b:f2:e8:
a3:ec:d3:3e:72:7f:bf:7e:52:fe:57:04:d1:67:52:
e9:7d:9d:1e:ec:d2:c4:52:3f:0a:b0:a7:37:32:37:
aa:e4:70:c0:64:25:41:1a:b8:c6:f9:57:0d:ba:6f:
b0:a1:4c:af:56:c0:16:d3:c3:c7:79:4d:5c:99:be:
9f:71:15:b5:e6:01:67:fc:ab:61:b7:98:c7:3e:65:
a0:9f:f1:99:8e:42:9e:aa:e4:6c:96:d5:fe:34:7a:
58:c8:c2:69:09:67:2a:35:43:5b:91:b7:b6:e1:09:
49:db:1e:a1:4f:25:63:28:be:4a:71:db:a9:5e:ec:
94:d3:c9:5b:fa:b5:36:3c:f9:45:cc:e5:48:c2:5d:
a3:85:69:1c:68:2d:09:15:d9:ec:6f:3b:dd:22:e1:
f6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B3:4F:39:F4:C5:B3:3D:7E:49:06:6C:31:06:9B:7E:14:C4:1A:8C
X509v3 Authority Key Identifier:
keyid:08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ca:bb:52:75:f3:cd:29:20:50:ad:60:b7:dc:90:40:32:d6:
cc:b9:d6:70:ab:4e:65:8a:ca:ee:49:75:65:75:5a:a6:9f:e2:
26:d8:57:29:87:9f:bc:68:24:88:fb:ce:17:05:4c:68:2c:87:
69:73:ed:cf:68:f7:db:b7:f2:12:5a:c5:17:05:71:5c:dc:44:
3c:38:82:34:47:26:b5:2c:aa:90:d7:c3:36:9f:df:83:44:dc:
c6:0c:55:34:39:bd:f0:73:25:7f:1c:e2:89:5f:7f:43:a3:1c:
5e:86:4c:ee:d9:90:8b:68:95:ba:79:84:73:2d:14:c3:2e:4b:
d4:4a:f9:7f:29:2f:e8:0f:ab:91:c7:0e:1d:39:b0:3b:11:05:
3c:e7:73:cf:a2:12:e2:57:46:e4:74:a4:99:e1:f0:f7:80:3d:
33:e8:c3:ea:ae:36:08:95:df:9f:5a:59:e2:74:ed:c0:b2:0d:
ed:a3:c3:c4:41:86:10:be:78:99:fa:79:6b:c8:b6:8a:71:5e:
ea:13:a6:01:42:90:22:3e:84:14:81:40:ae:3e:84:16:ad:64:
04:ea:77:df:34:a4:24:53:21:6b:59:8c:07:9d:69:60:cd:be:
16:81:26:fa:7a:6a:cb:fe:e0:c5:34:38:ab:8c:54:2d:a2:c7:
ae:be:a4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:42 2026 by rpki-client