Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
File: CegPaQPGpVbSifWLpes41VyzAHE.mft (raw, json)
Hash identifier: O+4tPFBdZD12G3fMWTCZzU/YBLR0BDdwJuY8tN6GWLA=
Subject key identifier: 42:C6:0D:A2:5F:0D:BF:5E:76:1B:5E:B6:34:41:45:4C:5E:D7:1B:9A
Authority key identifier: 09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
Certificate issuer: /CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Certificate serial: 019E1BD8D37EF947DEB823814E0AC9BCF8B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
Manifest number: 02CE
Signing time: Tue 12 May 2026 11:00:55 +0000
Manifest this update: Tue 12 May 2026 11:00:55 +0000
Manifest next update: Wed 13 May 2026 11:00:55 +0000
Files and hashes: 1: CegPaQPGpVbSifWLpes41VyzAHE.crl (hash: 3q/0d8MHJV+BQyhiOWkpbYMCwPMzlGLPBoyRo6aP3J4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:d3:7e:f9:47:de:b8:23:81:4e:0a:c9:bc:f8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Validity
Not Before: May 12 11:00:55 2026 GMT
Not After : May 13 11:00:55 2026 GMT
Subject: CN=42c60da25f0dbf5e761b5eb63441454c5ed71b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:ab:dc:90:03:93:e0:cb:86:cf:f3:1a:a9:
4e:09:7f:e4:87:a7:f5:63:e8:05:03:3c:83:cc:94:
9a:7f:9d:15:f7:77:1b:55:5b:7d:f7:c4:cb:62:94:
82:6c:10:c7:82:c3:41:01:46:bf:f8:92:f2:d5:09:
b6:60:45:ab:02:a7:69:c5:12:2d:17:d0:8d:23:9e:
e6:d7:e8:c4:a7:b8:d4:91:3a:d9:2f:3b:a7:c8:24:
36:e9:da:06:4a:13:d1:13:22:6f:b0:44:48:a7:d2:
92:87:9d:f5:da:29:92:7e:20:6e:fb:56:c8:da:03:
55:8f:17:94:19:81:1f:2a:b3:b1:00:9e:df:b2:db:
04:21:29:80:4f:ab:3e:f0:75:e9:b8:96:45:5c:76:
b0:e0:f8:40:85:84:b0:38:f9:46:50:72:e7:84:03:
d3:84:e2:d6:d6:67:aa:d3:72:62:58:3b:1b:8b:71:
47:ed:d8:69:a3:55:bc:43:c1:a5:c2:91:1b:80:86:
b3:80:b3:e9:2d:07:da:73:7f:dd:61:98:18:5c:67:
de:cf:7c:79:6f:93:1d:e7:e6:cc:55:aa:66:c0:18:
e2:49:ac:32:b8:35:89:12:42:6f:bc:42:eb:fb:55:
92:e1:b2:50:31:5e:fc:e9:c0:a9:dd:ec:55:03:7c:
be:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C6:0D:A2:5F:0D:BF:5E:76:1B:5E:B6:34:41:45:4C:5E:D7:1B:9A
X509v3 Authority Key Identifier:
keyid:09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a7:8c:34:00:8d:09:29:56:21:26:69:a7:52:d4:e8:03:83:
e9:00:4c:99:7d:c5:e2:7e:90:3b:f3:0d:b7:9f:30:bc:58:79:
ee:c2:a6:72:0e:77:f3:f9:5d:63:30:1a:c4:00:f1:aa:69:b6:
3e:99:dc:22:69:87:09:ca:bf:c6:4e:1f:d9:af:60:7e:cf:66:
48:78:1a:83:16:0c:0c:9c:bf:ce:c0:e7:ae:52:73:7a:88:7c:
d7:fe:7f:7c:fd:15:a4:94:e7:e7:9f:0d:fe:c4:2b:4f:a1:90:
62:84:66:6c:46:c9:08:0d:58:3d:dc:22:11:7b:65:f4:cb:26:
21:74:19:47:d9:e9:38:80:69:e5:dc:22:aa:4f:31:2a:d3:68:
84:00:fb:bc:e4:71:2f:2f:c9:d5:94:8a:98:b0:ae:d1:bd:cd:
6b:c2:15:c7:31:51:8b:e6:e8:84:8e:c3:48:94:5c:e7:0e:7c:
e1:4e:b6:f9:a0:a3:f6:09:c2:7a:51:58:af:9c:f3:73:8d:b0:
83:1b:7e:1b:f2:bd:82:fa:ab:dc:7e:23:12:eb:14:81:b0:17:
40:02:0a:98:41:b0:1f:5c:24:05:ae:bc:c8:52:78:16:67:2a:
c9:ed:d4:69:91:72:ed:d1:90:5c:37:ac:9a:0e:40:30:16:e7:
ba:fa:e5:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4b2NN++UfeuCOBTgrJvPixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTgwZjY5MDNjNmE1NTZkMjg5ZjU4YmE1ZWIzOGQ1NWNi
MzAwNzEwHhcNMjYwNTEyMTEwMDU1WhcNMjYwNTEzMTEwMDU1WjAzMTEwLwYDVQQD
Eyg0MmM2MGRhMjVmMGRiZjVlNzYxYjVlYjYzNDQxNDU0YzVlZDcxYjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Sr3JADk+DLhs/zGqlOCX/kh6f1
Y+gFAzyDzJSaf50V93cbVVt998TLYpSCbBDHgsNBAUa/+JLy1Qm2YEWrAqdpxRIt
F9CNI57m1+jEp7jUkTrZLzunyCQ26doGShPREyJvsERIp9KSh5312imSfiBu+1bI
2gNVjxeUGYEfKrOxAJ7fstsEISmAT6s+8HXpuJZFXHaw4PhAhYSwOPlGUHLnhAPT
hOLW1meq03JiWDsbi3FH7dhpo1W8Q8GlwpEbgIazgLPpLQfac3/dYZgYXGfez3x5
b5Md5+bMVapmwBjiSawyuDWJEkJvvELr+1WS4bJQMV786cCp3exVA3y+EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELGDaJfDb9edhtetjRBRUxe1xuaMB8GA1UdIwQY
MBaAFAnoD2kDxqVW0on1i6XrONVcswBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VnUGFRUEdwVmJTaWZXTHBlczQxVnl6QUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84MWYzYzktNjI5MS00Y2RlLTk0MTIt
ZGM0N2RhMTI4MDBjLzEvQ2VnUGFRUEdwVmJTaWZXTHBlczQxVnl6QUhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy84MWYzYzktNjI5MS00Y2RlLTk0MTItZGM0N2RhMTI4MDBj
LzEvQ2VnUGFRUEdwVmJTaWZXTHBlczQxVnl6QUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaeMNACN
CSlWISZpp1LU6AOD6QBMmX3F4n6QO/MNt58wvFh57sKmcg538/ldYzAaxADxqmm2
PpncImmHCcq/xk4f2a9gfs9mSHgagxYMDJy/zsDnrlJzeoh81/5/fP0VpJTn558N
/sQrT6GQYoRmbEbJCA1YPdwiEXtl9MsmIXQZR9npOIBp5dwiqk8xKtNohAD7vORx
Ly/J1ZSKmLCu0b3Na8IVxzFRi+bohI7DSJRc5w584U62+aCj9gnCelFYr5zzc42w
gxt+G/K9gvqr3H4jEusUgbAXQAIKmEGwH1wkBa68yFJ4Fmcqye3UaZFy7dGQXDes
mg5AMBbnuvrlHw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:34:45 2026 by rpki-client