Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
File: CegPaQPGpVbSifWLpes41VyzAHE.mft (raw, json)
Hash identifier: 1w2ymtnibQHnvNEMEeVgboiWAr79O7UnKrxaSdQmsrc=
Subject key identifier: 43:2B:A6:27:1D:35:E1:1D:A9:71:55:47:C4:ED:7E:89:EC:BD:2E:68
Authority key identifier: 09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
Certificate issuer: /CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Certificate serial: 019F9091241CC6A71F843EB8407FE233A7B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
Manifest number: 038F
Signing time: Thu 23 Jul 2026 20:00:58 +0000
Manifest this update: Thu 23 Jul 2026 20:00:58 +0000
Manifest next update: Fri 24 Jul 2026 20:00:58 +0000
Files and hashes: 1: CegPaQPGpVbSifWLpes41VyzAHE.crl (hash: b243McihCx3G8UUOKHrBluVI0YXAB3TYSbDSU/roZVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:24:1c:c6:a7:1f:84:3e:b8:40:7f:e2:33:a7:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Validity
Not Before: Jul 23 20:00:58 2026 GMT
Not After : Jul 24 20:00:58 2026 GMT
Subject: CN=432ba6271d35e11da9715547c4ed7e89ecbd2e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:39:d2:dd:7d:71:8a:97:39:e0:9b:eb:27:97:
a9:b2:52:45:cb:35:5b:b6:5a:97:b4:c6:80:50:b2:
b3:c9:42:71:cb:a4:61:3b:28:31:15:74:70:1f:8e:
21:28:50:98:c1:21:af:bf:c7:13:ee:ec:40:15:5e:
bd:85:30:b0:36:a4:44:3a:33:da:8e:be:61:18:a8:
f3:99:02:be:0e:d9:31:4f:d1:14:8f:a8:85:76:7b:
b2:d7:6a:e7:44:1a:f2:45:41:bb:be:3e:f6:b0:1b:
69:48:55:4d:8f:20:58:5c:e1:e4:3a:8d:5e:94:70:
07:56:20:9e:d5:1b:1d:29:cd:66:68:b1:a9:11:48:
74:d6:6b:e1:e2:50:62:9b:99:92:65:36:a6:be:04:
59:50:cf:f1:47:d6:ca:b1:14:ed:82:b9:48:c2:d0:
4c:2f:1f:7a:04:25:9d:a2:53:65:21:7b:d8:a6:4f:
1a:3c:2e:da:f4:bd:22:cd:99:5e:6b:10:20:59:41:
26:5e:cc:23:b8:ab:98:f3:31:ce:c7:42:64:36:fe:
8f:69:99:fc:72:62:25:93:38:4f:69:67:43:0f:10:
65:8d:2f:8d:56:6a:d4:fb:a5:89:d4:c1:0e:ae:d5:
95:c3:c5:f9:67:0d:f7:fb:86:54:e2:1c:ee:f8:33:
ee:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2B:A6:27:1D:35:E1:1D:A9:71:55:47:C4:ED:7E:89:EC:BD:2E:68
X509v3 Authority Key Identifier:
keyid:09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:cb:2b:6f:b0:08:ff:ca:0f:56:e2:b6:20:1d:ed:03:43:89:
75:02:fc:8a:12:3c:21:a5:47:55:5d:5e:48:6b:0a:0b:b3:03:
34:15:18:64:bc:5b:36:09:e1:16:fe:95:c8:82:05:aa:d1:93:
5c:aa:e0:2e:ee:4d:9c:2f:e1:ee:a4:2f:93:08:1f:3e:79:02:
86:3e:3c:dc:96:d3:94:5d:5e:5c:a1:a9:a5:6c:22:ff:67:6d:
f2:36:a0:52:d5:6e:56:fc:da:73:e5:de:2b:6e:61:89:a8:45:
7b:04:56:78:48:b4:4d:af:7a:94:19:36:a5:c5:00:d4:c6:6f:
2e:b3:95:7b:02:c9:3b:7e:a9:be:b6:8f:98:2a:95:ca:ac:60:
1b:32:55:a0:4e:88:c8:92:5e:25:19:fd:00:7b:47:30:3f:bd:
8b:75:9e:2d:ef:32:5f:4d:f4:3a:7b:fd:94:db:2e:84:56:a4:
0a:c4:b2:8e:ec:43:4f:38:9b:0d:8b:88:b5:f6:80:3c:9f:d4:
15:2e:dc:18:66:cc:34:ea:44:df:e2:9a:a4:95:da:9b:86:b5:
8c:c7:70:a0:d0:e2:9c:fb:b3:8b:b9:2a:7f:12:7e:50:bd:a9:
0b:b6:1b:6b:6b:b2:aa:55:1c:d9:94:c8:98:74:4b:42:9d:c8:
ab:db:18:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:00:11 2026 by rpki-client