Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
File: CegPaQPGpVbSifWLpes41VyzAHE.mft (raw, json)
Hash identifier: FlmoLPob+KmVUtu31yMU8wSo5fxbjjrFFPYoiUy6Uo4=
Subject key identifier: 1E:63:0F:8D:53:71:38:F0:4A:32:E5:55:26:4D:AC:E5:EC:B5:14:25
Authority key identifier: 09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
Certificate issuer: /CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Certificate serial: 019D2A72B5C141CDDC110B23E13185109B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
Manifest number: 0251
Signing time: Thu 26 Mar 2026 14:00:53 +0000
Manifest this update: Thu 26 Mar 2026 14:00:53 +0000
Manifest next update: Fri 27 Mar 2026 14:00:53 +0000
Files and hashes: 1: CegPaQPGpVbSifWLpes41VyzAHE.crl (hash: IeMLSmGqh82BJDXljeM/da+MYFNqXyYYu3YpQ3oru7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:b5:c1:41:cd:dc:11:0b:23:e1:31:85:10:9b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Validity
Not Before: Mar 26 14:00:53 2026 GMT
Not After : Mar 27 14:00:53 2026 GMT
Subject: CN=1e630f8d537138f04a32e555264dace5ecb51425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bf:9e:4d:3b:08:6d:d1:ac:79:79:bc:ec:1f:
3d:95:6a:07:7c:86:37:e1:e2:5f:c1:98:1f:dd:61:
5d:d2:95:3d:5c:48:02:0d:76:23:6a:df:b4:2a:2c:
30:04:cc:2d:42:3b:1b:4d:32:e1:bf:1c:ac:ad:c0:
a5:e6:cb:be:17:34:26:d9:51:31:bc:8f:9f:13:e6:
3f:a8:6d:de:fb:d5:f3:61:3f:1e:d4:1c:71:99:56:
0d:48:2a:47:e7:bb:00:5b:71:46:ab:df:d3:26:dd:
84:e8:ee:08:62:56:2f:c8:02:82:a6:4b:24:c5:1f:
49:1a:44:d0:b3:49:87:c8:c2:d5:71:81:97:01:8d:
ab:81:59:16:18:e1:ed:eb:7e:8c:f6:65:a8:88:5f:
96:b1:25:2e:3a:be:d6:7f:0a:74:79:3c:5d:24:dd:
7d:1f:7c:7a:1d:fb:b6:10:87:57:a7:42:cc:2e:f8:
34:cd:3f:7a:89:bd:a0:a8:60:67:54:92:88:54:30:
98:27:53:7c:db:c1:a2:5b:e9:60:80:72:d2:60:7d:
c6:de:3e:12:3a:79:11:c0:6b:83:ca:55:2a:99:1f:
fb:ce:24:d3:51:a4:fa:c7:13:f1:4e:54:36:15:d6:
97:8f:5d:0d:2c:fe:81:82:8d:aa:eb:87:fb:b4:3c:
af:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:63:0F:8D:53:71:38:F0:4A:32:E5:55:26:4D:AC:E5:EC:B5:14:25
X509v3 Authority Key Identifier:
keyid:09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2a:76:c8:0d:93:7b:17:82:4e:0f:e4:b9:23:01:74:b6:1b:
63:ba:64:2d:0c:d6:84:f1:ee:fe:df:ac:a2:db:1e:1b:3a:9a:
fd:28:1f:26:8c:0f:71:f3:37:28:a6:d4:f1:98:a5:1e:0f:0f:
b3:94:93:d0:e5:72:b6:1c:a5:63:2a:14:7f:32:c7:59:c4:3e:
00:56:b8:85:a7:86:bc:50:a3:6d:d5:05:64:ef:da:a0:66:33:
9d:f9:ef:0a:a5:b2:c3:a4:71:59:9d:db:ea:f8:40:3f:ae:bc:
39:6c:14:bc:25:61:ec:eb:ca:1a:53:1f:1c:a4:59:6e:76:e8:
c9:5b:ba:25:9c:ed:7b:01:4c:bc:26:80:6d:53:8f:d5:ed:2d:
ef:59:b9:05:6e:42:03:50:55:3b:4b:2b:67:c5:d8:7a:1a:e6:
3b:42:1e:ae:5f:05:0b:c2:bd:70:a7:f8:c1:b6:12:b8:cf:32:
63:73:2c:83:34:63:df:8f:e1:da:dc:f8:45:8b:e6:59:e8:ba:
2f:c6:c7:f1:df:3b:17:18:2c:bf:8b:d1:6a:54:b7:cd:b8:d5:
95:ab:12:39:d7:5f:42:62:fc:5c:c2:3e:fb:12:39:c3:1f:5a:
52:90:f3:2c:be:13:cf:f5:ae:6a:6a:3f:ef:fe:89:a8:25:1c:
e1:98:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:35:13 2026 by rpki-client