Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
File: CegPaQPGpVbSifWLpes41VyzAHE.mft (raw, json)
Hash identifier: seqnryVQ44VrNbQ0CdRbK9rFAXlCy4AvqlScXxNO2vE=
Subject key identifier: 4E:8D:01:94:AC:28:08:B5:C7:7F:FC:EF:D3:32:9F:A1:12:E5:92:E2
Authority key identifier: 09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
Certificate issuer: /CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Certificate serial: 01A10B1403BCE990831BC43EBBAF3ED92A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
Manifest number: 0453
Signing time: Mon 05 Oct 2026 08:00:23 +0000
Manifest this update: Mon 05 Oct 2026 08:00:23 +0000
Manifest next update: Tue 06 Oct 2026 08:00:23 +0000
Files and hashes: 1: CegPaQPGpVbSifWLpes41VyzAHE.crl (hash: vWp5LawKlQVn0jcvJRAy5AG9cLEP1xqXN+x81JTmLDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:14:03:bc:e9:90:83:1b:c4:3e:bb:af:3e:d9:2a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e80f6903c6a556d289f58ba5eb38d55cb30071
Validity
Not Before: Oct 5 08:00:23 2026 GMT
Not After : Oct 6 08:00:23 2026 GMT
Subject: CN=4e8d0194ac2808b5c77ffcefd3329fa112e592e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:28:ca:34:2b:cf:f0:f6:b3:77:28:ae:a5:49:
2d:7f:3b:ca:c4:b7:97:9a:7c:6f:93:da:08:dc:8a:
29:cf:e7:af:50:5c:7e:05:4a:c9:d1:7c:35:04:b5:
97:a5:74:fb:92:76:2a:4d:be:51:16:08:15:7a:90:
97:82:07:e9:6e:66:7b:e6:0a:6d:c3:76:b1:b0:d0:
70:a8:4f:50:96:35:29:fc:dd:c4:a8:24:31:b6:8f:
74:92:5c:91:71:82:03:ba:a6:ad:a0:83:8d:b6:ce:
64:2b:fa:68:0e:ad:d0:e0:4b:06:1c:3f:6d:cc:72:
5b:00:70:ee:88:43:3c:f3:37:9d:05:b3:da:4b:af:
26:b4:63:79:0a:5a:6a:2f:b5:c3:fa:93:b9:47:23:
bc:fd:44:36:cc:df:97:b5:46:0e:46:38:9f:0c:1e:
5c:3f:02:01:a9:bb:5e:84:b8:77:25:94:45:1d:e9:
a6:ad:25:c4:b9:77:80:5f:ac:5a:8c:38:db:64:1c:
a1:38:49:69:97:6a:48:d4:46:4a:36:73:6c:fc:01:
c8:47:8b:29:be:13:1b:9d:ef:5b:5d:7b:25:17:4c:
97:45:7e:f8:21:99:af:8b:fb:a9:4d:4e:2d:87:4c:
86:4f:c1:73:5a:6e:a5:82:9e:ac:90:a6:ad:d9:ab:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:8D:01:94:AC:28:08:B5:C7:7F:FC:EF:D3:32:9F:A1:12:E5:92:E2
X509v3 Authority Key Identifier:
keyid:09:E8:0F:69:03:C6:A5:56:D2:89:F5:8B:A5:EB:38:D5:5C:B3:00:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CegPaQPGpVbSifWLpes41VyzAHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/81f3c9-6291-4cde-9412-dc47da12800c/1/CegPaQPGpVbSifWLpes41VyzAHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:6e:2d:06:89:2b:4b:3e:b5:7b:8e:09:6e:24:16:0a:95:bc:
37:70:18:99:08:2e:2f:30:55:3e:cf:20:78:42:8f:ec:2f:fd:
1e:e2:b7:66:3f:a8:fd:7f:91:50:1c:a3:11:cd:5d:7a:2b:74:
0c:89:32:7a:ca:56:d9:46:f8:f2:f4:cf:34:52:79:dc:da:fa:
68:27:b8:29:c7:ca:1a:50:51:dc:35:a3:a9:2d:b3:76:48:cb:
a2:3a:83:a5:26:fb:db:50:f3:1d:a0:fa:ce:a6:d4:df:e7:a8:
2c:f7:75:77:64:ef:2e:d7:a7:d8:b1:bb:e9:ca:75:9a:53:fa:
20:5d:cd:9b:a3:a6:d1:20:3e:70:96:1d:d4:16:e0:45:c2:df:
4a:9c:80:32:80:e4:ef:23:d2:b9:02:47:29:9d:d4:ba:74:b0:
f4:3e:f1:f8:41:f0:60:a0:5c:22:26:83:9a:2f:42:ce:28:a1:
c5:3b:ef:6c:96:11:f6:bb:10:ff:df:81:cc:46:a7:b1:94:ed:
14:39:2b:ef:e5:e8:34:84:31:bb:5a:75:85:d1:53:6e:26:0d:
8a:a5:55:4a:9f:fa:4f:06:dc:50:9a:34:c8:c8:bc:b5:0a:15:
a5:1d:1d:2c:02:b7:02:9a:97:6a:41:43:75:a7:50:c8:7c:6e:
0a:52:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 17:30:10 2026 by rpki-client