Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
File: CEGOlpDQ-3Eavzh04cUApidpPAo.mft (raw, json)
Hash identifier: lW1I6TC1mEB6M+DhRBwaRSy2T1q9cgThQnIB2GgOveQ=
Subject key identifier: 40:22:14:8D:07:86:ED:D0:D0:76:14:3C:12:DB:A6:3D:62:AB:FC:8B
Authority key identifier: 08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A
Certificate issuer: /CN=08418e9690d0fb711abf3874e1c500a627693c0a
Certificate serial: 019D28F260F50DE1EA8F652B2840DBBB13D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
Manifest number: 119E
Signing time: Thu 26 Mar 2026 07:01:06 +0000
Manifest this update: Thu 26 Mar 2026 07:01:06 +0000
Manifest next update: Fri 27 Mar 2026 07:01:06 +0000
Files and hashes: 1: CEGOlpDQ-3Eavzh04cUApidpPAo.crl (hash: l93Ixllfq8a3jyEAofgowwXBKI4kNfNWkXb/MLNFb1M=)
2: bsglp_YaCzq1ZbW59TrfMCZMvqQ.roa (hash: XgQ95AvaHQg4VEsCdEh5u3f7R7yDQIeF4yBEzRXjfaY=)
3: x61bfZf0OubTZvT9w-4WsDstRxI.roa (hash: fReq0aNolFC2JKGR6X3Q7h0pZyzLILuXa5ALU/lSf40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:60:f5:0d:e1:ea:8f:65:2b:28:40:db:bb:13:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08418e9690d0fb711abf3874e1c500a627693c0a
Validity
Not Before: Mar 26 07:01:06 2026 GMT
Not After : Mar 27 07:01:06 2026 GMT
Subject: CN=4022148d0786edd0d076143c12dba63d62abfc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d7:c5:d3:d7:62:a9:47:a0:53:f7:9a:64:93:
a3:af:45:3d:fc:e8:4c:1e:8e:6c:20:94:97:39:80:
a4:d7:91:6d:f4:5f:aa:24:52:30:e3:8a:0a:89:44:
c2:e1:95:77:6c:08:24:63:98:2a:cb:73:bd:84:69:
3e:78:4a:eb:df:43:84:3d:6f:e2:f1:7f:ef:94:fa:
0a:39:f9:06:30:15:f6:3b:c0:4f:6a:b0:17:48:d5:
20:1a:81:ca:e4:5d:d4:a1:9b:a4:53:a8:57:7d:bc:
8d:de:70:f3:c7:45:da:fa:63:0e:99:db:7f:7c:47:
6b:73:ab:12:e5:d3:3f:3f:59:fd:a3:77:e8:63:52:
75:8f:8d:8c:0a:1e:e7:49:e2:13:ab:ea:7b:94:c2:
42:cf:70:09:70:02:a0:7c:69:40:b0:b1:a5:36:39:
fc:4a:90:eb:76:76:27:59:10:b7:87:9b:3a:c0:f2:
b8:00:9d:11:b1:62:56:a0:4b:4a:c4:ca:2e:2f:73:
d1:70:dd:70:96:a3:6a:b2:9f:0b:7a:ca:58:bc:85:
e7:5e:42:53:19:d4:83:6f:e0:e9:85:d0:92:78:00:
ca:85:4b:af:6f:e7:00:25:b0:34:e7:11:49:fd:5f:
d8:bd:b1:f3:64:78:22:22:8d:0c:bc:59:2f:8b:7c:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:22:14:8D:07:86:ED:D0:D0:76:14:3C:12:DB:A6:3D:62:AB:FC:8B
X509v3 Authority Key Identifier:
keyid:08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0d:03:3f:bb:4a:2d:fe:8d:f7:a3:9e:d1:1a:4a:bb:b1:4d:
9f:b2:74:13:83:28:4c:56:97:c8:dc:71:3a:94:83:7f:34:6a:
3c:8e:de:41:6a:60:52:9e:b4:a0:18:6f:c4:6e:56:12:e3:08:
13:e0:d1:b0:5a:89:28:66:d9:d7:27:df:87:89:ca:78:17:e2:
35:93:db:cc:42:28:f5:85:42:f3:42:73:80:db:43:b9:40:c0:
73:f8:39:50:c1:e1:fa:a6:94:f4:ab:0b:87:85:35:1b:1f:0b:
cd:92:8e:2b:f7:0c:1f:8e:52:20:42:c4:17:b4:10:e0:7f:2a:
34:ff:bc:d6:ec:33:9b:71:1e:85:14:19:d0:b3:55:6f:de:29:
29:29:87:c1:0f:b7:43:5c:5d:0a:87:8c:ef:7a:3f:6f:a1:24:
a3:a5:25:dd:a6:71:89:1f:28:77:3f:44:1b:7c:14:dc:da:c1:
2a:d4:9b:6a:76:5c:df:ed:07:d4:05:ba:3e:b4:70:21:52:7f:
5d:b2:3b:a6:3e:e4:d2:0d:38:f0:3e:8d:e3:33:89:d0:c1:5e:
c4:3f:07:af:9f:12:6e:cd:d2:e7:8b:ed:f5:82:1c:ee:70:6e:
15:fc:3c:1a:a6:9c:b8:f9:36:2c:ee:20:ff:2e:40:4a:b6:69:
8a:33:cc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:16 2026 by rpki-client