Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
File: CEGOlpDQ-3Eavzh04cUApidpPAo.mft (raw, json)
Hash identifier: zk7qYJrE6fvHfy3KbhY10f5+1VHnOPBLk0wI7C+yIvE=
Subject key identifier: 0D:B4:3B:C4:F7:EE:1A:3D:58:15:70:B8:50:F2:CE:1E:BF:92:0F:43
Authority key identifier: 08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A
Certificate issuer: /CN=08418e9690d0fb711abf3874e1c500a627693c0a
Certificate serial: 01A0DC168E238930571B001E6370934339F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
Manifest number: 138A
Signing time: Sat 26 Sep 2026 05:01:00 +0000
Manifest this update: Sat 26 Sep 2026 05:01:00 +0000
Manifest next update: Sun 27 Sep 2026 05:01:00 +0000
Files and hashes: 1: CEGOlpDQ-3Eavzh04cUApidpPAo.crl (hash: gvGhC/nBpxH8gOupXaNgc6kHSSH0MScBFx1QO/jKeVY=)
2: bsglp_YaCzq1ZbW59TrfMCZMvqQ.roa (hash: XgQ95AvaHQg4VEsCdEh5u3f7R7yDQIeF4yBEzRXjfaY=)
3: c_9m0xgcLh9YaBDewGJWYh_14As.roa (hash: LgXs4WCpXr8O/VOFf7/hPYK7Aqr9ArHatWk7VUk10XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:16:8e:23:89:30:57:1b:00:1e:63:70:93:43:39:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08418e9690d0fb711abf3874e1c500a627693c0a
Validity
Not Before: Sep 26 05:01:00 2026 GMT
Not After : Sep 27 05:01:00 2026 GMT
Subject: CN=0db43bc4f7ee1a3d581570b850f2ce1ebf920f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:d9:bf:1d:82:34:d2:68:04:f3:f5:aa:f6:
cc:1e:1f:75:96:37:76:02:64:4f:76:5d:5a:43:ba:
01:a4:0d:b1:a0:67:6a:9c:b2:f9:72:96:88:7a:9f:
33:56:3e:91:2d:4e:55:93:38:5c:ba:6b:7a:4c:bd:
77:1e:21:00:29:68:24:38:66:12:29:14:14:ef:cf:
52:94:c3:cf:14:85:3a:67:55:f7:8a:73:b0:10:9c:
64:48:c0:d4:ce:54:a0:6d:a6:75:b4:d1:6b:28:06:
a1:0b:f5:31:ef:55:82:81:aa:62:d2:b8:ed:8c:55:
5a:81:e0:51:95:c0:dd:6f:1e:6d:65:b7:c7:5e:b1:
a0:db:fd:3d:96:43:fa:c7:51:d8:d8:16:12:8f:95:
cd:65:73:1f:14:9d:78:ed:b6:01:54:ae:d5:4d:be:
46:8d:bd:d9:46:e9:fd:7e:a7:b3:4c:13:2d:ee:9d:
93:2b:b9:d9:e0:cd:58:2a:71:5d:58:b8:7c:1c:d9:
de:c4:23:3d:c4:4b:b0:1a:00:bc:3d:bd:d2:46:3d:
96:0f:0e:0e:58:e8:dc:1e:f9:59:fd:8d:42:5a:7f:
5e:2b:9d:1c:41:66:ab:a7:88:18:61:86:17:25:a7:
d3:34:46:f1:63:80:6e:0f:dd:3d:69:d7:b2:b9:7f:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B4:3B:C4:F7:EE:1A:3D:58:15:70:B8:50:F2:CE:1E:BF:92:0F:43
X509v3 Authority Key Identifier:
keyid:08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b8:4c:23:55:21:48:2e:52:fe:41:5f:81:94:23:e7:00:ac:
a2:6d:ee:0c:62:3c:27:b3:78:e4:c8:8f:b1:09:69:bc:b5:ee:
74:fe:84:16:c3:8b:0e:95:01:4b:45:d2:f7:9f:b5:b3:ec:09:
82:4c:2a:bc:2f:19:d0:0c:52:5e:36:f2:e4:5d:ca:dc:fc:2b:
cd:9c:76:08:55:54:d4:2f:b7:44:cd:1f:42:e1:c6:02:23:9f:
1a:9b:22:d5:18:5d:f1:8e:c9:d6:7e:eb:1a:59:84:ee:3c:43:
bf:6b:a2:06:75:96:a4:e8:42:20:2d:72:64:08:c6:17:80:dd:
49:3c:64:28:4d:d8:cb:ae:45:e2:e5:6c:88:0d:14:cf:54:87:
09:46:24:97:ed:88:12:35:f9:7c:87:02:4b:78:45:f5:ac:15:
21:3d:ef:a1:73:20:f2:65:5b:9b:66:62:23:dd:bc:78:65:82:
d2:df:5a:c4:f1:dd:0a:91:bc:43:23:c5:49:59:4f:9c:1b:77:
5c:4a:3f:22:db:c0:db:d9:ca:b3:db:70:9f:52:ff:c6:9e:96:
52:ea:27:38:ee:1d:ba:dc:a8:90:8c:f4:a8:c7:07:57:07:4d:
47:01:b1:5e:8a:a4:11:68:9c:d1:8d:65:8e:d7:3b:8e:f7:c5:
68:ec:31:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:05:32 2026 by rpki-client