Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
File: CEGOlpDQ-3Eavzh04cUApidpPAo.mft (raw, json)
Hash identifier: k8vedsP4Raj2FITqy7XYtbekJ3nXRuyTY463hxjLZiI=
Subject key identifier: 74:81:CD:FD:5F:0B:14:FD:1A:47:12:A1:EB:81:12:19:EA:A6:4F:37
Authority key identifier: 08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A
Certificate issuer: /CN=08418e9690d0fb711abf3874e1c500a627693c0a
Certificate serial: 019F8FEBDF27116C1F51EAF55B95F7480471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
Manifest number: 12DE
Signing time: Thu 23 Jul 2026 17:00:27 +0000
Manifest this update: Thu 23 Jul 2026 17:00:27 +0000
Manifest next update: Fri 24 Jul 2026 17:00:27 +0000
Files and hashes: 1: CEGOlpDQ-3Eavzh04cUApidpPAo.crl (hash: 3iJq5jxN5FDdxeujLyo5skH3sY+0rUtHLavktLJw57U=)
2: bsglp_YaCzq1ZbW59TrfMCZMvqQ.roa (hash: XgQ95AvaHQg4VEsCdEh5u3f7R7yDQIeF4yBEzRXjfaY=)
3: c_9m0xgcLh9YaBDewGJWYh_14As.roa (hash: LgXs4WCpXr8O/VOFf7/hPYK7Aqr9ArHatWk7VUk10XE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:eb:df:27:11:6c:1f:51:ea:f5:5b:95:f7:48:04:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08418e9690d0fb711abf3874e1c500a627693c0a
Validity
Not Before: Jul 23 17:00:27 2026 GMT
Not After : Jul 24 17:00:27 2026 GMT
Subject: CN=7481cdfd5f0b14fd1a4712a1eb811219eaa64f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:d7:5d:f3:03:44:e3:3a:e1:1e:42:ca:ff:
d8:c7:a2:aa:34:0b:37:71:8c:62:0f:9c:c5:64:48:
4a:c0:a2:17:66:c9:98:54:a3:6a:5e:a4:82:b4:13:
7a:dd:3e:a6:d4:21:6e:42:46:89:d5:da:b4:e2:98:
8c:6b:26:c0:c6:91:46:ea:f3:f1:1a:7c:74:e1:36:
a5:87:9d:b6:cb:a9:6a:2c:4d:43:1f:74:2a:4b:c1:
85:67:d7:b6:fd:c8:c3:4b:01:62:cf:6b:db:8b:c1:
36:2b:c0:6b:35:03:82:d8:91:bc:f8:23:93:8e:d1:
92:b8:24:20:55:81:06:55:ec:e9:70:6c:f3:83:7c:
32:b7:e0:bc:c2:97:98:1c:76:b0:2c:9c:09:c4:ad:
9d:fc:6d:80:4b:85:db:eb:5c:e9:de:bc:5e:15:5a:
23:56:b8:38:dd:64:79:9e:2b:e9:ca:05:ed:d0:60:
c3:96:ba:20:82:e5:da:7b:f9:09:42:14:6a:1a:07:
c3:99:b3:1f:21:cc:5d:15:98:16:ea:c9:80:df:d0:
0d:77:44:da:1c:0a:be:c6:35:9f:6c:8d:0e:71:bd:
b5:82:6e:4a:00:fd:ea:8b:d6:88:51:14:19:eb:cb:
9e:97:10:9f:00:6b:98:81:ac:a2:92:89:26:2c:88:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:81:CD:FD:5F:0B:14:FD:1A:47:12:A1:EB:81:12:19:EA:A6:4F:37
X509v3 Authority Key Identifier:
keyid:08:41:8E:96:90:D0:FB:71:1A:BF:38:74:E1:C5:00:A6:27:69:3C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEGOlpDQ-3Eavzh04cUApidpPAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e97563-c7e5-4036-a796-22c0ca213380/1/CEGOlpDQ-3Eavzh04cUApidpPAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:17:52:18:fb:03:e1:dd:0c:b1:e3:a6:97:11:f4:8b:98:cd:
11:ba:85:54:c0:03:da:08:19:4b:e8:3d:ad:34:0b:c6:ce:39:
e0:cf:27:ad:13:e1:da:b5:a8:52:55:23:56:5f:5d:8e:16:fb:
81:01:05:5f:8f:04:7c:ef:b7:0b:32:8c:ff:63:dd:37:0d:7f:
d2:0c:f0:53:ee:ed:14:f1:91:69:a1:b7:ff:2d:b8:a8:54:0f:
40:e2:1d:ff:61:c6:53:f4:63:84:2c:68:f6:fa:c4:49:12:bf:
eb:04:7b:4b:75:0c:e5:91:23:45:10:07:9c:5a:b9:03:38:c1:
ab:41:63:3a:f4:e7:07:88:a2:b3:ad:1e:ed:4e:77:2e:62:93:
9c:98:20:cd:bb:3e:0b:d3:41:9d:c5:e3:05:89:8f:28:4c:d2:
ad:f9:fc:1a:ae:23:af:a9:8d:a6:09:da:43:c9:07:1d:0f:35:
76:79:53:43:41:c2:e5:2d:01:76:6e:5b:39:99:00:f6:df:9e:
af:0a:31:84:55:a1:3f:67:c1:b5:9f:53:1f:83:e9:5e:2c:5c:
6c:7c:25:74:74:2e:c4:9b:fb:2f:fc:b8:15:cc:fa:22:52:78:
73:59:0d:25:66:7c:8e:a4:03:a5:82:50:ed:c6:55:85:09:40:
90:f4:6e:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P698nEWwfUer1W5X3SARxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDE4ZTk2OTBkMGZiNzExYWJmMzg3NGUxYzUwMGE2Mjc2
OTNjMGEwHhcNMjYwNzIzMTcwMDI3WhcNMjYwNzI0MTcwMDI3WjAzMTEwLwYDVQQD
Eyg3NDgxY2RmZDVmMGIxNGZkMWE0NzEyYTFlYjgxMTIxOWVhYTY0ZjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApITXXfMDROM64R5Cyv/Yx6KqNAs3
cYxiD5zFZEhKwKIXZsmYVKNqXqSCtBN63T6m1CFuQkaJ1dq04piMaybAxpFG6vPx
Gnx04Talh522y6lqLE1DH3QqS8GFZ9e2/cjDSwFiz2vbi8E2K8BrNQOC2JG8+COT
jtGSuCQgVYEGVezpcGzzg3wyt+C8wpeYHHawLJwJxK2d/G2AS4Xb61zp3rxeFVoj
Vrg43WR5nivpygXt0GDDlrogguXae/kJQhRqGgfDmbMfIcxdFZgW6smA39ANd0Ta
HAq+xjWfbI0Ocb21gm5KAP3qi9aIURQZ68uelxCfAGuYgayikokmLIiOnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSBzf1fCxT9GkcSoeuBEhnqpk83MB8GA1UdIwQY
MBaAFAhBjpaQ0PtxGr84dOHFAKYnaTwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VHT2xwRFEtM0VhdnpoMDRjVUFwaWRwUEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9lOTc1NjMtYzdlNS00MDM2LWE3OTYt
MjJjMGNhMjEzMzgwLzEvQ0VHT2xwRFEtM0VhdnpoMDRjVUFwaWRwUEFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9lOTc1NjMtYzdlNS00MDM2LWE3OTYtMjJjMGNhMjEzMzgw
LzEvQ0VHT2xwRFEtM0VhdnpoMDRjVUFwaWRwUEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5BdSGPsD
4d0MseOmlxH0i5jNEbqFVMAD2ggZS+g9rTQLxs454M8nrRPh2rWoUlUjVl9djhb7
gQEFX48EfO+3CzKM/2PdNw1/0gzwU+7tFPGRaaG3/y24qFQPQOId/2HGU/RjhCxo
9vrESRK/6wR7S3UM5ZEjRRAHnFq5AzjBq0FjOvTnB4iis60e7U53LmKTnJggzbs+
C9NBncXjBYmPKEzSrfn8Gq4jr6mNpgnaQ8kHHQ81dnlTQ0HC5S0Bdm5bOZkA9t+e
rwoxhFWhP2fBtZ9TH4PpXixcbHwldHQuxJv7L/y4Fcz6IlJ4c1kNJWZ8jqQDpYJQ
7cZVhQlAkPRuBA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:22:24 2026 by rpki-client