Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
File: cegLwpz58rQKwwJOD3I126LVelQ.mft (raw, json)
Hash identifier: SvAUxlQ9oWyvTE7UgQ9aZeh9Z8n3PpRy4o+YLBK17Vs=
Subject key identifier: C3:CD:0A:6A:76:A0:09:BC:4B:7B:F8:93:D2:EC:C4:2E:87:47:4F:54
Authority key identifier: 71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
Certificate issuer: /CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Certificate serial: 019D9B87543E8D47C9973D90D9A277F7847F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
Manifest number: 0811
Signing time: Fri 17 Apr 2026 13:00:30 +0000
Manifest this update: Fri 17 Apr 2026 13:00:30 +0000
Manifest next update: Sat 18 Apr 2026 13:00:30 +0000
Files and hashes: 1: cegLwpz58rQKwwJOD3I126LVelQ.crl (hash: IfG759RDX0N/Z60sM4yWFMQDy139rPpuMbJBjUGE794=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:54:3e:8d:47:c9:97:3d:90:d9:a2:77:f7:84:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Validity
Not Before: Apr 17 13:00:30 2026 GMT
Not After : Apr 18 13:00:30 2026 GMT
Subject: CN=c3cd0a6a76a009bc4b7bf893d2ecc42e87474f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:a7:a1:06:52:6b:d6:c2:ef:dc:d8:35:a6:
75:93:3b:48:36:53:b7:0a:8b:a6:e0:33:12:02:c6:
a4:9d:8a:fa:a1:86:e6:fd:83:69:2a:2c:26:77:3c:
d4:2c:b6:9a:99:d1:6f:1a:7d:69:b0:f2:18:08:6d:
51:32:30:3f:c8:0e:eb:c2:01:67:b3:ec:37:d2:d1:
88:0a:e0:30:a9:42:80:02:7d:c0:45:66:53:80:35:
36:0b:00:17:93:97:dc:a0:1d:fa:64:e4:d6:ce:c2:
67:87:74:30:5c:0a:b3:9f:35:16:a8:94:12:c7:93:
49:bc:7c:d6:46:15:dd:67:7e:08:af:42:e2:4b:5e:
36:37:e1:b4:10:b0:80:e1:72:a1:dc:bd:38:4e:34:
fc:13:15:74:1f:ea:f5:34:d4:72:c4:06:a9:70:3a:
09:f2:4d:72:69:a5:ea:29:ad:e0:da:a0:b9:f1:b8:
3e:0b:c2:2b:5d:3b:01:ef:24:af:b3:25:d2:20:6c:
1d:29:b4:46:eb:7b:62:56:b5:73:f8:0d:c2:70:ae:
bc:60:81:92:ac:df:92:01:f1:cc:96:1f:ed:78:b2:
65:76:07:7a:03:00:be:49:04:76:a8:86:c9:60:9b:
c6:0d:2c:9b:13:ae:be:86:a2:1b:05:38:32:90:dd:
68:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CD:0A:6A:76:A0:09:BC:4B:7B:F8:93:D2:EC:C4:2E:87:47:4F:54
X509v3 Authority Key Identifier:
keyid:71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:6a:39:d1:b0:15:35:3f:6b:11:4b:d8:61:98:5b:87:69:2e:
b0:42:19:27:ef:af:8b:ca:cf:4f:6e:29:ab:45:06:06:98:d6:
14:c1:30:ad:f1:47:92:33:42:b6:46:77:2e:60:3a:a2:bc:6e:
c4:c1:6c:7d:84:99:15:51:78:bc:da:cc:c7:15:47:72:b8:8c:
20:32:80:ba:ae:fe:78:cd:94:d9:65:8b:86:a2:48:6a:90:33:
45:db:2d:78:f7:8e:4a:a8:3a:95:16:72:af:1d:76:65:15:d1:
45:b0:0a:28:b6:a5:e5:ab:1e:4e:a2:f5:4b:b1:e8:df:47:b8:
1b:f5:25:8c:76:86:54:d8:c1:cd:42:14:0a:4b:94:42:b2:29:
74:99:98:ea:fc:72:7f:fa:47:f2:b7:0d:36:0d:96:d5:4e:0d:
dd:43:cd:1f:07:ab:df:87:71:f0:66:34:90:c0:25:fe:4a:4b:
5e:57:4f:42:26:24:3a:7e:33:28:2d:7c:06:8a:71:f9:9d:49:
13:08:c5:36:28:42:e0:31:c8:dc:43:7f:9e:19:67:31:66:8d:
e0:91:d3:8d:c1:b0:cd:e7:b5:3c:3d:01:f6:95:4b:2c:e1:bd:
68:48:21:99:e9:f2:76:d5:4d:6d:6c:92:b0:43:77:9a:5f:55:
49:0f:87:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:04:49 2026 by rpki-client