
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
File: cegLwpz58rQKwwJOD3I126LVelQ.mft (raw, json)
Hash identifier: R6xYwobvjDcTYwzuSG0sfgLs4GmVjeZMxL7r/kOVex0=
Subject key identifier: EB:39:AC:D8:65:1F:5C:4D:72:AA:54:BB:55:D7:56:55:45:5E:96:DD
Authority key identifier: 71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
Certificate issuer: /CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Certificate serial: 019CAC0FF06C0A5B1931FFAC9253FF82810A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
Manifest number: 0795
Signing time: Mon 02 Mar 2026 01:00:51 +0000
Manifest this update: Mon 02 Mar 2026 01:00:51 +0000
Manifest next update: Tue 03 Mar 2026 01:00:51 +0000
Files and hashes: 1: cegLwpz58rQKwwJOD3I126LVelQ.crl (hash: s2ApwR63i1qRl3f6GaTWHA6WROSdhj+GR7ExEdaL1yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f0:6c:0a:5b:19:31:ff:ac:92:53:ff:82:81:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71e80bc29cf9f2b40ac3024e0f7235dba2d57a54
Validity
Not Before: Mar 2 01:00:51 2026 GMT
Not After : Mar 3 01:00:51 2026 GMT
Subject: CN=eb39acd8651f5c4d72aa54bb55d75655455e96dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d5:41:9c:61:b7:e2:aa:37:05:ba:4b:35:3b:
ce:62:d2:4f:33:5c:13:fd:82:2e:20:e2:be:47:8a:
7d:7b:3c:fb:39:bc:a9:a9:a5:ff:23:66:94:1b:26:
57:80:37:11:7f:4a:5f:9b:bf:45:a9:44:64:73:c3:
d6:a6:4f:ad:5b:67:89:8a:df:97:a9:80:e3:4d:24:
74:a6:e0:b8:9a:53:c2:99:12:91:8c:a7:e2:b5:5e:
8f:9e:2d:73:89:86:03:8d:e0:6c:6e:05:d0:99:d5:
dd:21:4e:06:fc:ae:29:f6:a7:bf:8f:fa:9c:c3:57:
c9:a1:f1:42:c0:01:31:b8:3f:5e:53:b4:ba:e7:5c:
3c:4c:e2:33:19:3d:fc:cc:44:f3:3c:16:7c:24:5d:
83:96:91:32:ba:bf:2f:ec:03:94:92:06:14:2e:bf:
75:38:75:61:1a:e3:f8:08:12:eb:82:c9:f8:98:c7:
68:30:44:31:ff:6a:ce:d8:b8:1a:27:00:c9:5f:e9:
14:ff:eb:57:80:01:d3:4e:0d:d8:b8:00:b5:81:9b:
02:b5:c5:82:9e:67:37:bc:d4:50:c1:90:87:7d:5b:
90:50:9e:70:45:24:8b:ab:0a:59:75:52:2c:9c:4e:
e8:63:a3:e1:04:94:ca:06:7c:a5:7d:5d:7b:61:dc:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:39:AC:D8:65:1F:5C:4D:72:AA:54:BB:55:D7:56:55:45:5E:96:DD
X509v3 Authority Key Identifier:
keyid:71:E8:0B:C2:9C:F9:F2:B4:0A:C3:02:4E:0F:72:35:DB:A2:D5:7A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cegLwpz58rQKwwJOD3I126LVelQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f50353-f4e8-4f60-ae16-7247304fb15f/1/cegLwpz58rQKwwJOD3I126LVelQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:28:4d:42:54:3e:5f:fc:c1:35:c4:ab:28:b1:f9:da:48:b4:
96:42:73:4a:2e:75:47:e8:84:38:27:ef:66:68:d8:d4:1b:fa:
8e:dd:34:93:b4:45:92:dd:50:6b:fe:55:82:b5:4c:65:04:85:
35:55:67:36:13:75:d2:c8:55:f8:96:cd:49:98:70:48:e0:b8:
8d:c0:3a:d5:5a:56:cd:e0:47:33:2d:a5:0e:d4:7b:cc:0e:eb:
35:2f:a6:b9:fe:45:18:b2:06:e9:db:65:ce:6b:f1:80:89:53:
b3:9f:93:d1:a3:9d:ce:35:fa:c1:67:4e:6d:50:43:f4:98:0c:
70:95:74:2d:20:a5:d8:22:33:fe:32:9e:c8:07:d6:fc:66:4f:
c3:d6:0f:24:a0:3c:56:93:3e:ee:4f:0b:24:59:86:12:96:da:
2e:17:4a:d2:68:9f:de:cc:42:65:14:41:17:be:5d:3c:13:65:
71:4b:b5:a7:86:fa:19:49:de:71:f1:4b:62:be:0b:52:06:42:
82:95:e8:9a:78:77:d1:d3:c7:a9:cc:6a:04:ae:93:6e:cc:ac:
7c:e0:1e:c5:bd:6e:20:bc:42:73:7e:15:78:a3:4f:6d:72:a8:
03:49:2c:7e:40:86:fa:37:fc:f1:ad:c9:34:4d:ad:18:1e:bd:
58:0b:7f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:34:57 2026 by rpki-client