Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: BB8wTbQK676yAolKJ6ph4NyhgYu2wQXwn4ZlWP3K+tQ=
Subject key identifier: F9:71:14:7C:0A:41:00:02:A5:50:58:B4:4F:31:2D:AC:FC:3B:11:21
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 019D390A1E1F6AD936F65AFE43DBEE4DE0F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 1857
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: JzzI6OWcxUJv00CfA64fNyWL9kBSAndnEzvlZ1+i+5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1e:1f:6a:d9:36:f6:5a:fe:43:db:ee:4d:e0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=f971147c0a410002a55058b44f312dacfc3b1121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3c:b2:34:c8:7c:6e:1a:be:e9:7a:29:06:51:
02:e8:a6:ca:70:34:74:6d:31:54:a5:69:1b:aa:0f:
37:f9:b2:e8:4b:30:3a:6b:79:f6:9f:9a:ed:c4:fc:
b2:40:2c:61:b5:44:d7:71:e0:48:6c:66:cd:c6:fd:
78:bd:90:5a:bf:59:de:19:e4:69:f3:82:06:7f:7c:
f1:29:dd:22:a6:c1:11:a3:55:08:cc:38:5f:d4:6a:
3a:46:c4:1b:d1:2d:01:8c:87:c4:3a:37:6f:2b:17:
42:44:7e:61:36:ae:ea:0f:5d:58:ce:c8:31:fb:9a:
15:84:e6:63:6a:9c:dc:87:e2:11:6e:0c:3c:bd:e8:
78:24:0d:2b:c5:e2:28:e0:e9:6e:55:d4:74:35:41:
93:00:f8:ef:33:6b:85:4b:44:14:f1:ff:64:2b:3a:
b5:58:e6:e0:a7:ca:04:3d:f6:dc:f5:ad:bf:87:01:
b7:e6:44:bd:c3:86:fc:a2:ad:4f:f2:70:63:7b:17:
58:87:24:f2:5c:c4:63:c8:aa:40:8b:bf:f8:83:60:
81:5c:79:36:c8:f3:de:e0:06:de:bf:cc:7d:2b:25:
02:38:64:be:8a:01:4f:13:b1:99:0c:65:5a:aa:80:
32:2a:2a:95:a0:cf:6a:c9:15:43:53:51:49:c8:bf:
26:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:71:14:7C:0A:41:00:02:A5:50:58:B4:4F:31:2D:AC:FC:3B:11:21
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:51:7a:51:f1:1d:ec:57:7e:24:9c:8a:c2:8a:fa:e6:fb:ef:
9f:86:28:35:d0:8d:4a:39:93:ab:a8:21:9c:88:64:b5:71:2b:
7e:d1:97:e1:c8:c2:21:98:fc:56:47:fe:0e:cd:b1:21:cb:a2:
51:ca:c0:e8:6f:12:0c:34:b8:6d:d7:05:a7:c1:fd:b8:c3:81:
d1:d2:69:5f:b2:77:01:63:b8:08:00:8e:39:e2:d3:e5:85:bf:
6a:0e:a8:cc:ce:b2:05:68:5a:20:91:79:40:75:75:e1:f3:5a:
9e:8b:86:db:90:d9:f9:16:34:44:ee:60:6f:b4:e1:c9:26:be:
5b:67:05:86:d5:c3:4a:89:3f:00:27:df:f3:17:06:ba:be:78:
cc:e9:e8:b1:f8:56:44:4d:1f:76:46:45:cd:96:1a:96:47:d4:
46:03:94:6e:79:70:8e:50:78:72:16:79:69:7f:cd:ec:35:4a:
82:36:d4:1a:e8:98:45:8a:3e:13:5e:77:f6:eb:be:6e:8a:62:
f2:67:90:f6:a3:86:47:cd:bd:20:08:e7:a4:f2:08:f4:e4:11:
7f:2f:8c:9a:fe:16:db:84:7a:a1:eb:40:ee:a3:f7:8e:70:1c:
89:c8:ed:f9:51:60:da:63:93:b3:de:18:a1:da:c3:55:eb:98:
2e:76:16:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:57 2026 by rpki-client