Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: xYcWWw68lq25JXClI7hCcviJ5FeA3WdPwUmKKtRogxQ=
Subject key identifier: 8C:07:8D:B8:E6:F8:AB:12:89:5A:35:0C:49:47:F2:42:2F:60:53:24
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 01A13C6E5C9C020A555358BB5D4493852217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 1A6B
Signing time: Wed 14 Oct 2026 22:00:27 +0000
Manifest this update: Wed 14 Oct 2026 22:00:27 +0000
Manifest next update: Thu 15 Oct 2026 22:00:27 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: CWQzfnWK7NO376PxRf8Jqop7yto2+WjL4xWznIPon30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:6e:5c:9c:02:0a:55:53:58:bb:5d:44:93:85:22:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Oct 14 22:00:27 2026 GMT
Not After : Oct 15 22:00:27 2026 GMT
Subject: CN=8c078db8e6f8ab12895a350c4947f2422f605324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fd:3d:72:24:d4:4f:d6:77:db:e2:ef:78:ee:
dd:29:79:7d:e4:ef:08:fd:b1:3d:c5:9a:52:f8:d8:
e7:91:25:ef:37:13:1f:3d:38:e5:8e:42:2b:ed:37:
1a:cc:47:7e:68:08:4e:3b:8f:36:44:31:f5:3c:ed:
49:34:53:01:21:b0:fd:55:75:4e:8d:f0:5f:d6:e9:
8b:66:52:81:4a:97:24:16:17:e0:03:d5:40:4b:4b:
ae:cf:9c:33:be:73:2d:f2:c2:09:f9:65:69:f6:da:
7c:4f:60:c3:c2:0b:b2:b3:44:46:69:2b:87:47:4f:
44:be:d0:8b:ee:fa:e7:ac:3d:07:4d:97:ce:de:58:
7c:eb:ca:af:a8:17:96:86:64:18:48:dd:2a:d9:ed:
ed:5d:63:0b:b2:eb:6d:bf:6c:59:0b:b0:e2:9a:0c:
4b:43:eb:74:2f:13:b0:ea:b9:d8:16:8f:df:50:1b:
dd:04:37:01:49:78:05:f1:2c:1c:ac:c8:48:15:71:
6c:05:51:19:f4:52:cd:09:3c:64:e4:a8:6e:22:44:
36:90:f5:0c:cd:2e:5a:aa:db:a0:55:6c:a2:5f:20:
8e:3f:db:7f:87:7f:09:5c:4b:fe:2a:41:6f:60:6c:
84:ea:c9:75:a3:8a:ed:d9:46:c1:ec:26:e8:80:8f:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:07:8D:B8:E6:F8:AB:12:89:5A:35:0C:49:47:F2:42:2F:60:53:24
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:cb:f9:fa:30:a4:ec:19:d1:36:2b:61:a2:a9:ba:e9:74:89:
9c:39:ed:63:49:c9:c0:9b:1b:d6:1e:8e:66:af:47:3d:af:e9:
63:64:5d:d1:c2:c5:b5:cb:9b:66:6c:b1:7e:64:37:75:ea:44:
cb:3c:e9:77:b8:9c:ee:87:01:21:f4:8e:6a:6c:c2:98:fd:6a:
b4:1a:66:65:c3:75:da:0d:c9:77:57:ab:f3:dc:0a:f1:08:73:
55:67:55:8d:23:6a:ca:ce:d1:86:4d:8a:07:5a:b5:f9:f8:b7:
d1:08:a2:c8:71:06:a3:54:ee:cb:d9:75:33:1f:f2:77:49:09:
f9:60:e9:68:cb:7c:95:87:ce:87:59:de:d1:c2:4e:b3:27:a4:
a7:0a:e5:cf:f4:d9:d3:3f:fb:eb:92:88:de:41:9e:f8:ee:ba:
9b:89:6a:6a:92:10:65:f6:ba:c8:39:9f:f2:ab:cb:30:95:d8:
08:d3:22:52:a8:be:df:ae:0b:9c:5d:39:3a:f3:77:59:26:ab:
32:22:8c:f7:fe:33:7e:27:a2:79:c2:de:fb:af:2e:f8:04:ca:
df:71:38:7e:2a:3e:dc:dc:28:f0:e9:4f:06:18:6c:24:4b:71:
a5:eb:3a:e2:a7:42:8c:2f:9b:6b:f1:be:1e:38:9b:6a:9b:a7:
41:80:17:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:05 2026 by rpki-client