Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: e//Pv71QtvmVH5psPCUpmhlYuKg1e3jQWRgfHyGtdRw=
Subject key identifier: 2E:CC:FB:75:56:61:3E:F6:1C:2B:66:88:63:53:F2:71:51:34:5F:49
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 01A001A67D573895D504A539630AFAA5D62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 19C8
Signing time: Fri 14 Aug 2026 19:01:23 +0000
Manifest this update: Fri 14 Aug 2026 19:01:23 +0000
Manifest next update: Sat 15 Aug 2026 19:01:23 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: i+beyF/RIoJxw+gScfkZ3gsmWMCCcjisanNHhQKxUbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:7d:57:38:95:d5:04:a5:39:63:0a:fa:a5:d6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Aug 14 19:01:23 2026 GMT
Not After : Aug 15 19:01:23 2026 GMT
Subject: CN=2eccfb7556613ef61c2b66886353f27151345f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:ac:61:f0:4b:1a:02:fa:cf:ee:c7:58:f9:
db:95:3f:1f:1d:43:0c:c9:ed:b2:d9:8a:58:20:08:
39:ba:85:c0:1b:74:06:ee:00:02:39:72:30:e4:7f:
43:f4:64:10:81:62:e4:cb:e2:a4:4f:ad:4e:7b:22:
4b:a5:1b:4d:1f:c8:3f:ba:09:69:66:af:d2:75:9a:
cf:f8:77:d1:f2:69:74:f4:48:83:63:2c:3d:22:30:
48:6a:3d:76:1f:04:97:f2:71:8c:17:be:63:b1:80:
a2:c7:96:be:22:cf:9a:8b:79:92:c9:8c:bc:7a:45:
fa:bb:fc:72:3d:4f:4d:7b:51:9e:65:1f:6a:93:3d:
e3:5f:6e:02:a7:a8:51:bf:50:6e:f4:97:c2:3d:71:
27:a5:23:3e:7b:12:e9:f9:3a:02:a3:a1:7e:68:10:
fc:a0:0a:5e:22:85:a7:5d:eb:c1:0b:db:a3:43:49:
da:6c:3d:f9:20:0f:3a:6d:19:ef:3d:49:8a:61:bc:
42:d3:e8:d4:21:09:bc:19:e7:03:34:9b:77:a0:9c:
40:73:fe:7f:32:97:15:4c:e1:2f:a1:05:33:6e:4e:
24:1c:28:e3:5c:11:6a:19:ad:d4:83:73:11:22:4d:
db:b4:70:8e:49:f8:e7:08:57:0a:1d:1e:9d:87:cf:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:CC:FB:75:56:61:3E:F6:1C:2B:66:88:63:53:F2:71:51:34:5F:49
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:28:27:41:fd:ac:fe:c8:8d:e0:16:f1:b4:89:2a:a6:f0:cc:
e7:f7:7c:91:44:d1:46:bd:64:3d:04:3a:ed:30:3f:30:c6:a0:
c2:b1:c5:0f:d1:06:6e:53:22:b0:4c:6e:9f:7f:c9:30:63:8f:
4b:01:a8:54:89:11:6d:67:81:b9:08:4c:c5:fd:81:b4:af:02:
7a:c8:94:43:b3:bd:ff:ad:e9:38:03:fc:8b:66:5b:72:02:c9:
8a:46:38:39:70:37:79:82:ab:a1:a5:ea:95:87:c0:02:e8:c0:
cc:b1:7a:ed:53:20:2e:b2:69:80:2a:27:cc:fd:2f:01:79:8b:
d4:2a:2c:3c:a3:cb:12:50:14:96:ef:e2:7e:98:d4:70:ce:95:
69:20:5d:52:ca:1d:6f:2b:5a:44:4d:4c:2e:56:a4:5c:52:2e:
d5:8b:d3:b2:f0:a7:00:a7:a0:c8:b3:b5:72:b4:2f:9a:5c:95:
58:61:d0:0b:3a:49:cc:95:37:0b:c0:0d:f3:26:d7:d6:c1:ed:
c8:1c:93:26:c1:80:fb:58:0d:23:92:6b:b7:a2:f6:70:39:76:
3a:7f:67:ae:18:fb:06:c6:80:65:7c:b8:c8:c4:06:8f:85:d7:
63:1a:ca:64:78:b5:f8:e1:0e:ba:92:df:fb:5b:95:e3:a2:16:
5b:bc:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:35 2026 by rpki-client