Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: 1peS36G999/u5WcthK0be1/HE/lEM09zkblqalbUmPg=
Subject key identifier: B3:27:C4:B4:36:3D:3A:3B:D9:F1:34:B0:1E:58:8C:D3:26:80:23:0D
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 019E303BC0D1826313BEEE20D5B72DB0CB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 18D7
Signing time: Sat 16 May 2026 10:01:22 +0000
Manifest this update: Sat 16 May 2026 10:01:22 +0000
Manifest next update: Sun 17 May 2026 10:01:22 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: 71d0ZLRQ6/ARnKAD6qsiY7c0QneYyGZeHZ7f3xTe9cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:c0:d1:82:63:13:be:ee:20:d5:b7:2d:b0:cb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: May 16 10:01:22 2026 GMT
Not After : May 17 10:01:22 2026 GMT
Subject: CN=b327c4b4363d3a3bd9f134b01e588cd32680230d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:48:e8:33:83:b6:a9:eb:ef:e9:50:d3:00:5a:
cd:83:0b:77:f0:02:26:d9:94:fe:17:48:4f:b7:7d:
57:c6:12:bd:e1:52:29:8a:ac:90:f9:97:b0:e1:93:
67:e1:d8:21:fd:33:2e:11:b7:c8:d8:8c:02:f2:60:
14:12:51:20:42:e8:dd:c1:f3:75:f3:73:58:54:5c:
1d:b0:7e:30:2d:e0:99:0e:75:50:3f:44:1e:f0:2d:
65:f0:96:82:f3:4a:0c:a1:96:3e:ff:6b:a2:f3:89:
10:db:d4:7f:24:0b:45:37:b7:48:0e:af:1b:30:83:
7d:60:34:5e:f9:3d:a6:84:01:03:ac:5a:2c:6c:21:
b5:e3:cd:01:15:05:05:1c:a3:ba:2b:c0:42:70:25:
14:4a:95:52:0c:e9:e4:38:5d:bb:23:57:44:fa:3e:
57:f8:7b:6f:0c:48:bb:d3:9f:55:af:79:76:4a:ad:
8e:24:66:46:8c:eb:5c:da:42:e0:35:39:81:57:5d:
43:37:e8:7e:d1:86:91:95:34:c6:9f:a5:56:ed:0b:
d6:1a:fe:5a:42:32:25:af:b1:a7:d6:af:4c:ff:bc:
ff:70:af:b0:af:aa:8a:b6:c9:ea:d4:75:90:6d:cd:
0f:f2:6c:a3:75:69:45:19:fc:f8:fe:cb:6f:59:7d:
cb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:27:C4:B4:36:3D:3A:3B:D9:F1:34:B0:1E:58:8C:D3:26:80:23:0D
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:98:d3:da:15:7b:4c:22:1d:17:2f:99:6d:52:05:f8:89:e3:
6b:93:33:e9:eb:d4:2c:83:f6:77:97:57:b2:00:ca:1d:e7:75:
fb:57:fc:e5:49:a1:47:5f:38:9f:34:47:00:6f:9a:1d:fb:49:
68:92:4b:1f:2e:45:d5:4d:d3:dc:29:3f:bc:c5:e0:df:82:6c:
2b:2a:ac:eb:bc:00:8f:34:7b:ae:ba:ea:0d:59:81:b7:83:9b:
6a:cb:4b:4f:1f:ad:75:1f:fa:ab:80:6c:bc:2e:f6:f2:a7:99:
e7:eb:3d:05:c3:9f:75:80:c3:67:be:52:ac:93:29:0e:fb:09:
0b:95:49:f7:bd:b0:13:e4:d1:43:ba:bb:04:59:5f:f0:75:e4:
85:2c:43:5c:4b:cf:6c:55:35:3d:99:44:e8:14:c9:48:ea:64:
16:18:40:8b:db:ce:a0:ab:de:61:82:d8:64:d4:c6:bf:85:3e:
0a:29:e2:4d:b4:33:b4:9e:8b:57:17:a7:4c:9a:a3:ee:51:d1:
0e:da:01:65:ad:e4:51:a9:77:03:a5:6a:a1:a2:48:7b:2a:2f:
3a:66:63:30:c4:d0:84:61:6d:4e:aa:d8:3c:0a:9a:ee:5c:5f:
fc:13:2b:3b:04:56:89:66:9c:74:65:11:27:9a:90:9d:b1:01:
ba:f5:17:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wO8DRgmMTvu4g1bctsMsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTRhYzQ2ZWY3NmU2NWYxNWY1NDBhM2E0MmFhZGVjYTFi
ZjJlZWMwHhcNMjYwNTE2MTAwMTIyWhcNMjYwNTE3MTAwMTIyWjAzMTEwLwYDVQQD
EyhiMzI3YzRiNDM2M2QzYTNiZDlmMTM0YjAxZTU4OGNkMzI2ODAyMzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UjoM4O2qevv6VDTAFrNgwt38AIm
2ZT+F0hPt31XxhK94VIpiqyQ+Zew4ZNn4dgh/TMuEbfI2IwC8mAUElEgQujdwfN1
83NYVFwdsH4wLeCZDnVQP0Qe8C1l8JaC80oMoZY+/2ui84kQ29R/JAtFN7dIDq8b
MIN9YDRe+T2mhAEDrFosbCG1480BFQUFHKO6K8BCcCUUSpVSDOnkOF27I1dE+j5X
+HtvDEi7059Vr3l2Sq2OJGZGjOtc2kLgNTmBV11DN+h+0YaRlTTGn6VW7QvWGv5a
QjIlr7Gn1q9M/7z/cK+wr6qKtsnq1HWQbc0P8myjdWlFGfz4/stvWX3LsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMnxLQ2PTo72fE0sB5YjNMmgCMNMB8GA1UdIwQY
MBaAFAnkrEbvduZfFfVAo6Qqreyhvy7sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xNzRlNWItM2FhNi00MjYyLTkzMWIt
ZTcxYTc2NTAyY2E1LzEvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8xNzRlNWItM2FhNi00MjYyLTkzMWItZTcxYTc2NTAyY2E1
LzEvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5jT2hV7
TCIdFy+ZbVIF+Inja5Mz6evULIP2d5dXsgDKHed1+1f85UmhR184nzRHAG+aHftJ
aJJLHy5F1U3T3Ck/vMXg34JsKyqs67wAjzR7rrrqDVmBt4ObastLTx+tdR/6q4Bs
vC728qeZ5+s9BcOfdYDDZ75SrJMpDvsJC5VJ972wE+TRQ7q7BFlf8HXkhSxDXEvP
bFU1PZlE6BTJSOpkFhhAi9vOoKveYYLYZNTGv4U+CiniTbQztJ6LVxenTJqj7lHR
DtoBZa3kUal3A6VqoaJIeyovOmZjMMTQhGFtTqrYPAqa7lxf/BMrOwRWiWacdGUR
J5qQnbEBuvUXlA==
-----END CERTIFICATE-----
Generated at Sat May 16 16:24:41 2026 by rpki-client