Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: Y7oBkr7tuAQaVyilQBaBOSKydE9vydXUAs7vfAf+q8o=
Subject key identifier: FD:D4:06:F4:12:BF:24:4A:F8:18:D0:CE:34:25:D8:A8:B2:E3:52:0D
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 019F17F90D2C12EC827767A178223B791C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 194F
Signing time: Tue 30 Jun 2026 10:00:25 +0000
Manifest this update: Tue 30 Jun 2026 10:00:25 +0000
Manifest next update: Wed 01 Jul 2026 10:00:25 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: O8vl/HsCgEL2jfrxRb4+Yeiaju1Nm7MyY+AoHK2oRoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:0d:2c:12:ec:82:77:67:a1:78:22:3b:79:1c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Jun 30 10:00:25 2026 GMT
Not After : Jul 1 10:00:25 2026 GMT
Subject: CN=fdd406f412bf244af818d0ce3425d8a8b2e3520d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0d:a5:74:1f:08:a2:2a:42:56:44:4f:b1:3d:
43:fb:ff:50:eb:6d:80:1c:34:b2:39:3c:89:68:6f:
db:cb:e9:c2:1e:03:5d:99:a6:e4:01:60:9f:fb:f8:
c1:82:aa:e6:c0:bc:df:7c:e0:7f:42:2c:c9:68:43:
94:42:38:d5:5b:b0:3b:57:1c:38:43:f3:23:b8:cd:
d3:f3:b1:8e:7d:c4:44:e9:70:86:6c:fd:0d:d7:39:
de:99:69:5f:6d:b7:3f:77:45:35:bc:96:42:21:d5:
11:94:65:66:e7:b3:1d:5e:23:0c:56:57:ba:71:e9:
5f:51:75:59:a2:dc:c0:a8:e1:41:5d:39:90:be:ef:
53:8d:34:79:5e:a9:09:62:64:af:b0:e6:2b:3d:ac:
d4:7c:0e:3a:93:8e:ae:9a:66:d7:a4:46:93:b1:6f:
56:71:ac:57:c4:38:ff:5b:36:59:7c:ab:b0:e1:02:
c5:c8:9f:68:b3:6c:08:44:e8:95:b2:c8:52:f8:9e:
73:7e:80:ce:82:ea:3f:30:99:35:14:ca:49:06:70:
f4:75:ef:2d:35:73:11:56:64:6d:a2:04:ca:bf:10:
f3:fc:44:3a:98:26:13:b7:e9:66:14:b7:45:75:af:
0d:ba:55:de:05:1b:84:1f:9c:69:55:91:95:81:7d:
ce:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D4:06:F4:12:BF:24:4A:F8:18:D0:CE:34:25:D8:A8:B2:E3:52:0D
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3d:68:9b:d9:ad:36:83:98:36:56:a5:e2:d0:c0:ad:fd:26:
a8:01:32:91:45:d7:ae:a1:87:4e:7d:24:12:19:6c:c5:ca:51:
45:9e:2c:40:1a:e3:2e:00:9b:6a:68:1d:72:72:95:58:20:da:
cc:52:6c:91:14:83:ed:83:30:90:6d:d8:1a:13:39:6f:af:d6:
46:45:48:75:25:6f:2a:de:4f:d5:15:82:42:86:31:e1:32:21:
88:e2:a3:92:ab:3a:30:14:d0:9f:a8:f1:20:6f:35:44:77:04:
c7:c5:f7:7a:42:cc:09:78:54:f3:ec:ef:22:8f:3c:9e:71:f5:
88:89:98:98:27:f8:c2:b9:34:ea:d8:30:bd:28:2c:ee:78:0d:
1f:f3:4d:d9:44:b0:5c:ed:8d:36:c0:94:c4:72:d1:d1:82:21:
87:8c:e1:2c:59:81:7c:25:a5:1c:53:86:95:2d:f6:14:27:ac:
af:0e:2a:42:92:9b:c1:a9:96:8c:bd:f1:10:54:4a:34:cb:e5:
f1:84:27:3b:79:20:99:c1:b8:6b:7d:e5:57:8d:53:70:5d:12:
31:e0:4f:3c:3c:8e:36:53:53:83:6d:66:bd:76:45:f3:82:75:
1a:d3:92:38:4b:91:0b:1f:d3:d0:a9:ee:71:44:21:a5:7a:40:
cf:1a:ee:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8X+Q0sEuyCd2eheCI7eRxYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZTRhYzQ2ZWY3NmU2NWYxNWY1NDBhM2E0MmFhZGVjYTFi
ZjJlZWMwHhcNMjYwNjMwMTAwMDI1WhcNMjYwNzAxMTAwMDI1WjAzMTEwLwYDVQQD
EyhmZGQ0MDZmNDEyYmYyNDRhZjgxOGQwY2UzNDI1ZDhhOGIyZTM1MjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ2ldB8IoipCVkRPsT1D+/9Q622A
HDSyOTyJaG/by+nCHgNdmabkAWCf+/jBgqrmwLzffOB/QizJaEOUQjjVW7A7Vxw4
Q/MjuM3T87GOfcRE6XCGbP0N1znemWlfbbc/d0U1vJZCIdURlGVm57MdXiMMVle6
celfUXVZotzAqOFBXTmQvu9TjTR5XqkJYmSvsOYrPazUfA46k46ummbXpEaTsW9W
caxXxDj/WzZZfKuw4QLFyJ9os2wIROiVsshS+J5zfoDOguo/MJk1FMpJBnD0de8t
NXMRVmRtogTKvxDz/EQ6mCYTt+lmFLdFda8NulXeBRuEH5xpVZGVgX3ODwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3UBvQSvyRK+BjQzjQl2Kiy41INMB8GA1UdIwQY
MBaAFAnkrEbvduZfFfVAo6Qqreyhvy7sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xNzRlNWItM2FhNi00MjYyLTkzMWIt
ZTcxYTc2NTAyY2E1LzEvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8xNzRlNWItM2FhNi00MjYyLTkzMWItZTcxYTc2NTAyY2E1
LzEvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOz1om9mt
NoOYNlal4tDArf0mqAEykUXXrqGHTn0kEhlsxcpRRZ4sQBrjLgCbamgdcnKVWCDa
zFJskRSD7YMwkG3YGhM5b6/WRkVIdSVvKt5P1RWCQoYx4TIhiOKjkqs6MBTQn6jx
IG81RHcEx8X3ekLMCXhU8+zvIo88nnH1iImYmCf4wrk06tgwvSgs7ngNH/NN2USw
XO2NNsCUxHLR0YIhh4zhLFmBfCWlHFOGlS32FCesrw4qQpKbwamWjL3xEFRKNMvl
8YQnO3kgmcG4a33lV41TcF0SMeBPPDyONlNTg21mvXZF84J1GtOSOEuRCx/T0Knu
cUQhpXpAzxru2w==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:16:27 2026 by rpki-client