Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: 7cFrZKGOvRSK0D8kW8kSXpjG/AHhTwuJTrWCE20kjN0=
Subject key identifier: 4C:D5:FC:6E:0E:57:6C:AA:CA:69:FE:7A:6C:2D:3E:54:83:10:40:CB
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 01A0C2C3F39EDDCC5568C3EA4289D9A051B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 1A2C
Signing time: Mon 21 Sep 2026 07:00:16 +0000
Manifest this update: Mon 21 Sep 2026 07:00:16 +0000
Manifest next update: Tue 22 Sep 2026 07:00:16 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: Z7SOzeoH5kED65EndHNSlZIeX5+rdxCvpL0XrLQO3h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c3:f3:9e:dd:cc:55:68:c3:ea:42:89:d9:a0:51:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Sep 21 07:00:16 2026 GMT
Not After : Sep 22 07:00:16 2026 GMT
Subject: CN=4cd5fc6e0e576caaca69fe7a6c2d3e54831040cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:e0:7a:fa:f7:d4:75:7a:54:ae:e6:db:2d:
ff:95:40:eb:fb:7b:8d:c0:21:5a:12:89:92:e6:90:
24:3d:a8:08:43:1e:88:4a:35:b2:45:10:cf:96:58:
b8:72:4e:8c:8b:9c:52:b8:6c:aa:61:5d:1b:be:1b:
5e:bd:d7:1c:a9:70:ec:cf:99:a6:94:0b:8f:5d:9c:
39:e7:ea:ce:66:39:dd:67:84:94:cb:d1:76:b7:7e:
03:97:5a:29:82:2f:26:0f:cd:c8:d8:83:d5:2e:84:
7b:42:ee:ea:12:66:6c:ec:0d:2e:77:47:42:40:ee:
9f:84:e3:72:0f:98:73:cc:fb:8a:c7:9b:b4:1c:73:
d7:cf:98:71:f2:f8:bc:47:d2:be:48:52:ad:fd:3d:
51:a6:1e:4b:74:8d:1f:ab:33:62:1f:60:35:d0:33:
86:17:95:11:5f:00:85:3b:9c:5b:53:8c:58:07:61:
99:0e:3b:13:be:f6:41:1c:86:9b:4a:54:e5:16:05:
f4:4b:65:a2:5b:0a:14:35:75:e1:10:14:25:af:21:
94:58:0f:f9:34:77:36:0e:19:23:74:20:b1:15:7d:
55:a1:1d:1a:b3:06:64:6e:1d:ee:47:31:ad:8a:9e:
61:41:c0:54:13:68:01:0c:fc:29:80:92:91:07:9c:
7a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D5:FC:6E:0E:57:6C:AA:CA:69:FE:7A:6C:2D:3E:54:83:10:40:CB
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ed:7f:88:6f:98:b9:58:c0:5a:d9:fc:20:41:ba:0a:b9:5d:
d0:fd:bc:bd:21:61:37:e3:bd:86:2c:c8:75:f0:77:41:b0:9e:
c7:46:2b:33:68:5f:3e:92:45:cd:17:05:a5:67:b8:f4:58:c4:
60:0e:01:f1:38:21:93:ac:df:9f:c8:9e:61:d0:62:3b:0f:f1:
db:23:17:98:6b:4f:30:4f:9e:58:ad:5d:3f:19:0d:a4:f7:01:
ea:2d:01:02:b1:6a:d5:b3:c3:b2:12:7b:57:eb:5f:89:19:df:
fe:62:ab:b9:6c:17:c5:ac:0f:63:a0:82:7f:39:7e:8e:fe:cf:
9b:0e:20:a9:8c:6e:ab:48:d2:5b:0d:40:ae:1c:5b:6d:21:9e:
b7:0e:e8:55:c9:bb:25:4a:f4:28:6f:a9:57:00:4c:fc:3f:f3:
11:67:ca:7e:c7:e1:52:f2:b5:a3:4d:0d:d9:2f:14:83:00:81:
85:b1:83:7c:56:1a:8a:bc:58:4e:93:29:e9:fe:19:0d:d4:a1:
fb:3c:75:09:3b:ec:44:0e:c7:93:d3:7c:39:00:15:c0:e8:dd:
7d:86:c3:20:c0:57:5e:17:50:78:22:1a:8e:a2:b0:5b:20:38:
53:6f:e1:70:b8:53:66:09:39:a7:ab:da:b6:9c:79:f9:ef:c6:
0d:6f:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:00:51 2026 by rpki-client