Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: JJI0QQfAcAzAnBorPajuj/d2bFekFHZHjPgVK7oCADI=
Subject key identifier: D7:0A:66:AE:C0:2B:A6:8C:B2:C9:46:B1:E6:7E:CF:58:D9:B9:90:38
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 019CAC0FF3AE7B3B907E8FDF8FD662B57393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 180E
Signing time: Mon 02 Mar 2026 01:00:52 +0000
Manifest this update: Mon 02 Mar 2026 01:00:52 +0000
Manifest next update: Tue 03 Mar 2026 01:00:52 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: PF8N0hqy8DbV7LmKzrWlNh/LVAZdHsylhaeyUVToRkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f3:ae:7b:3b:90:7e:8f:df:8f:d6:62:b5:73:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Mar 2 01:00:52 2026 GMT
Not After : Mar 3 01:00:52 2026 GMT
Subject: CN=d70a66aec02ba68cb2c946b1e67ecf58d9b99038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9f:1c:c4:40:7d:76:3c:fb:99:1f:c2:e7:13:
8a:7e:13:8e:96:37:e4:30:0a:c1:1e:a7:08:59:e7:
8b:c2:ba:fa:9e:48:ff:4e:0a:05:d8:36:02:dc:c9:
53:1d:dc:a8:b0:0d:b3:64:97:ea:41:67:16:8c:1e:
6c:a5:62:34:91:5d:bf:b3:42:ae:04:07:e6:88:27:
21:01:37:99:44:1e:f0:24:8b:ef:3c:54:08:c7:82:
d6:56:c4:92:d2:e6:97:ca:b0:cb:61:64:3e:c9:fb:
4f:ab:97:af:af:b2:9a:3b:98:49:8c:b6:a2:58:fc:
b4:a3:9f:b9:e7:12:5c:1e:db:3d:d1:25:fd:16:c6:
1d:ba:c9:f1:8c:10:a4:71:53:46:31:05:40:31:53:
5a:da:2a:85:b2:de:6c:cd:21:01:89:7a:d1:b8:16:
2c:17:eb:ef:7a:4b:3c:3f:a3:e7:21:3e:df:a5:1b:
27:04:82:df:93:e4:f4:be:78:0c:65:88:41:65:58:
03:9e:f0:e1:16:5b:84:bc:96:05:f4:c1:83:3a:0a:
85:74:f4:da:77:bf:fc:c3:6c:a8:32:94:03:a6:a0:
49:cb:84:8c:e8:d2:89:57:23:3d:c0:c9:3c:f3:22:
23:f2:b0:e9:72:e3:69:a2:ed:da:c7:b8:ce:2c:6f:
89:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0A:66:AE:C0:2B:A6:8C:B2:C9:46:B1:E6:7E:CF:58:D9:B9:90:38
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:17:1f:87:b7:48:ee:02:33:8c:ec:23:9d:61:7d:21:1b:7f:
de:4f:d0:4a:82:16:ef:ca:33:f2:8c:87:53:d9:e4:54:92:65:
4d:11:6b:c1:b6:35:8a:2b:71:74:c1:af:82:d5:86:9e:e7:ab:
6c:90:c9:38:b4:92:fc:9b:96:24:3c:4a:c8:9d:41:bc:96:86:
2e:7a:5b:9b:b6:5d:70:60:e2:59:4b:c6:dc:66:9a:b9:ff:a0:
86:fd:32:e0:fd:bd:d4:d4:e2:ee:7f:47:52:e0:e4:51:7f:c2:
64:08:0f:b2:28:cf:b8:cb:3e:1f:3d:04:cf:84:a5:c1:f8:cd:
2f:46:a1:d5:c7:68:51:77:e1:cb:e9:6b:fd:a8:89:8a:e1:c3:
b1:e8:6a:5f:7d:f6:c3:6d:16:32:d8:f3:67:e1:e9:39:81:86:
da:ac:90:01:a1:13:84:d4:e5:23:48:63:e2:fb:88:49:c5:c4:
a0:74:02:40:e4:cc:0a:d0:39:af:e8:83:01:37:cc:ca:a3:d5:
59:45:cb:af:db:d7:ba:56:96:6d:8c:97:f6:a0:98:2d:72:9a:
0f:26:48:23:c0:c9:1d:98:2d:78:92:f1:76:80:2f:a5:4b:51:
51:d0:2f:30:f0:85:2d:87:42:2b:ea:e7:02:25:13:ec:b4:3e:
c0:9b:49:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:23 2026 by rpki-client