Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: lx0T6Fg+2rhWBEZQyNzwuH05eoZdB1WIvx3oAYp9d5o=
Subject key identifier: 04:79:14:6F:0A:7C:47:73:32:4B:93:A9:54:AD:FE:52:0A:74:A1:A3
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 019D999920A181315C0B144F707539574339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 1889
Signing time: Fri 17 Apr 2026 04:00:42 +0000
Manifest this update: Fri 17 Apr 2026 04:00:42 +0000
Manifest next update: Sat 18 Apr 2026 04:00:42 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: AL6Bz0ma3wGr/HYAvHFOThnFxk3iajHFqQmWcKLo/Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:20:a1:81:31:5c:0b:14:4f:70:75:39:57:43:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Apr 17 04:00:42 2026 GMT
Not After : Apr 18 04:00:42 2026 GMT
Subject: CN=0479146f0a7c4773324b93a954adfe520a74a1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:fe:36:eb:fd:2d:90:03:05:f8:61:dc:c1:
a6:2f:45:2f:f7:8e:98:66:8e:28:3a:75:25:e0:08:
d8:02:56:e4:f3:ee:93:b1:c0:fb:50:7b:0e:66:cc:
10:bc:45:af:fb:22:1c:9d:ea:f4:67:61:19:9b:60:
c8:36:3f:49:82:b2:af:98:55:2e:10:53:60:d6:0e:
01:d7:83:32:aa:fe:b0:d4:fe:64:19:16:28:98:03:
4b:31:50:ee:3b:2d:e9:25:1f:71:d5:d8:22:15:cb:
e1:e5:07:19:57:6c:e4:da:da:1e:f0:02:46:a2:77:
98:be:f6:fe:10:0e:1e:e8:ef:e8:79:0e:73:3a:a5:
a2:08:44:2a:a2:49:87:fb:50:93:e5:0f:69:6d:f6:
7e:f8:4c:e1:ae:4a:b7:79:60:38:53:38:d8:66:c4:
07:23:e8:0d:07:65:16:af:c4:98:e7:06:59:ca:00:
48:b8:98:85:b6:78:60:e8:81:95:df:1b:7e:0d:cb:
25:a5:7a:10:50:3f:ab:e1:df:29:58:8d:33:d4:23:
57:18:67:be:3e:18:4f:a2:8e:1c:bb:b3:71:04:da:
bd:13:3c:eb:1e:b7:8e:08:31:2e:f8:1f:b7:7b:b4:
f2:c4:9e:06:24:db:54:c6:6f:fe:60:28:12:8f:27:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:79:14:6F:0A:7C:47:73:32:4B:93:A9:54:AD:FE:52:0A:74:A1:A3
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d2:6c:6f:68:29:d0:52:38:bc:0e:39:9a:06:fd:b2:bf:62:
c5:00:fd:a7:75:48:68:a3:e6:b9:35:8e:56:43:ee:5c:88:cf:
93:63:c6:1f:ef:2e:9a:1b:dd:3e:8a:58:3c:b0:c2:09:d2:d5:
4e:0b:8f:7a:06:16:9e:ec:59:6e:e9:b4:a6:0b:14:d0:47:6c:
76:01:cd:e1:29:fd:da:dd:ee:6a:dc:ab:66:13:92:ec:bf:b2:
26:f5:16:30:31:f2:44:4c:9b:6c:0b:20:db:9f:e6:5f:0d:6f:
26:8b:c4:a9:9f:02:26:81:7d:0f:27:0e:74:13:bf:4b:08:92:
99:72:b8:09:c2:9c:2a:f0:da:47:8c:49:1d:6f:57:5d:1e:b4:
da:c5:02:73:d6:52:6a:c4:d4:27:4b:a5:90:4e:2c:22:d3:c0:
4f:ae:26:f8:9a:75:90:d2:1d:bc:72:98:39:3c:a3:0b:fc:12:
59:f4:c4:33:fa:36:17:2e:84:87:cb:d6:8e:73:6d:b6:80:0d:
5a:36:7d:fc:07:49:ce:0c:f1:c7:ed:0a:a9:08:b1:fa:9c:45:
b9:01:19:87:c6:21:97:5c:e1:3c:0c:ae:51:d6:02:51:06:1a:
7a:46:5a:69:e6:2e:9e:7f:cb:18:63:93:73:21:1a:43:9f:e1:
dd:7b:f0:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:55 2026 by rpki-client