Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: kR9oSUXR2AC/J6h8TFxmSziu4cnuPzcDzZNPMZJsFSY=
Subject key identifier: 28:2D:FB:97:E8:44:96:B8:81:63:EB:BC:43:8B:11:D2:27:FD:37:B5
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 019FACAD6B54D06428978FDA6A12FF9D0B4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 199C
Signing time: Wed 29 Jul 2026 07:01:13 +0000
Manifest this update: Wed 29 Jul 2026 07:01:13 +0000
Manifest next update: Thu 30 Jul 2026 07:01:13 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: dNwoEYlFcX42wa+1rTSiGpkTNdghVPwgBVM1gQDvOfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:6b:54:d0:64:28:97:8f:da:6a:12:ff:9d:0b:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Jul 29 07:01:13 2026 GMT
Not After : Jul 30 07:01:13 2026 GMT
Subject: CN=282dfb97e84496b88163ebbc438b11d227fd37b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c3:f2:5a:fc:30:f8:f3:c9:e9:00:db:35:5b:
88:00:95:5c:83:d3:9e:7e:ab:3a:c7:b3:47:cf:ec:
80:b3:e4:a4:fc:ca:4b:ec:1d:4f:e1:69:5b:bd:c8:
76:0b:67:67:f9:1f:98:ab:88:2c:37:fd:8f:83:ab:
3f:90:3c:fe:29:6b:4f:3c:20:4e:c7:a0:33:44:40:
87:5f:23:ef:4c:fc:d1:a1:e4:46:83:6c:31:d6:c0:
4c:48:e5:3e:37:86:00:3a:16:1f:0c:08:8a:7f:a5:
86:4a:fc:7f:ed:c6:83:6e:54:a0:07:ef:cb:5b:ed:
aa:37:cf:12:4c:2b:90:16:4b:77:bb:92:46:f4:13:
16:3c:c1:a5:cd:fe:a2:f0:59:3c:e3:c3:3b:38:b9:
48:5d:13:e9:4e:39:f8:61:5b:b3:68:76:a6:79:08:
6d:a1:11:df:30:4c:38:db:0f:08:3b:71:b4:bb:08:
ea:5d:a1:5e:ca:d8:ac:37:75:f9:16:fe:df:7c:c0:
61:e9:85:f9:6f:fc:c0:1a:56:14:15:8f:83:f6:5a:
af:e4:67:54:ec:f5:1e:2f:1d:f6:03:1c:61:be:e7:
c9:47:56:26:d8:b0:1a:71:81:c7:55:39:e1:32:da:
a5:16:91:21:30:b5:d2:9f:3a:ba:d5:c9:33:79:31:
aa:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2D:FB:97:E8:44:96:B8:81:63:EB:BC:43:8B:11:D2:27:FD:37:B5
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f3:ef:97:07:fe:c7:90:8e:7b:1a:06:29:1f:12:40:e8:7f:
6f:db:bb:2c:9b:f2:4a:58:c1:06:b1:b0:35:38:5a:3c:e1:4e:
d0:e2:2d:1d:9a:3b:b0:e8:00:73:36:56:71:41:2a:55:16:74:
43:83:32:78:0c:40:99:db:d1:1c:dd:b2:f5:0c:05:0b:bb:44:
9e:a1:6e:48:a4:77:eb:8a:e3:a3:d5:1f:b5:3e:01:cd:96:37:
01:c2:cf:d8:cf:f6:91:dc:d7:cc:db:b6:b9:28:8a:f9:d0:b3:
8e:5a:9e:22:3c:44:f0:52:ec:c6:3b:aa:f3:9c:7b:a0:84:90:
41:ee:36:a0:a3:c7:de:b5:a3:6f:60:01:64:48:c6:db:87:1a:
78:2b:49:b6:75:40:72:71:b8:d9:a0:2f:9d:ca:8f:d9:fd:ef:
d9:18:6f:78:db:28:35:f0:29:a1:b6:ad:69:4a:3b:73:62:b5:
ee:96:b7:49:ee:a8:4a:be:5f:ef:94:39:0f:02:ec:4f:ce:08:
d2:3e:38:02:9c:10:2a:1b:4b:39:c7:1e:d1:53:77:40:99:0d:
a0:95:07:b2:0c:02:eb:b1:3d:65:54:db:df:1b:11:c1:e1:0d:
e0:f4:54:f2:ae:0d:3b:41:eb:dc:60:ce:cc:3c:d2:b8:a4:83:
7e:7f:af:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:06:29 2026 by rpki-client