Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: 0HPzkNZ2JbR9WhfrdAWEOYULEisCUHHphBR/c4tCE5c=
Subject key identifier: 88:E7:45:24:92:5F:0C:82:80:6A:A6:5A:98:3E:A6:B6:5D:DB:51:3E
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 019F91A4494065B41B86B289AC61538D05E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 198E
Signing time: Fri 24 Jul 2026 01:01:30 +0000
Manifest this update: Fri 24 Jul 2026 01:01:30 +0000
Manifest next update: Sat 25 Jul 2026 01:01:30 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: e/tYyjx/L7QBoQITw+CQdTu+dR/eYEYCyfT2OUAsID4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:49:40:65:b4:1b:86:b2:89:ac:61:53:8d:05:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Jul 24 01:01:30 2026 GMT
Not After : Jul 25 01:01:30 2026 GMT
Subject: CN=88e74524925f0c82806aa65a983ea6b65ddb513e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:06:e1:5d:f1:d8:b9:0f:c9:68:f8:2e:31:
f0:65:13:3c:e9:5d:f4:8f:c0:22:2f:7c:8d:0a:91:
2a:29:62:53:92:ff:62:7c:3c:4a:d7:56:13:b5:3a:
63:bc:8f:5c:7f:23:55:d2:39:98:6b:7b:2a:ba:a6:
26:50:09:3c:8a:fc:83:ea:b5:7e:e8:72:3d:cb:f1:
b1:e6:21:53:cb:65:3e:65:11:22:0b:33:85:68:ca:
26:05:3c:41:4f:38:f0:bc:d8:96:99:9d:a7:ac:cc:
a3:40:ab:47:2b:c5:4e:81:57:ad:3d:4a:9b:dc:78:
84:6a:f2:fa:f2:ce:ab:3a:25:3b:7b:b6:2d:18:d0:
93:52:78:53:10:a6:ff:50:4d:15:2d:30:d3:2f:bb:
b9:27:81:8e:f5:1a:ed:99:8f:b1:8c:e6:08:73:48:
0b:22:f9:f7:8f:0d:22:12:72:d3:9f:f2:aa:0a:27:
77:2a:6b:4b:cf:b7:da:e6:2d:ec:cf:43:79:82:56:
9b:c7:e3:35:f6:e4:3d:3e:ab:b6:ce:02:da:df:42:
29:86:22:5c:8e:6e:24:18:b1:35:c2:c2:64:dc:b4:
5c:9c:df:ea:9b:03:30:3a:80:e3:d9:c5:be:7d:e4:
03:3b:13:7a:64:16:7f:59:ce:6f:35:d1:d5:65:33:
7b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E7:45:24:92:5F:0C:82:80:6A:A6:5A:98:3E:A6:B6:5D:DB:51:3E
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:70:38:d7:18:cf:67:ec:0f:32:e6:2e:74:d9:77:fb:44:9f:
0a:2f:9d:87:ee:47:9e:46:51:a7:d9:8a:8f:65:5e:01:4c:18:
08:60:1f:ed:41:54:7b:00:c3:d1:91:92:28:d5:a2:98:a7:5b:
15:e7:99:ce:8b:82:ff:ee:3f:fd:96:1e:8d:11:f7:a4:cd:73:
06:3b:26:e6:52:76:9b:54:6c:d4:f6:c1:42:21:32:a6:16:1e:
ec:42:a3:47:49:ea:cd:ba:36:4f:36:6b:f2:cb:92:75:26:5a:
ad:53:c5:67:67:5a:48:34:68:82:93:0c:78:58:b5:48:1f:0c:
cc:6d:68:52:05:99:d3:96:64:b7:50:6c:38:ae:72:91:69:97:
b6:86:db:d4:a7:c8:6c:9b:e3:d6:93:f8:19:f8:02:c3:a7:d5:
64:70:0a:dc:74:a0:b6:06:94:e1:54:b4:f6:37:f8:93:21:ac:
01:9c:51:5f:09:bd:ff:b6:0e:c0:44:b0:e3:73:41:bd:aa:67:
8b:57:10:df:ba:19:6b:0c:46:ac:39:62:37:04:cb:e9:27:f2:
84:92:06:28:ee:8a:c7:60:8f:9d:e9:23:06:49:ca:bd:22:15:
a1:fb:7b:38:7d:c4:24:db:33:a6:d5:1d:43:89:92:60:7f:46:
8b:bd:c8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:52 2026 by rpki-client