Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json)
Hash identifier: /gN/xD7wfQKZ4DOhmpUcG7s3SMv89+4o3I+9GU/81uA=
Subject key identifier: 83:9B:EB:60:F6:BF:2A:61:02:BF:25:0C:62:15:37:A7:62:81:AA:E8
Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Certificate serial: 019D27A8A6DE020365675B77CCFA010A377D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
Manifest number: 184E
Signing time: Thu 26 Mar 2026 01:00:57 +0000
Manifest this update: Thu 26 Mar 2026 01:00:57 +0000
Manifest next update: Fri 27 Mar 2026 01:00:57 +0000
Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: JbqlKmidQizlH3SWi8LExTRDmijfEudDHzFhzU1HZLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a6:de:02:03:65:67:5b:77:cc:fa:01:0a:37:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec
Validity
Not Before: Mar 26 01:00:57 2026 GMT
Not After : Mar 27 01:00:57 2026 GMT
Subject: CN=839beb60f6bf2a6102bf250c621537a76281aae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:88:a1:68:7d:6e:16:88:54:d3:c8:b0:db:
8d:87:fc:e9:c6:20:20:5e:19:68:ad:ba:4b:f8:b0:
63:c4:24:80:50:a7:d8:3a:fe:28:50:15:a4:ed:d8:
09:fd:6b:0d:03:cf:2a:6e:1f:e2:cf:b3:2e:14:29:
ee:5b:14:6b:5a:63:90:33:9a:9e:58:0f:e9:63:6f:
2b:e9:97:4c:15:0c:e0:17:20:74:93:97:4b:95:50:
25:33:cb:8b:f4:74:66:d4:ea:95:0c:8d:15:56:67:
02:93:a4:12:cc:94:e8:ee:bc:ac:e6:c7:05:46:f9:
c5:16:ac:28:48:39:81:d1:ba:59:0d:b4:cf:3a:ea:
b3:23:93:78:48:3d:7b:1d:a1:93:77:4a:69:6e:d8:
ff:5c:e9:43:9d:c8:95:08:0f:10:0c:32:d5:39:c2:
58:ca:82:60:45:38:10:14:2f:92:cd:b8:be:f5:87:
63:4c:1b:e4:6a:7a:c6:7b:06:e7:4d:c0:50:63:e0:
d7:84:ae:18:40:93:a0:3e:7f:98:37:1f:f9:db:88:
83:8c:cb:63:1e:f1:7d:f9:9b:4f:40:a0:88:88:42:
90:fd:14:8f:57:20:5d:1d:9d:b9:d7:a8:7a:65:8a:
63:1a:f0:cb:9d:a2:5f:d8:90:1f:b7:7c:c6:58:66:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9B:EB:60:F6:BF:2A:61:02:BF:25:0C:62:15:37:A7:62:81:AA:E8
X509v3 Authority Key Identifier:
keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:7c:d1:4c:ab:12:e2:96:b7:0b:fb:68:7f:6a:80:25:33:9f:
31:2a:d8:70:17:f1:73:b5:f8:59:0a:10:a4:63:91:4a:f8:d1:
ed:ef:1a:99:64:d2:f0:65:59:f9:8a:91:dd:53:ab:de:39:05:
e7:7e:f0:5e:de:40:9d:d3:9f:bd:b1:ae:c8:24:6e:a6:eb:b5:
dd:43:5b:22:e3:93:56:bd:86:8f:14:fb:01:a2:cd:42:35:eb:
12:1c:87:71:bf:c4:7a:ab:bd:b0:1a:f3:02:a1:35:0c:49:81:
b3:04:1d:3b:a3:3e:66:01:01:6d:28:e6:8d:80:b8:bb:03:19:
20:50:ae:2f:9d:38:d5:97:67:b3:2c:1c:3d:33:41:ff:f8:96:
4e:18:9c:25:ec:5d:ce:01:1c:98:c9:b5:4a:fc:75:1d:7d:87:
f9:6d:19:45:e5:c7:4e:7d:fc:07:ef:64:67:a5:cc:62:d0:9e:
e6:83:94:b7:d9:39:47:be:6a:7e:b2:53:55:5b:57:11:d0:28:
54:fb:6b:5f:02:87:65:89:15:22:3c:e5:df:9d:db:aa:75:10:
31:5d:1a:56:8a:b1:32:e0:4b:2a:7b:2a:85:f6:0b:31:85:8f:
08:49:80:af:e1:5a:7f:66:b0:ad:93:ca:0f:30:da:c2:bf:5c:
02:26:87:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:04 2026 by rpki-client