Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: Y6Kmm4AXE2g5Z3DAJcDzYUNxDrn8zZAgi7xVdRKj+mY=
Subject key identifier: 3D:69:9D:C8:55:DE:80:D1:C4:55:9C:1E:C3:6D:51:C3:12:BB:FE:5A
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 019F19438BAD6E920B6F07062E88AA91C7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0DC5
Signing time: Tue 30 Jun 2026 16:01:24 +0000
Manifest this update: Tue 30 Jun 2026 16:01:24 +0000
Manifest next update: Wed 01 Jul 2026 16:01:24 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: aZOgYJBEQpgstfkKHrtDfX6VumfoZBBcErNsJjla5os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:8b:ad:6e:92:0b:6f:07:06:2e:88:aa:91:c7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Jun 30 16:01:24 2026 GMT
Not After : Jul 1 16:01:24 2026 GMT
Subject: CN=3d699dc855de80d1c4559c1ec36d51c312bbfe5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:27:66:79:80:9e:f9:ea:48:b7:4f:24:30:bd:
ea:0b:77:93:2c:c6:d8:0b:c7:38:40:b0:e1:fa:d0:
98:a6:85:27:e6:70:a5:69:2c:27:57:ac:24:a8:72:
6d:08:52:e4:12:d6:46:d3:f7:c3:2f:9c:2d:e4:73:
68:c4:6c:27:34:c5:ea:a7:6e:0e:e1:d5:67:82:81:
42:5a:a4:79:56:99:a0:64:d8:bb:ad:99:2b:5f:cb:
0e:72:82:33:79:e6:8e:38:10:43:a8:06:19:3d:6d:
64:80:8b:7f:44:c0:0e:55:c6:7f:5b:06:0c:2f:82:
9f:24:a6:f5:36:11:27:dd:fc:2c:d5:e0:9f:02:93:
be:f8:17:2e:f2:d0:d2:e7:76:dd:82:5e:e8:ab:0a:
cc:fa:08:2a:ac:0d:49:fb:fd:63:ef:16:3d:c5:de:
47:0e:7f:22:5b:67:9f:76:96:0b:96:41:8d:63:df:
4d:e9:14:05:f8:b5:ad:91:97:24:7d:28:2a:17:3a:
96:fb:93:a8:3c:fc:4e:e0:0b:82:cd:d1:b3:25:b1:
89:7e:c4:f1:9d:e2:04:28:77:c1:29:50:a1:1c:0f:
40:28:98:02:aa:db:35:b5:9d:17:9e:34:51:1b:b4:
19:33:26:f1:c3:84:ca:f1:a1:3f:a1:e8:3c:de:b1:
e0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:69:9D:C8:55:DE:80:D1:C4:55:9C:1E:C3:6D:51:C3:12:BB:FE:5A
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ad:f7:c7:36:0e:d4:c5:b8:c9:26:09:13:f9:af:ca:3c:ce:
c3:b2:b5:af:29:39:be:5e:dd:90:99:28:0d:b0:c9:10:bf:e6:
76:f2:95:54:d5:ab:62:da:1d:3f:23:fc:51:f4:c1:a3:d0:2f:
70:64:20:74:d2:e7:44:20:64:21:89:12:ba:50:18:7a:c4:aa:
ef:7a:4f:92:4e:65:05:33:47:22:e8:f5:58:4a:45:d9:89:75:
a7:0f:0d:19:9c:25:e2:52:af:f0:0a:07:e4:1c:ed:0d:bd:9c:
e2:6a:56:08:aa:c4:58:1c:be:0a:73:b7:31:03:c2:c0:89:1e:
c6:fd:27:77:86:54:cf:9c:d7:c4:bf:fa:26:19:77:f8:8c:6f:
70:d9:aa:d5:7c:17:63:b7:07:54:bb:3e:93:0b:58:ee:2e:31:
0d:a0:05:29:a9:07:78:db:d1:b3:8a:03:1f:5b:fa:bd:aa:33:
13:cb:1d:91:0a:bf:d0:e2:06:13:ca:74:fb:99:e0:67:07:45:
cc:64:1d:1a:2d:c2:7d:78:07:29:84:28:e8:70:93:90:64:9d:
ad:eb:77:04:e0:30:31:13:05:49:d2:02:b1:76:00:0f:20:f9:
dd:8f:7f:27:f4:5c:81:1e:3b:5e:65:0f:82:d0:96:d2:87:b4:
97:64:c1:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZQ4utbpILbwcGLoiqkcfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzdiZDE0MzI5ODZkN2I1YjljNmU5Mzg2NWU1NDNhYmFm
NGYwZmIwHhcNMjYwNjMwMTYwMTI0WhcNMjYwNzAxMTYwMTI0WjAzMTEwLwYDVQQD
EygzZDY5OWRjODU1ZGU4MGQxYzQ1NTljMWVjMzZkNTFjMzEyYmJmZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCdmeYCe+epIt08kML3qC3eTLMbY
C8c4QLDh+tCYpoUn5nClaSwnV6wkqHJtCFLkEtZG0/fDL5wt5HNoxGwnNMXqp24O
4dVngoFCWqR5VpmgZNi7rZkrX8sOcoIzeeaOOBBDqAYZPW1kgIt/RMAOVcZ/WwYM
L4KfJKb1NhEn3fws1eCfApO++Bcu8tDS53bdgl7oqwrM+ggqrA1J+/1j7xY9xd5H
Dn8iW2efdpYLlkGNY99N6RQF+LWtkZckfSgqFzqW+5OoPPxO4AuCzdGzJbGJfsTx
neIEKHfBKVChHA9AKJgCqts1tZ0XnjRRG7QZMybxw4TK8aE/oeg83rHg0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1pnchV3oDRxFWcHsNtUcMSu/5aMB8GA1UdIwQY
MBaAFAs3vRQymG17W5xuk4ZeVDq69PD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3plOUZES1liWHRibkc2VGhsNVVPcnIwOFBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jNGQwODQtMWI2OC00ZGEyLTk4YzYt
NDU1ZDUyZjkwMGMwLzEvQ3plOUZES1liWHRibkc2VGhsNVVPcnIwOFBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jNGQwODQtMWI2OC00ZGEyLTk4YzYtNDU1ZDUyZjkwMGMw
LzEvQ3plOUZES1liWHRibkc2VGhsNVVPcnIwOFBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnK33xzYO
1MW4ySYJE/mvyjzOw7K1ryk5vl7dkJkoDbDJEL/mdvKVVNWrYtodPyP8UfTBo9Av
cGQgdNLnRCBkIYkSulAYesSq73pPkk5lBTNHIuj1WEpF2Yl1pw8NGZwl4lKv8AoH
5BztDb2c4mpWCKrEWBy+CnO3MQPCwIkexv0nd4ZUz5zXxL/6Jhl3+IxvcNmq1XwX
Y7cHVLs+kwtY7i4xDaAFKakHeNvRs4oDH1v6vaozE8sdkQq/0OIGE8p0+5ngZwdF
zGQdGi3CfXgHKYQo6HCTkGSdret3BOAwMRMFSdICsXYADyD53Y9/J/RcgR47XmUP
gtCW0oe0l2TBuw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:18:29 2026 by rpki-client