Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: PXGPuvBlH7qD4Fv5n+xNd5zZKQUdc3FcRa0SR6UuHNQ=
Subject key identifier: 73:A3:EE:C9:AE:69:C2:00:C9:84:27:E7:58:58:CD:9E:38:B8:23:B2
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 01A00101B737B26C885D665C73687DEE7216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0E3D
Signing time: Fri 14 Aug 2026 16:01:24 +0000
Manifest this update: Fri 14 Aug 2026 16:01:24 +0000
Manifest next update: Sat 15 Aug 2026 16:01:24 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: tfTLfUbDnD/uNpKDXA1UkjILff59nvPFZrhJq2uygss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:b7:37:b2:6c:88:5d:66:5c:73:68:7d:ee:72:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Aug 14 16:01:24 2026 GMT
Not After : Aug 15 16:01:24 2026 GMT
Subject: CN=73a3eec9ae69c200c98427e75858cd9e38b823b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:53:a9:5b:a9:4d:70:2a:8c:b0:42:f3:23:
37:5a:0a:d3:1e:46:0a:69:39:27:de:56:96:cd:75:
59:f9:32:46:cb:b1:c1:f8:9a:c8:1c:f5:bd:75:40:
9f:ea:ef:c7:71:e4:ca:b5:28:03:ee:ea:40:f8:a0:
02:e1:e9:1d:8c:14:d6:80:a3:40:b1:ca:e6:17:54:
e0:eb:11:e4:11:66:24:2c:29:03:c0:71:01:94:b5:
03:30:84:d5:ed:87:c0:7d:ad:8a:ca:65:d6:b0:7c:
1f:bb:8e:f9:ca:d8:29:99:86:08:e7:f2:12:21:32:
99:7d:90:09:fd:75:6b:f3:61:6f:6e:19:83:19:35:
59:a3:b7:08:a0:53:34:76:94:ba:f4:0b:11:cc:02:
53:1b:b6:03:49:7e:68:43:f7:cd:eb:c3:65:e6:a0:
b5:c6:eb:c6:b4:b4:36:1c:a2:5d:9b:3c:ad:02:43:
9a:4c:56:84:e3:0e:d7:76:3e:5b:c0:72:79:c9:5b:
eb:61:85:7d:93:3a:40:0d:6b:8f:1b:e9:b0:34:dc:
a3:1e:b2:d7:4b:ae:b0:2e:4b:0b:eb:11:e8:be:cd:
1e:59:dc:23:a0:3a:c0:b3:f6:2f:58:e3:48:a6:b1:
9e:34:ee:12:18:0e:aa:48:49:8c:8b:0b:6f:97:37:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A3:EE:C9:AE:69:C2:00:C9:84:27:E7:58:58:CD:9E:38:B8:23:B2
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:f9:05:5d:7a:00:9b:93:34:5d:42:bc:48:19:fe:c5:46:17:
d0:53:b3:fc:1a:37:ac:94:b0:dc:db:e7:eb:4d:aa:c7:12:74:
3d:f2:d8:2f:d1:4b:d5:c5:17:77:4f:fd:69:74:e0:e3:32:d5:
5d:1f:9f:12:f9:01:12:8e:5e:93:95:bb:cf:a9:0a:9d:76:87:
1d:5f:f9:39:b1:d1:1e:07:f7:94:61:fa:00:75:dc:03:97:be:
d4:0d:84:c9:13:0d:14:e5:8e:5c:b7:44:58:ca:36:56:56:0b:
2c:24:88:51:59:3d:56:1e:be:8b:24:50:db:af:07:4e:6a:90:
89:fe:f6:a2:1a:5f:9c:38:73:22:1e:ea:9e:95:e8:c8:b3:bc:
9e:a5:25:2f:a6:b7:35:d9:18:e5:1f:25:a5:53:84:46:65:46:
69:fe:06:7b:01:0d:db:64:51:5b:c9:1e:6d:17:38:8e:7a:79:
5e:3a:c1:f7:f9:8a:33:e9:5d:06:16:51:7d:f5:3d:ac:bf:17:
b1:6f:20:c0:7a:a0:b4:af:ec:7d:09:85:c1:6a:7c:64:ac:91:
28:03:ce:d9:3b:a3:24:d6:36:2d:13:b4:f7:92:2e:db:5c:1c:
fe:11:d1:33:f6:0e:a9:57:b7:c7:f7:db:6b:15:3e:d0:bd:2f:
4c:7f:d6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:15 2026 by rpki-client