Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: W9W4ELA2FZesm0KrrSvRgjC3lsQmEe86O7lVCIfVQDE=
Subject key identifier: 01:24:B1:F6:EB:66:06:8F:48:9C:04:53:93:C6:D7:F7:1A:37:B6:03
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 019D3865F9A29CA9C337596FA47B9393E670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0CCC
Signing time: Sun 29 Mar 2026 07:01:40 +0000
Manifest this update: Sun 29 Mar 2026 07:01:40 +0000
Manifest next update: Mon 30 Mar 2026 07:01:40 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: vP3ycfaIT8wybMt8dC/cvWmQ+2Aogk2VpOGVSXk28QY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f9:a2:9c:a9:c3:37:59:6f:a4:7b:93:93:e6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Mar 29 07:01:40 2026 GMT
Not After : Mar 30 07:01:40 2026 GMT
Subject: CN=0124b1f6eb66068f489c045393c6d7f71a37b603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:ba:c8:87:4f:b8:af:4e:12:9e:d8:08:29:
0e:ea:65:86:5b:5b:4c:11:39:db:71:a3:6b:6c:48:
91:21:88:33:b3:77:92:90:21:00:41:d7:cb:94:ed:
95:dc:20:81:ff:78:10:15:d7:97:21:a5:d9:e8:f1:
b9:3a:99:09:70:4e:c1:86:76:76:48:99:b2:b9:96:
33:04:55:91:1f:30:96:60:28:5c:1c:ab:80:b8:7e:
e8:d9:3a:c5:30:d3:0a:54:7b:e4:28:64:90:f5:96:
ad:fc:61:3b:27:cb:3d:be:af:9d:18:4f:dc:d6:05:
84:c5:42:70:1c:40:aa:3f:fc:f9:96:a4:3d:27:cd:
f4:d8:fe:35:9a:ba:3f:67:21:c0:4d:1d:85:e8:06:
06:0a:93:2b:08:23:45:3a:45:5f:ba:a1:2b:45:22:
e1:99:52:68:78:b1:42:c4:02:b2:7f:13:c1:4e:23:
3a:80:33:9d:35:a3:c0:89:4b:70:31:85:6b:e8:90:
b6:01:d0:2d:2c:a9:57:e0:f6:05:3b:1f:fe:c4:35:
9a:4e:35:7a:f1:96:f2:84:4b:22:28:17:5c:cf:0e:
88:23:72:3b:9e:f5:25:99:15:b3:2f:e2:02:3f:71:
6e:9e:d4:89:6b:a5:04:f9:31:a4:33:16:ee:cf:6f:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:B1:F6:EB:66:06:8F:48:9C:04:53:93:C6:D7:F7:1A:37:B6:03
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cd:78:56:80:3d:48:a3:a7:d4:98:b0:f5:ca:84:d9:65:cf:
1c:30:f7:c6:e1:15:8b:63:74:bc:7c:b6:de:34:71:b3:af:56:
6a:07:fb:6d:78:e9:b7:60:3e:fb:83:79:26:f2:b6:1a:9b:11:
30:33:24:5d:d6:7b:6b:8f:8a:19:3a:6d:4b:e6:cd:14:ac:72:
cd:a7:f5:cc:2f:c7:0d:d2:e4:25:d7:df:b2:fe:53:a2:7c:c7:
f1:6e:f6:1f:7f:ef:58:56:0f:08:e6:2d:b9:ca:b0:5a:3b:b7:
01:22:d3:5f:56:b5:81:c3:ee:5d:0c:f2:c7:b7:85:12:30:35:
d3:ed:07:8a:47:f7:22:c1:56:65:23:2c:5e:b3:06:8f:f0:52:
6f:e9:de:ce:95:b7:e0:80:a9:09:2d:85:29:18:87:8b:02:5f:
9a:28:6f:45:75:91:45:96:88:1f:9d:89:ac:77:8b:19:9b:ae:
2d:22:67:b6:a5:78:27:04:1b:3b:0f:e6:8a:8c:38:9f:d6:bb:
7b:3c:bb:ba:2b:4c:53:37:1c:de:aa:4b:97:3c:04:d9:fe:fe:
7a:1a:ae:97:47:98:a5:7d:fc:51:cc:74:50:96:2e:53:7b:38:
65:2e:ec:46:e6:c8:98:cd:c7:62:52:fd:bc:28:28:a1:41:bb:
10:51:4f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:04 2026 by rpki-client