Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: q8vF9odGIBvJ6K18kjbQpG1z3n9+wuvMGzU1kkIPffY=
Subject key identifier: 25:A1:28:34:CC:9D:7F:8B:AC:2D:91:D3:64:B6:83:60:0F:F5:7B:C5
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 019FA82B5715BF5FA4683BB64D675B3A0B2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0E0F
Signing time: Tue 28 Jul 2026 10:00:40 +0000
Manifest this update: Tue 28 Jul 2026 10:00:40 +0000
Manifest next update: Wed 29 Jul 2026 10:00:40 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: rtM7xqqYtOe0L6Sx8XKdPUAkvFHBMIZVnxJl5jNPPEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:57:15:bf:5f:a4:68:3b:b6:4d:67:5b:3a:0b:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Jul 28 10:00:40 2026 GMT
Not After : Jul 29 10:00:40 2026 GMT
Subject: CN=25a12834cc9d7f8bac2d91d364b683600ff57bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:48:5c:c0:2c:8a:4d:18:b7:74:33:b7:d5:
f0:f9:eb:23:22:56:9b:f7:3d:25:a8:be:e4:d6:08:
65:c1:69:3b:b5:36:a7:24:94:99:ca:22:a0:dd:18:
32:4b:53:bc:25:77:9b:fa:1a:3a:5d:61:31:cd:b3:
f1:39:55:a5:b4:6a:37:0a:a5:be:96:4c:f0:c8:f7:
23:36:cc:84:70:11:e5:df:2c:21:17:4c:bb:d1:94:
a9:01:75:35:b7:13:ec:a5:d2:45:3d:74:9a:b4:6c:
c0:55:8c:5b:dd:d4:91:ea:68:54:fa:23:a3:66:a2:
98:3c:a6:15:e0:15:90:6b:c7:db:31:79:ce:13:d7:
3c:58:57:fd:36:ee:09:87:37:66:4b:44:eb:41:76:
1a:8a:6c:73:21:6e:7e:c9:e5:c2:9a:54:6a:3d:11:
78:81:c7:1a:ca:2c:af:6d:a4:da:b1:3a:ad:70:2c:
38:69:91:52:71:99:7a:ef:bb:a5:94:45:0e:b0:77:
e4:93:58:c4:7b:da:f3:54:ab:c9:38:90:3e:bf:2d:
eb:08:5b:cb:a8:4e:93:5f:a1:65:4d:33:0b:f1:47:
27:38:3d:8c:5c:b5:31:75:61:f7:c6:1f:ee:25:02:
74:40:c2:44:a2:f3:33:3b:18:d9:5b:2e:d3:2b:e5:
4c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A1:28:34:CC:9D:7F:8B:AC:2D:91:D3:64:B6:83:60:0F:F5:7B:C5
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:73:38:bd:f3:2f:ac:9b:df:f2:5e:9c:c7:36:58:71:0c:d6:
10:38:21:1b:f2:df:ce:d0:ce:c4:a1:f9:7b:17:40:58:2a:d9:
39:87:d4:da:dd:54:38:3b:8e:63:8f:f2:6f:55:88:f3:9e:3f:
c4:aa:17:41:8b:0b:e4:32:99:78:02:7d:a8:c8:cf:26:a4:24:
4c:5a:39:1f:5f:e2:3b:50:21:04:7b:18:76:41:d7:f2:4e:5f:
95:94:06:e8:77:62:b4:3e:b4:58:38:37:71:3f:1f:99:ea:5f:
37:d9:3d:87:09:ce:a6:81:a2:49:ae:87:93:3e:7c:24:bb:35:
10:8f:ff:b4:d7:a5:96:e0:5a:21:b6:53:c0:5d:58:2d:a2:17:
d4:f8:98:ed:8c:de:14:7e:89:6c:50:12:66:50:1c:1b:d5:3a:
e7:b6:e7:67:4a:31:7a:8f:6a:e9:0c:d0:4c:27:1b:2c:96:a5:
7a:fb:6e:69:09:50:2f:81:6b:6d:61:bc:41:0d:0a:dc:5a:ba:
c2:34:1a:7a:0c:09:be:e0:38:cc:2e:f2:46:ae:28:0b:0b:07:
0a:73:c3:25:07:4f:81:47:08:b6:7f:c0:d1:45:4c:01:88:83:
a3:11:ab:b6:16:e4:de:7c:8f:73:c8:72:be:45:a2:da:c0:f9:
d8:70:e5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:37:20 2026 by rpki-client