Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: 3FmenInEQB7ZTnvAYvG144itUews7VVhyw6kqtdQsH4=
Subject key identifier: 2F:F9:6D:CA:47:49:A1:87:18:6C:6D:AE:A5:A3:B3:8E:0B:38:13:7D
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 019D98F51DBB2011B649521B4CF6683B7AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0CFE
Signing time: Fri 17 Apr 2026 01:01:33 +0000
Manifest this update: Fri 17 Apr 2026 01:01:33 +0000
Manifest next update: Sat 18 Apr 2026 01:01:33 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: VYgQ/bCxNnam8vvV1vkcT/mnGpi1gcjemhQydlMRqP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:1d:bb:20:11:b6:49:52:1b:4c:f6:68:3b:7a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Apr 17 01:01:33 2026 GMT
Not After : Apr 18 01:01:33 2026 GMT
Subject: CN=2ff96dca4749a187186c6daea5a3b38e0b38137d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f8:30:11:45:a1:88:0d:69:52:e1:29:3a:5d:
5b:e7:45:46:2d:37:04:4f:86:11:d8:42:50:57:ab:
23:20:a0:ac:d2:3b:87:9a:3e:c9:f2:d2:0d:aa:80:
b4:2b:18:2e:66:98:96:ab:4a:77:27:00:f2:d7:06:
7c:f5:ae:2c:7c:ef:32:18:9c:54:62:d0:db:86:a7:
b0:4c:0c:d2:db:d1:13:da:46:b9:87:86:c6:dc:1e:
69:51:73:ec:96:cc:6a:27:46:4d:52:b1:87:04:c7:
f6:37:3f:6d:bf:a2:7b:66:19:29:cf:0c:60:bd:95:
19:0f:06:c5:d8:e5:5b:e7:56:ec:cf:7b:21:3e:c1:
94:41:c3:19:81:27:03:46:73:21:41:88:c5:a2:a5:
10:9f:2d:49:e6:ee:2d:39:dc:bd:86:db:15:21:49:
73:46:58:1d:d8:d4:ed:cb:2c:1b:76:35:b6:3c:05:
2a:7e:64:84:46:92:78:56:6e:82:23:a9:15:94:48:
7d:f0:27:62:f4:9f:cd:0c:fb:f5:6e:df:01:17:22:
27:c6:64:d1:11:38:da:c0:eb:41:22:0c:3c:79:28:
2b:46:92:48:73:f8:49:6c:1f:67:c3:7d:2a:ac:5d:
fd:ac:10:d2:02:9b:8c:66:0e:b0:0a:12:c1:bf:cb:
3e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:F9:6D:CA:47:49:A1:87:18:6C:6D:AE:A5:A3:B3:8E:0B:38:13:7D
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:64:21:32:96:ea:84:18:f8:8f:30:41:3d:a7:b1:3f:44:7a:
8e:f2:bb:05:01:ec:50:cb:28:4b:43:15:5c:76:ca:f9:b1:f0:
25:b9:8f:81:54:60:ba:34:40:3e:df:42:5f:16:86:e5:cc:51:
9f:4a:2e:fd:00:56:9d:6e:75:7c:41:e0:31:9b:8a:9b:d6:79:
17:04:72:30:0f:6e:bc:5a:2e:07:ab:53:fd:39:09:1f:ff:d0:
e1:80:80:ad:5b:7c:5a:11:6e:5f:49:fc:71:6c:ed:9a:a0:8c:
26:d4:b2:e5:e7:1e:07:b6:a2:2e:4d:46:97:b0:69:60:b4:21:
d1:46:0e:37:61:96:46:0b:a0:32:79:51:ff:25:82:45:2f:c0:
25:7f:1f:cb:da:8c:d0:be:82:ae:62:1c:6a:ef:db:d0:ae:09:
1b:cc:94:2a:80:d3:12:65:64:40:59:72:24:ee:2a:59:c4:34:
fc:98:e8:e6:c5:c1:26:b8:95:5e:aa:34:ee:64:55:71:30:8d:
21:b0:8b:ea:2b:0d:0f:fd:ba:2d:64:67:28:78:e0:87:a1:39:
a7:b2:4b:c4:bb:a2:40:17:58:a4:4e:71:71:fa:72:76:6d:3d:
ca:f1:b0:26:9a:f5:a7:4c:d3:d1:df:9d:7c:39:bc:0d:ec:e5:
d0:57:77:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:40 2026 by rpki-client