Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: pf+A+dx4yUwc3bY1m2CGfcna++vEeunngfVSkhTBFDg=
Subject key identifier: 72:B3:C9:91:C6:04:B6:37:14:6B:BC:25:50:21:80:F4:27:21:93:6A
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 019CAB6AE92628EC8B206A0648BEE9254EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0C83
Signing time: Sun 01 Mar 2026 22:00:36 +0000
Manifest this update: Sun 01 Mar 2026 22:00:36 +0000
Manifest next update: Mon 02 Mar 2026 22:00:36 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: HyiTLbKQK3Uj9zSlbFPTMtqWX88/UkuByHw0qQzw+WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:e9:26:28:ec:8b:20:6a:06:48:be:e9:25:4e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Mar 1 22:00:36 2026 GMT
Not After : Mar 2 22:00:36 2026 GMT
Subject: CN=72b3c991c604b637146bbc25502180f42721936a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:11:6a:0a:8b:e5:e5:18:a3:ac:d6:ec:31:2a:
e6:86:c9:47:9c:28:26:e4:91:42:7a:ca:87:9c:e5:
66:ea:04:a7:89:3d:b2:ce:08:d6:aa:ec:00:28:d3:
38:ec:1e:b6:a0:77:95:45:20:db:b6:cf:9b:8d:b5:
1a:86:94:27:14:08:1b:9d:68:02:c2:43:e4:d0:a6:
95:68:bc:3f:35:71:47:b8:8e:13:89:4f:80:32:5b:
7d:45:e4:3d:91:22:ec:ac:a4:a8:cf:cc:69:58:90:
5c:a2:b1:8c:5d:52:68:82:c4:18:d3:28:20:61:2a:
c9:d6:b2:de:03:0f:a9:d9:db:a6:72:f1:66:8e:17:
6e:52:d6:18:7f:2d:97:e7:d0:3c:11:76:c2:97:14:
17:1f:f1:46:4c:0b:bc:4b:0e:3b:85:37:c2:a1:00:
db:c8:e1:08:b8:c8:e4:c5:31:cd:04:95:87:30:19:
65:78:37:11:59:b2:95:6e:66:e2:bb:e7:40:22:3b:
c0:01:1f:4a:47:5d:11:7a:0e:12:4d:c8:5f:6c:b5:
af:e0:37:dd:b8:37:34:73:51:9b:f7:88:02:b4:af:
c9:13:e0:01:cc:56:05:48:5d:e2:cb:be:e8:59:da:
f2:7c:b2:55:32:24:dd:d7:8c:57:bb:11:8b:07:6b:
f2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B3:C9:91:C6:04:B6:37:14:6B:BC:25:50:21:80:F4:27:21:93:6A
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b9:46:cd:4e:86:9b:65:95:99:20:96:6a:f6:ed:f0:21:65:
36:71:c4:c7:5a:fe:cc:cf:99:e6:49:56:9b:95:5c:8d:46:eb:
5f:b4:70:73:c6:f3:dc:9f:49:65:70:8a:b3:98:21:ae:21:3d:
78:0a:99:c1:9f:87:50:da:55:56:ee:12:0d:b5:99:5c:6f:96:
10:c8:40:7c:50:3a:5d:8d:95:ca:a5:fd:88:38:e6:d5:76:66:
19:66:cc:fa:15:3e:44:29:ee:49:22:47:62:e6:65:2b:92:60:
9c:10:53:fe:fd:b3:d0:b3:1d:3f:11:a2:f1:f8:7e:13:06:2c:
8e:70:40:92:46:f7:61:e6:b3:1b:9a:0d:ff:71:bc:b6:25:98:
44:f4:da:75:82:ac:f9:56:42:2a:66:33:d0:2b:2d:c6:a3:36:
fd:76:75:8d:8b:85:c9:4c:cb:83:42:df:82:f4:7e:cd:28:10:
fb:05:9d:95:0b:c8:c5:44:eb:07:46:9c:f8:ec:3e:2a:db:04:
37:58:4c:a4:0e:8d:59:ad:8d:0c:27:58:ae:b2:7f:75:78:79:
38:6b:8e:1c:73:e2:e8:ca:47:63:ff:ca:41:70:9a:fa:58:fb:
dd:73:45:ff:7f:0f:d2:7f:fe:bb:d8:9a:50:80:5a:a9:45:9c:
88:99:00:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:13:45 2026 by rpki-client