Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: poPmgTDGBRZkYOTBGbZq9O4/32fq6Wg7MAaP1GsSaYo=
Subject key identifier: DB:FF:B5:3C:6E:09:1D:32:82:0F:DA:09:F0:8E:9E:A8:F7:87:CD:2D
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 01A0DB3BEAAC2B02256C6AAD7957C1A95C4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0EAE
Signing time: Sat 26 Sep 2026 01:02:12 +0000
Manifest this update: Sat 26 Sep 2026 01:02:12 +0000
Manifest next update: Sun 27 Sep 2026 01:02:12 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: KSNPpkBR1Sqj3WrioG86ic1lZM/4eTUBpDSSwlSsMmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:ea:ac:2b:02:25:6c:6a:ad:79:57:c1:a9:5c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Sep 26 01:02:12 2026 GMT
Not After : Sep 27 01:02:12 2026 GMT
Subject: CN=dbffb53c6e091d32820fda09f08e9ea8f787cd2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:5a:1a:01:e7:34:81:ee:76:53:ce:67:29:
9f:e7:75:1e:5f:77:6b:31:ed:d1:a1:1f:e4:f6:79:
42:ea:70:1e:67:ff:91:12:10:a4:59:a2:cd:6f:d5:
41:e0:4b:10:85:d9:a8:9a:55:f8:15:5c:85:0c:bf:
81:42:f1:d0:de:3f:d0:5c:c1:7c:c1:a1:6f:e0:d9:
8f:dd:f2:60:ca:f9:4f:eb:38:31:57:4b:f3:f1:cd:
b1:c8:96:b4:ac:4f:a1:7a:01:5b:e1:2a:2e:fd:a0:
50:8b:30:3a:ad:13:c0:cf:dc:c4:25:26:f4:24:3e:
1b:9d:e9:f2:2d:0c:3b:c7:ca:e1:7f:d8:20:d4:0c:
c3:18:6f:4e:ea:a5:ec:bf:56:85:9b:6e:13:16:5b:
7f:a1:a1:cf:86:c3:88:88:84:30:a1:d3:54:6e:63:
72:42:ff:29:de:5b:e7:d9:fa:80:f7:19:7e:bf:c3:
9b:94:cc:ca:57:8f:53:78:77:f9:02:bd:6b:b2:09:
7f:7f:57:cf:04:47:93:ba:15:87:7a:6a:a2:e5:89:
f8:89:1e:bd:86:74:42:df:6c:9a:db:1a:04:ae:4d:
a5:d0:b7:50:07:ef:00:b3:49:62:07:47:28:bb:37:
1a:9c:a1:d8:71:4c:2c:15:44:2e:12:17:1c:29:81:
49:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:FF:B5:3C:6E:09:1D:32:82:0F:DA:09:F0:8E:9E:A8:F7:87:CD:2D
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f1:d6:a6:cd:5f:47:b1:a5:ea:6d:43:85:e4:f2:ef:84:0d:
b5:43:da:08:2a:22:79:5d:11:4e:77:5d:ee:d7:ee:17:d9:08:
8f:d0:d8:d3:c9:ab:60:d3:a0:4c:b1:e9:e3:9d:65:86:6c:3f:
e1:63:83:4c:b5:5c:36:62:0e:1b:43:ac:43:97:df:39:31:22:
93:d5:7c:b7:2a:4b:5b:84:cc:99:94:9f:be:97:57:ff:61:2b:
5c:3c:8f:41:40:db:39:a1:fc:37:b9:95:c7:46:45:73:ee:b6:
9b:11:87:8e:9f:9f:ca:fd:74:eb:de:19:09:33:0c:72:dc:97:
05:48:6e:76:37:a1:1b:b4:c4:da:26:8d:49:c7:4b:3c:25:f7:
b1:c5:81:80:8f:77:40:b1:6a:48:8a:30:41:4c:3f:0d:83:86:
40:bc:3b:9b:60:be:e2:c5:00:d6:bc:4f:e2:f2:83:ad:0a:6f:
cc:d0:5e:74:6c:e2:59:21:02:b3:89:1e:ce:92:8d:65:8b:bb:
d2:a1:88:80:01:15:04:48:08:e8:d6:a1:c0:eb:8b:83:3e:6f:
43:b7:41:f7:8a:84:03:61:7e:3a:19:fd:e0:a2:26:14:dd:0c:
36:33:f0:aa:f5:c1:72:19:a8:c7:ee:e4:4e:80:82:68:92:04:
d8:5b:93:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:32:02 2026 by rpki-client