Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: 1B/3D9GlDPlVDrrGLDOLQZfnPeH8Wxh/8pNn8SGKzto=
Subject key identifier: 9D:32:D2:93:38:C2:D5:E3:03:E3:EF:EB:C7:D1:C5:81:F4:FA:5B:ED
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 019F90FF97ADC7AE1DEF8FD3F34BFFE79F44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0E03
Signing time: Thu 23 Jul 2026 22:01:37 +0000
Manifest this update: Thu 23 Jul 2026 22:01:37 +0000
Manifest next update: Fri 24 Jul 2026 22:01:37 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: v3UsgWzv1PN4r7kqxx3/MSpyR/bSROSwDbZ9ZLtbtQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:97:ad:c7:ae:1d:ef:8f:d3:f3:4b:ff:e7:9f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Jul 23 22:01:37 2026 GMT
Not After : Jul 24 22:01:37 2026 GMT
Subject: CN=9d32d29338c2d5e303e3efebc7d1c581f4fa5bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:95:32:65:00:38:54:5b:6d:91:f7:ab:b0:e8:
37:c7:26:e3:e5:15:7b:af:ec:e3:c5:ee:e6:7c:d4:
3f:52:89:af:0c:b8:57:c0:4d:a8:dd:a8:16:1f:4d:
c0:af:a4:4e:92:52:a0:dc:4f:f7:67:17:ef:11:7f:
59:86:6e:01:21:bf:0c:e4:0a:41:9e:24:24:85:5e:
34:2c:51:92:df:07:d4:cd:31:65:f2:c0:d0:14:7a:
39:0e:99:59:fb:11:15:e2:80:a6:aa:70:a2:f2:5f:
19:a6:ca:71:73:24:d1:8e:9a:4b:8d:52:34:25:61:
09:e8:f8:38:55:86:4c:49:40:1a:6c:5f:14:60:d9:
d6:f6:ce:a5:f9:a9:30:db:e2:8a:d2:f7:4f:79:a9:
09:70:0f:14:ab:f5:45:48:92:c9:f0:f0:ab:24:1e:
84:d8:e8:49:63:fe:5d:16:ea:26:7f:e4:07:6c:9e:
f1:2a:88:99:34:b3:0d:cc:c0:6c:6b:aa:7a:77:9f:
be:b4:d1:e3:4a:cd:64:a3:05:98:eb:f8:f5:a7:cc:
6d:8e:62:2f:27:6b:26:13:5d:a6:a3:39:0b:2d:7f:
2e:05:8d:ac:1c:e0:c2:eb:ae:46:fe:7c:77:75:d0:
ea:c5:c1:2a:3e:75:89:57:90:e3:96:67:ea:b9:57:
8d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:32:D2:93:38:C2:D5:E3:03:E3:EF:EB:C7:D1:C5:81:F4:FA:5B:ED
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:89:17:ec:c0:6f:be:68:2a:9f:ce:f1:4d:33:7f:9d:4e:af:
00:c1:b8:62:f3:6f:db:a0:8c:8d:8f:bc:6a:97:05:db:04:05:
1f:32:0a:e3:2b:b3:b2:32:90:5b:4f:7d:07:f0:8d:5c:5e:dc:
b2:85:65:36:74:9b:58:d8:5a:8d:21:b5:60:e8:f1:07:f5:8f:
4a:38:ff:0f:d8:66:dd:84:c2:73:ae:34:5f:56:01:a3:3a:0a:
e1:c7:e1:b0:e7:c5:b5:48:aa:3d:42:43:67:78:ac:8f:c8:96:
ec:ba:83:d3:a2:f6:c9:9f:7d:f8:1f:bb:6d:d9:0d:b6:3a:c5:
e6:b5:85:1a:7f:ab:d5:fe:65:4c:73:e9:2d:ef:c7:2e:55:53:
19:af:72:76:e7:ed:61:01:20:c6:b5:71:fc:c0:16:88:d2:45:
51:bc:da:d9:0b:f3:9f:76:73:c3:9c:9e:8e:c3:66:a7:0f:59:
7a:de:ba:57:3f:75:bc:1b:66:4e:43:87:85:30:ea:59:e4:1f:
e8:57:94:c5:35:23:f2:cf:7e:6c:64:23:f6:92:b4:af:46:82:
48:a9:94:8c:b5:a7:05:5b:d3:4c:20:d0:83:17:e2:95:12:16:
f9:ae:dc:43:35:a6:e1:63:96:cd:97:3c:ec:83:1a:87:c1:2c:
e6:bf:19:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:26:39 2026 by rpki-client