Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: VtFbT8IGK6PdLVxnmJi9mNRnP6ESJmmbjkqFGhs6nfY=
Subject key identifier: AD:10:D8:05:3E:ED:28:07:E3:5F:A2:21:FE:51:92:77:58:45:65:22
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 019D28F205BCBF9CE3AE828DE0364C1CA1A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0CC4
Signing time: Thu 26 Mar 2026 07:00:42 +0000
Manifest this update: Thu 26 Mar 2026 07:00:42 +0000
Manifest next update: Fri 27 Mar 2026 07:00:42 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: 3LAhWVWky3Quowb6pf912c36f+KDt9HvIxbSBZEYiZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:05:bc:bf:9c:e3:ae:82:8d:e0:36:4c:1c:a1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Mar 26 07:00:42 2026 GMT
Not After : Mar 27 07:00:42 2026 GMT
Subject: CN=ad10d8053eed2807e35fa221fe51927758456522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:df:3f:21:26:13:27:ef:d2:b4:39:13:ca:
f0:a5:d0:77:8e:c7:13:7f:2a:84:ad:7c:c5:3b:3e:
71:ec:97:1d:b3:4d:a2:ee:2a:80:28:1a:36:ce:69:
17:90:ed:ee:47:c4:cb:de:98:72:7b:92:21:1f:3b:
2b:20:19:68:53:06:a8:f7:0d:8e:f0:b8:0b:e9:44:
1b:a0:8a:22:f9:75:87:de:0f:29:ae:4a:b5:c2:53:
ee:da:9e:1b:ce:bc:e0:52:da:70:e1:d5:e7:43:85:
f5:b2:ca:e1:01:95:2c:9b:47:81:da:70:f6:46:03:
f6:48:2f:48:11:8a:aa:17:76:ac:be:6f:4f:5e:ba:
e6:2e:10:a1:89:59:8c:dc:04:6b:6b:7c:e7:0e:e8:
3f:65:6b:f6:9f:75:19:62:b3:5e:d3:c7:03:14:80:
57:4c:39:47:c9:2d:c8:7e:d5:7b:ab:0a:6e:21:cf:
78:04:fd:c2:c7:06:4d:8a:bc:f8:2f:fd:58:cc:4b:
2c:32:d4:1e:1d:11:2a:ef:ca:a1:0a:5c:87:ea:8f:
1a:35:0d:80:9f:f3:5a:13:fb:d3:a0:1a:70:09:7f:
e6:79:bf:06:16:36:c7:66:4c:4b:43:37:aa:31:d2:
29:6e:68:d2:ce:5c:ec:3e:45:5f:08:5a:af:89:43:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:10:D8:05:3E:ED:28:07:E3:5F:A2:21:FE:51:92:77:58:45:65:22
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:82:87:a6:ea:b4:b8:57:83:3b:ff:04:45:b6:15:a8:f0:63:
06:e0:80:66:6a:f1:33:cc:75:df:11:80:18:91:32:0b:00:e3:
44:d8:70:77:a3:0d:de:6a:b6:75:b7:31:0d:d3:5e:f4:12:58:
02:d8:7c:cd:12:96:97:78:0e:a1:d9:90:9f:f8:fa:54:f4:c1:
54:f5:6c:2d:cc:80:cd:9a:ea:04:43:7c:71:df:ff:2a:a3:a5:
70:f9:b0:7a:cf:2c:fd:43:35:b8:32:19:d9:33:4a:48:c6:3e:
18:be:90:ec:c8:1d:49:61:b3:f8:47:e5:32:87:bc:9d:25:fb:
e7:1d:59:36:cd:ef:a6:24:a3:f8:aa:01:86:c2:bd:2d:63:40:
2d:b2:07:b9:00:f7:56:c8:6c:c5:42:18:60:1e:f4:fd:00:e9:
12:ad:fb:70:a3:69:fd:1e:d0:27:41:87:4c:3d:01:3d:f3:a0:
c8:c3:8a:c4:90:c0:6f:98:e5:75:d5:1a:a0:f8:9c:82:4a:d9:
17:bc:80:82:99:58:0d:e1:f3:7f:18:22:61:6f:9d:14:6c:3b:
ea:4b:2f:6a:66:e0:63:63:a6:a2:51:25:7b:64:c8:ff:0a:96:
f4:9a:14:29:ed:b7:1c:f3:24:53:8e:f6:4a:8b:d3:c3:0b:40:
27:58:26:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:32 2026 by rpki-client