Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: CewEtYZCNzsmK8B0AXfqV9n12/TqPlqbPbZpvwBEfJw=
Subject key identifier: EF:1F:DD:5E:34:97:5F:25:11:30:EC:81:40:BE:90:B7:4F:37:4F:22
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 019E1E34EF773547D7253894A348048BD32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0D43
Signing time: Tue 12 May 2026 22:00:45 +0000
Manifest this update: Tue 12 May 2026 22:00:45 +0000
Manifest next update: Wed 13 May 2026 22:00:45 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: l+C4JnAIexUAVEO4CfELyznB/KWyErDZrgJ2H16oJ08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:34:ef:77:35:47:d7:25:38:94:a3:48:04:8b:d3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: May 12 22:00:45 2026 GMT
Not After : May 13 22:00:45 2026 GMT
Subject: CN=ef1fdd5e34975f251130ec8140be90b74f374f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:7d:d3:36:c0:c3:0a:3b:e3:0f:c5:60:42:
06:5c:b7:30:6d:c5:d8:fd:89:ca:26:62:dd:c0:53:
83:86:67:03:99:9b:bf:f9:d5:19:86:69:99:ff:d0:
f2:0a:bc:81:0c:b6:fe:bd:12:15:47:d0:5c:c1:d2:
1d:46:6a:c3:2f:1b:5b:3a:1e:c8:96:aa:10:a0:0d:
1d:4a:27:bc:bf:fd:2a:db:bb:a7:a6:b1:a9:99:27:
59:a6:d0:3c:c0:2c:7f:1c:41:ba:4c:67:04:6e:cd:
78:41:00:f7:40:4c:54:26:9e:75:31:62:19:ae:9b:
9a:de:02:40:48:2e:10:f2:73:11:51:08:13:f0:e8:
90:85:e1:c1:d7:64:c9:83:9f:17:d9:90:61:42:64:
75:5e:a2:2d:47:76:b3:a5:6d:67:cd:ea:5b:b9:f8:
b8:be:3d:e1:27:1e:d5:24:d4:fe:95:d5:0b:8f:9c:
db:a7:8d:72:03:da:b2:5d:4f:99:72:a5:5d:10:60:
8f:d0:2c:96:c0:76:a4:da:a3:e7:43:26:76:af:c6:
f2:5c:ab:a3:85:b9:c1:c7:c5:36:d1:ce:13:fc:05:
af:66:ea:35:ee:12:33:a8:7d:0d:6f:93:e4:03:b7:
9e:b8:9d:80:cc:11:2d:5a:e7:09:36:19:7d:58:9e:
14:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1F:DD:5E:34:97:5F:25:11:30:EC:81:40:BE:90:B7:4F:37:4F:22
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c8:97:a3:e4:93:a3:07:e1:ce:16:2e:0a:5d:f0:d7:c1:01:
52:c7:62:61:e7:df:8a:37:7b:be:21:ac:ac:90:6e:b5:b9:b7:
42:fe:5d:9f:ed:fd:4e:f2:99:5b:45:64:5a:55:f7:ae:a5:9d:
df:36:c7:b0:48:6a:ce:ed:08:18:de:7b:e8:1f:84:2c:24:ad:
c9:71:6b:78:f0:0d:98:38:ff:ae:21:f8:9f:c3:96:f8:ae:ec:
32:18:25:64:54:42:9f:60:db:be:95:48:cd:65:00:61:f7:bd:
50:db:f1:b0:dc:d7:a2:a8:ad:ba:88:e2:fc:33:77:2f:64:58:
a2:e8:b8:b0:05:f3:c7:a2:1f:62:8d:fa:5a:c7:b1:9b:6b:2e:
aa:18:76:ee:7a:04:33:f7:98:c0:1c:d6:4a:d2:64:85:da:3b:
7b:d3:fe:4d:2e:18:a9:6e:7c:6d:52:27:e1:61:d1:a1:d4:c5:
2d:ca:44:36:c9:19:8c:8c:62:9d:60:83:fd:ad:69:08:09:b4:
16:b0:43:5e:f1:ac:65:6d:52:b9:0c:1d:54:ff:f1:21:8e:c1:
25:6f:63:4b:ca:34:b8:4d:36:78:5a:d3:a9:9c:9a:7d:98:c0:
9a:94:ac:cd:42:1a:a4:3c:4b:ba:d4:d9:33:56:fc:8a:f3:a6:
21:b8:2a:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eNO93NUfXJTiUo0gEi9MvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiMzdiZDE0MzI5ODZkN2I1YjljNmU5Mzg2NWU1NDNhYmFm
NGYwZmIwHhcNMjYwNTEyMjIwMDQ1WhcNMjYwNTEzMjIwMDQ1WjAzMTEwLwYDVQQD
EyhlZjFmZGQ1ZTM0OTc1ZjI1MTEzMGVjODE0MGJlOTBiNzRmMzc0ZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSV90zbAwwo74w/FYEIGXLcwbcXY
/YnKJmLdwFODhmcDmZu/+dUZhmmZ/9DyCryBDLb+vRIVR9BcwdIdRmrDLxtbOh7I
lqoQoA0dSie8v/0q27unprGpmSdZptA8wCx/HEG6TGcEbs14QQD3QExUJp51MWIZ
rpua3gJASC4Q8nMRUQgT8OiQheHB12TJg58X2ZBhQmR1XqItR3azpW1nzepbufi4
vj3hJx7VJNT+ldULj5zbp41yA9qyXU+ZcqVdEGCP0CyWwHak2qPnQyZ2r8byXKuj
hbnBx8U20c4T/AWvZuo17hIzqH0Nb5PkA7eeuJ2AzBEtWucJNhl9WJ4UkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8f3V40l18lETDsgUC+kLdPN08iMB8GA1UdIwQY
MBaAFAs3vRQymG17W5xuk4ZeVDq69PD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3plOUZES1liWHRibkc2VGhsNVVPcnIwOFBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jNGQwODQtMWI2OC00ZGEyLTk4YzYt
NDU1ZDUyZjkwMGMwLzEvQ3plOUZES1liWHRibkc2VGhsNVVPcnIwOFBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jNGQwODQtMWI2OC00ZGEyLTk4YzYtNDU1ZDUyZjkwMGMw
LzEvQ3plOUZES1liWHRibkc2VGhsNVVPcnIwOFBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADciXo+ST
owfhzhYuCl3w18EBUsdiYeffijd7viGsrJButbm3Qv5dn+39TvKZW0VkWlX3rqWd
3zbHsEhqzu0IGN576B+ELCStyXFrePANmDj/riH4n8OW+K7sMhglZFRCn2DbvpVI
zWUAYfe9UNvxsNzXoqituoji/DN3L2RYoui4sAXzx6IfYo36Wsexm2suqhh27noE
M/eYwBzWStJkhdo7e9P+TS4YqW58bVIn4WHRodTFLcpENskZjIxinWCD/a1pCAm0
FrBDXvGsZW1SuQwdVP/xIY7BJW9jS8o0uE02eFrTqZyafZjAmpSszUIapDxLutTZ
M1b8ivOmIbgqKg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:10:16 2026 by rpki-client