Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json)
Hash identifier: vIekHw/ZVQjGxI9i+as2a8qNcBD+xunvYDrrkUqaioU=
Subject key identifier: 3B:05:F9:3E:39:29:1A:A3:EF:1D:49:77:F4:FB:B7:B2:B3:B1:54:97
Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Certificate serial: 01A0D56FCF15BDB5AF07F8E03941E39071B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
Manifest number: 0EAB
Signing time: Thu 24 Sep 2026 22:01:09 +0000
Manifest this update: Thu 24 Sep 2026 22:01:09 +0000
Manifest next update: Fri 25 Sep 2026 22:01:09 +0000
Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: 5sao6r6XCAWb5EZ7XP4Zqo5diNfQ5BayLbWyK3t6ynw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:cf:15:bd:b5:af:07:f8:e0:39:41:e3:90:71:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb
Validity
Not Before: Sep 24 22:01:09 2026 GMT
Not After : Sep 25 22:01:09 2026 GMT
Subject: CN=3b05f93e39291aa3ef1d4977f4fbb7b2b3b15497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5f:96:dd:57:cf:23:40:a2:a7:dc:80:a2:9c:
4f:41:d2:cf:37:f4:c1:21:fd:fd:b5:79:ec:79:63:
b1:8d:93:18:c6:02:53:71:fa:0e:af:96:89:87:00:
37:2d:c1:ba:95:93:a9:c2:d8:8e:5a:c2:c6:f8:0c:
6d:13:ae:c9:14:f0:99:a2:79:ed:30:f6:e1:fa:0b:
0c:31:57:b8:3f:52:7f:35:89:4b:c5:81:c2:f3:46:
38:8d:5c:80:75:88:26:4d:07:93:aa:ca:16:6f:2b:
54:8a:ac:d2:8b:11:d0:f5:9c:a8:37:88:c9:44:69:
74:63:36:78:4c:8b:83:28:1a:7e:57:7a:00:04:a4:
49:d0:e0:66:87:51:14:f3:71:65:15:40:af:25:6e:
da:6c:bd:f1:51:18:9a:df:95:0e:1e:d5:c8:3c:c4:
19:eb:9a:1a:ad:4b:fa:24:b9:55:77:80:ad:8b:4e:
3f:8b:ef:02:3c:a3:58:67:e2:ac:ba:e6:a8:cd:7d:
95:92:40:ed:7d:7b:63:61:56:a0:0c:58:91:ac:39:
4a:a4:9d:96:c4:24:e6:b6:7a:28:24:60:d4:15:9d:
8f:d4:07:97:5a:a6:27:5f:3c:19:ec:3c:b1:f2:bf:
ec:0f:58:84:d8:6d:aa:f3:0b:0c:3e:b5:76:39:98:
01:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:05:F9:3E:39:29:1A:A3:EF:1D:49:77:F4:FB:B7:B2:B3:B1:54:97
X509v3 Authority Key Identifier:
keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:35:71:5e:7e:bf:03:09:36:12:1a:d1:da:84:61:83:f6:f0:
6d:26:f5:0d:b5:ab:8c:e6:8c:15:33:3b:17:6f:90:5a:2e:27:
a8:21:4c:85:52:d8:aa:17:1e:51:f8:58:82:4f:f5:56:67:64:
d6:be:15:41:ce:c5:94:eb:7f:5e:3b:71:6e:35:b6:31:15:e1:
8a:6b:9f:c5:20:81:95:4a:36:20:84:3b:86:f9:f7:c2:f0:21:
a1:d3:c3:99:11:35:aa:28:d8:d8:c4:1d:bf:32:0b:c7:94:8b:
7a:a3:4d:d7:4d:45:53:a9:34:ac:72:4d:82:2c:cf:63:86:88:
61:52:da:37:65:fc:d4:80:3f:95:e5:50:d6:ff:db:9d:eb:a5:
be:3a:e0:31:36:bf:9b:4d:80:13:f6:33:53:16:e6:57:77:a5:
00:8f:81:ae:d8:16:dd:5b:9a:00:68:b7:96:c7:2a:5f:70:9d:
ed:1c:37:65:01:a1:49:da:58:c2:ba:b4:83:05:b9:ea:0d:d8:
b5:23:ad:3f:23:8d:1f:8d:67:78:bf:b6:29:fe:cb:21:96:e4:
e1:1a:b1:ab:b9:d9:a9:11:42:d5:d2:2d:57:13:1b:31:c7:93:
4e:c0:17:b9:d9:fd:fe:34:7a:a9:81:60:1e:42:3c:e4:af:45:
1b:1e:93:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:46:59 2026 by rpki-client