Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: 4QLa2uRGNvgKiydOEiqcrpCwJ0yBOh3OeWC6AJ5kveo=
Subject key identifier: D5:69:AD:F5:FE:C1:36:99:35:A4:4E:92:3A:7C:12:C6:3F:35:E7:71
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 01A144CD3DE118D5337FAA649E5C9BC6838F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 0C43
Signing time: Fri 16 Oct 2026 13:01:03 +0000
Manifest this update: Fri 16 Oct 2026 13:01:03 +0000
Manifest next update: Sat 17 Oct 2026 13:01:03 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: R+y2VVycWtICn34TVolGI731+e8BT1Tzek54SKlH5qk=)
2: MOCPp2EklA9KiOER-D8tmFoh_tA.roa (hash: K1IAySUMUAKsiAnRdk6VSTb/S+lbIKi0pXcziMBqppk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:cd:3d:e1:18:d5:33:7f:aa:64:9e:5c:9b:c6:83:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Oct 16 13:01:03 2026 GMT
Not After : Oct 17 13:01:03 2026 GMT
Subject: CN=d569adf5fec1369935a44e923a7c12c63f35e771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:ac:e0:3d:84:07:ec:e5:2e:11:94:bf:f1:
90:98:00:23:d2:34:88:21:30:32:11:06:ea:12:4a:
84:3a:c9:87:6b:95:ee:2f:30:b7:ca:5a:64:eb:e3:
19:27:71:ad:e5:11:1f:20:bb:20:f5:aa:c4:63:b9:
fc:35:69:0c:da:cd:2a:1f:da:26:75:9f:8d:31:70:
c4:7a:ec:54:46:62:c6:3d:e4:d4:d6:1d:60:46:e2:
bb:e2:74:86:11:14:be:94:d7:80:b0:65:c1:db:1e:
08:6a:16:30:7b:3d:d8:cc:f1:7e:e3:4e:73:3d:b4:
d2:20:d9:2b:50:bf:1d:e5:5b:dd:6b:19:36:10:1a:
de:dd:39:85:a4:e1:7a:00:8a:a1:f4:66:04:ee:b5:
00:53:1a:e0:1e:e5:ea:dc:13:f3:25:cd:b0:fd:3c:
12:ca:d4:c5:df:08:73:37:93:ff:b8:b5:44:e7:5c:
10:45:e3:f2:a1:16:ad:6e:68:de:a1:ca:6d:4b:93:
d5:ed:2b:10:62:b1:56:7b:c0:b1:65:6a:f0:6a:0d:
19:c1:5d:5d:1c:d6:bb:28:b0:85:41:e7:d8:07:b4:
b5:57:a5:b8:f3:85:42:99:2a:cc:c2:ea:6c:7b:c7:
58:5b:0f:2c:ac:71:cd:69:34:2c:e9:5d:ac:97:2b:
89:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:69:AD:F5:FE:C1:36:99:35:A4:4E:92:3A:7C:12:C6:3F:35:E7:71
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:56:3b:e8:1e:b6:5a:cc:e1:cf:e4:0b:b4:5b:d7:de:5a:03:
43:22:54:b0:91:d0:0f:21:a7:a4:7a:9e:ff:b1:e3:a6:7a:ec:
87:65:d2:bf:67:8c:49:02:d1:29:83:35:ea:2e:09:a0:67:79:
88:15:62:41:9f:30:f2:10:da:ec:d8:b9:0f:71:33:37:b1:86:
ce:ce:92:71:8f:54:0e:31:54:f8:a7:ae:64:2d:e4:41:73:b8:
b8:0a:8e:b2:42:a0:6a:4a:93:d9:5b:be:23:7c:bf:3d:fc:8d:
ef:6c:ce:91:51:95:ba:19:eb:33:69:35:b9:d0:79:e0:fc:7e:
3f:ab:48:17:c7:db:f9:81:ba:ed:ba:65:7d:47:33:0c:b5:a1:
da:43:5c:f4:ef:59:0a:03:c8:87:6f:e3:a4:b2:70:8d:6c:77:
36:90:22:7f:61:c3:a1:8e:2c:9f:ac:ea:33:0f:8a:d2:39:a6:
26:6f:c8:44:63:f6:b2:fe:cb:f2:6e:99:1b:ab:36:16:e7:83:
03:f5:fc:9c:69:96:81:07:3e:d8:4e:33:93:7c:d1:1d:67:eb:
95:b5:a0:d7:d4:67:d7:6a:37:a7:ca:38:77:5f:14:e4:46:d3:
66:89:42:11:ff:e5:82:d7:54:b9:fa:4d:a9:43:78:7d:db:09:
07:29:0c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:38:37 2026 by rpki-client