Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: C1/5GQ40hlTa8/WFANM/NengwwYbaPynx7aisRsfOvU=
Subject key identifier: 5B:F8:B4:66:6C:92:47:39:2A:AF:CD:DF:94:87:56:F0:4E:FB:27:37
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 019D37C0CD5C073E9BF6AFDF8B9FE55A7E51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 0A2A
Signing time: Sun 29 Mar 2026 04:01:15 +0000
Manifest this update: Sun 29 Mar 2026 04:01:15 +0000
Manifest next update: Mon 30 Mar 2026 04:01:15 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: PyQM/wTablwbVVbLbNdtOcLzT37aCRf6rIrl1fdgYQI=)
2: MOCPp2EklA9KiOER-D8tmFoh_tA.roa (hash: K1IAySUMUAKsiAnRdk6VSTb/S+lbIKi0pXcziMBqppk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:cd:5c:07:3e:9b:f6:af:df:8b:9f:e5:5a:7e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Mar 29 04:01:15 2026 GMT
Not After : Mar 30 04:01:15 2026 GMT
Subject: CN=5bf8b4666c9247392aafcddf948756f04efb2737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:a1:6d:74:50:e6:fd:59:6a:b6:65:f4:6a:
8a:d9:79:d6:6d:21:28:cd:e6:ab:e1:a7:87:41:61:
a7:22:ab:16:d2:de:8b:ec:b2:71:93:89:7e:08:e0:
a6:33:f0:7b:9f:ea:37:17:a8:62:5c:03:90:31:54:
21:5b:3a:a9:f8:f9:5f:7d:58:e7:2d:bf:85:f1:2d:
af:af:ba:f2:56:06:90:39:dd:1f:ae:37:95:dc:be:
72:6c:e4:89:d5:7a:a7:5e:ed:f4:70:8e:61:72:bd:
a0:fc:bc:99:54:f0:a8:79:7e:f1:6a:d0:14:45:1f:
0a:27:c4:f8:65:ac:65:49:e2:36:94:cf:5f:b6:4f:
12:79:d3:ac:0c:ee:b1:ab:c1:dc:6a:0e:db:00:81:
e2:2b:1a:20:75:64:93:8b:ea:63:33:0e:d6:91:92:
15:19:6a:57:a8:21:b0:bd:38:af:90:2a:47:8a:03:
a3:4c:5d:d7:2f:5f:09:f8:5c:6c:10:73:dd:32:da:
ac:0d:62:25:43:5f:a5:18:14:17:5a:65:53:1d:47:
b0:e8:03:d1:5e:d2:5e:ad:0b:7a:d9:22:6d:b3:f0:
4e:ba:45:61:b7:99:dd:8a:69:ff:b2:51:32:79:61:
d3:fc:8e:18:91:9e:e5:74:6a:ba:93:cf:ca:f5:7d:
5a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F8:B4:66:6C:92:47:39:2A:AF:CD:DF:94:87:56:F0:4E:FB:27:37
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:6d:8b:5d:b1:c9:c5:5f:30:d3:25:4a:68:33:a7:7f:39:a2:
03:53:72:6c:f7:fc:da:f9:01:5e:78:93:d8:89:b3:5f:03:12:
81:f9:77:27:b6:d8:0d:19:6d:68:58:0c:dd:7d:ae:dd:aa:6f:
f6:00:e3:36:6d:94:d2:29:d4:9b:f4:57:08:4a:90:00:f2:54:
85:24:1b:d1:d4:71:5f:11:64:fa:81:c2:8b:0f:1f:70:d4:55:
10:1a:e7:0c:1e:9e:c2:ca:64:cc:3a:08:6a:30:4a:0f:05:04:
81:ae:41:fd:fc:b5:80:a8:07:5b:03:99:27:db:d6:de:21:3d:
1a:78:eb:e7:1b:36:b7:75:10:4a:2f:e6:4a:be:1b:0c:b4:e0:
04:ee:ca:b0:e6:e2:09:0e:99:1b:dd:d5:92:26:04:56:18:fe:
89:7b:da:6d:77:87:15:08:df:ea:32:83:42:d4:a2:bd:cf:d7:
52:5f:05:e6:b1:ea:66:2e:83:4d:fd:d3:d5:4e:a6:98:9b:9b:
01:8a:c9:74:cd:0a:04:4d:17:69:ad:3b:79:ab:c5:d8:aa:5a:
e7:d0:ab:15:6c:e4:0d:ac:9c:a9:f3:ae:c5:8d:bb:7d:da:03:
38:47:7c:52:7a:de:1c:03:bc:86:7e:20:62:72:1b:a5:d5:63:
66:1a:11:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:16 2026 by rpki-client