Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: HNlE1IlXtRCGU6GNenNC0W+iJTPGuP2DlObqHS8FtUk=
Subject key identifier: 4D:CB:F2:A6:A3:68:D9:29:11:B2:0F:77:E8:FC:60:9F:69:E9:00:A0
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 019E30E0BA3899BA5293966DA929501C605F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 0AAB
Signing time: Sat 16 May 2026 13:01:34 +0000
Manifest this update: Sat 16 May 2026 13:01:34 +0000
Manifest next update: Sun 17 May 2026 13:01:34 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: TiysaMrXW/r4A94/TS2J8pV66qB5UkP3XAhGMwFdYng=)
2: MOCPp2EklA9KiOER-D8tmFoh_tA.roa (hash: K1IAySUMUAKsiAnRdk6VSTb/S+lbIKi0pXcziMBqppk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:ba:38:99:ba:52:93:96:6d:a9:29:50:1c:60:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: May 16 13:01:34 2026 GMT
Not After : May 17 13:01:34 2026 GMT
Subject: CN=4dcbf2a6a368d92911b20f77e8fc609f69e900a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:04:d8:e1:69:36:a1:f5:e9:1b:fd:27:13:f0:
84:5d:e3:fe:47:96:0e:35:a7:71:f7:78:b3:a5:56:
be:b4:8b:bd:4b:87:2a:56:02:a9:05:1e:a4:11:fa:
9a:9a:ad:e3:f9:12:1c:69:9f:f0:95:79:39:15:00:
ac:2a:21:e2:fe:d6:94:fb:3b:a8:ac:44:70:49:0b:
a1:d3:2e:23:59:65:b8:e2:aa:01:06:44:de:eb:b2:
d7:34:29:da:fa:fd:c2:d6:36:57:ec:99:aa:c1:ce:
96:fe:14:d6:8e:e4:4a:3b:f5:7d:e2:b8:3d:50:22:
64:b5:f7:97:ea:96:76:e1:05:90:65:2b:e9:bb:00:
c1:16:b2:eb:a0:5f:74:8d:13:8f:28:0d:05:79:b4:
62:8c:17:b3:00:e9:64:b0:40:d2:ad:bd:a4:91:86:
21:6c:54:aa:e1:72:af:45:e6:89:c2:c9:46:c8:86:
ef:5d:6d:12:45:db:ce:8d:a5:2f:fb:1d:26:f6:43:
eb:0a:da:0a:74:53:d8:d6:cc:52:5f:61:8b:28:ef:
0e:4b:a3:c0:a8:c3:f5:93:4f:12:54:df:71:30:0f:
e1:c1:72:e0:42:7a:a9:b1:cd:fa:6c:c4:3d:46:9a:
5a:aa:7e:1b:93:b4:33:ae:10:e2:7d:a3:d9:b1:3a:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CB:F2:A6:A3:68:D9:29:11:B2:0F:77:E8:FC:60:9F:69:E9:00:A0
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:2f:34:7c:de:f4:a9:a1:5b:59:f9:1e:f3:e4:97:a5:a1:91:
26:e3:ca:33:b2:aa:67:6a:86:52:98:bb:72:9b:71:77:d7:1e:
32:b6:e4:72:4b:b0:ab:e9:e9:ac:fe:5d:1e:4d:be:5a:c6:f1:
bb:8a:4a:71:16:be:57:26:28:42:d0:68:f2:1e:3c:8e:5b:60:
06:1a:47:64:fb:08:c5:95:3e:45:4e:8c:db:41:a6:2d:81:81:
ce:51:9c:29:04:90:de:03:75:eb:1b:8a:2a:54:b4:a4:62:f6:
1c:8b:bf:c6:5f:a0:8d:94:72:1b:68:87:b3:4c:c8:9e:56:3b:
92:f3:ea:84:26:76:c4:72:36:15:97:06:d2:4f:d9:b8:ee:8f:
b0:9c:09:50:d1:06:a8:21:10:c6:3b:81:ca:77:eb:cb:8d:77:
74:2f:c5:df:fd:88:01:69:29:d6:d6:0e:c7:11:75:e0:84:00:
ce:16:a3:1c:30:4f:ce:a2:8f:8f:af:13:35:b1:1a:5b:18:0d:
00:b8:8f:ef:c4:69:f1:39:d3:45:f5:5e:db:11:d9:92:f7:64:
1a:e4:c2:53:11:eb:17:9b:69:c7:d1:7d:73:bc:32:ef:25:b8:
35:3b:ab:d4:11:bc:f4:0a:a6:2a:f3:6b:85:fb:13:e9:59:b0:
85:76:a7:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4w4Lo4mbpSk5ZtqSlQHGBfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWM3NGRjMGI2YzJkNWI5ZDMwZWFmM2NkMjIyOTRmNzEx
OTAzOWYwHhcNMjYwNTE2MTMwMTM0WhcNMjYwNTE3MTMwMTM0WjAzMTEwLwYDVQQD
Eyg0ZGNiZjJhNmEzNjhkOTI5MTFiMjBmNzdlOGZjNjA5ZjY5ZTkwMGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQTY4Wk2ofXpG/0nE/CEXeP+R5YO
Nadx93izpVa+tIu9S4cqVgKpBR6kEfqamq3j+RIcaZ/wlXk5FQCsKiHi/taU+zuo
rERwSQuh0y4jWWW44qoBBkTe67LXNCna+v3C1jZX7Jmqwc6W/hTWjuRKO/V94rg9
UCJktfeX6pZ24QWQZSvpuwDBFrLroF90jROPKA0FebRijBezAOlksEDSrb2kkYYh
bFSq4XKvReaJwslGyIbvXW0SRdvOjaUv+x0m9kPrCtoKdFPY1sxSX2GLKO8OS6PA
qMP1k08SVN9xMA/hwXLgQnqpsc36bMQ9Rppaqn4bk7QzrhDifaPZsToXEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3L8qajaNkpEbIPd+j8YJ9p6QCgMB8GA1UdIwQY
MBaAFAnsdNwLbC1bnTDq880iKU9xGQOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jZDg4M2MtNGQ3Ni00NTdlLWE4NWMt
ZGJhZmY4MWFkY2E4LzEvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jZDg4M2MtNGQ3Ni00NTdlLWE4NWMtZGJhZmY4MWFkY2E4
LzEvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5C80fN70
qaFbWfke8+SXpaGRJuPKM7KqZ2qGUpi7cptxd9ceMrbkckuwq+nprP5dHk2+Wsbx
u4pKcRa+VyYoQtBo8h48jltgBhpHZPsIxZU+RU6M20GmLYGBzlGcKQSQ3gN16xuK
KlS0pGL2HIu/xl+gjZRyG2iHs0zInlY7kvPqhCZ2xHI2FZcG0k/ZuO6PsJwJUNEG
qCEQxjuBynfry413dC/F3/2IAWkp1tYOxxF14IQAzhajHDBPzqKPj68TNbEaWxgN
ALiP78Rp8TnTRfVe2xHZkvdkGuTCUxHrF5tpx9F9c7wy7yW4NTur1BG89AqmKvNr
hfsT6VmwhXanoA==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:54 2026 by rpki-client