Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: NREQ8p54hL291+C/gYo22WUbvZDSYoq2xRCBMMs8tIs=
Subject key identifier: 8B:82:9E:04:49:20:D5:60:27:E1:55:BB:85:3E:DB:9A:A4:2C:59:CE
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 019D284E1544881958E8FE3BBFD8C65ECAFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 0A22
Signing time: Thu 26 Mar 2026 04:01:38 +0000
Manifest this update: Thu 26 Mar 2026 04:01:38 +0000
Manifest next update: Fri 27 Mar 2026 04:01:38 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: GNVz+YUTsnEYXXVkTdMSle41XoF6gpPtZliTigyTAAc=)
2: MOCPp2EklA9KiOER-D8tmFoh_tA.roa (hash: K1IAySUMUAKsiAnRdk6VSTb/S+lbIKi0pXcziMBqppk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:15:44:88:19:58:e8:fe:3b:bf:d8:c6:5e:ca:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Mar 26 04:01:38 2026 GMT
Not After : Mar 27 04:01:38 2026 GMT
Subject: CN=8b829e044920d56027e155bb853edb9aa42c59ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b4:07:89:f6:ed:4f:cc:f4:cd:c1:9f:f6:43:
0b:fb:e5:5b:74:52:5c:a5:36:0d:cd:00:93:f6:af:
92:79:ee:71:c9:1b:77:72:94:70:81:29:5d:9c:a9:
55:a4:4e:4a:f0:cc:c5:be:07:a3:a7:df:b2:ec:23:
0b:e2:fe:c0:6f:02:ca:95:bc:af:7e:e8:12:e9:12:
ca:72:ed:50:0d:42:74:0e:02:dd:62:d9:88:6e:e7:
eb:6b:e6:71:5c:1a:48:6d:6c:97:c5:da:88:bb:7a:
0f:50:19:52:9c:17:0e:19:ab:eb:8c:51:79:86:43:
6f:91:ac:87:1d:e4:8c:47:42:5a:99:6f:54:ca:7c:
ff:63:49:a6:09:ba:9e:76:02:0f:a6:91:99:e1:b6:
d4:fa:94:86:d6:ec:87:8b:fe:13:82:29:aa:ea:31:
6d:3a:b3:90:27:59:ac:2b:1e:70:cc:32:c6:03:d5:
4d:59:13:f2:00:d7:26:89:20:eb:6a:c8:9e:55:ad:
2a:fd:99:8e:6e:4a:1d:c8:bd:7d:d3:fb:b4:20:8b:
34:6d:a8:c0:49:fc:70:dd:91:90:da:49:78:ba:89:
69:7c:3d:91:71:a5:e3:39:e8:04:c0:c1:73:ce:9a:
f4:36:10:9d:40:33:0f:d2:7d:57:50:a3:94:6d:e7:
e0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:82:9E:04:49:20:D5:60:27:E1:55:BB:85:3E:DB:9A:A4:2C:59:CE
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:bc:04:f4:cc:af:11:e0:50:b6:36:8b:c6:95:fb:ba:92:17:
35:ab:f2:6b:5b:0f:c1:47:66:25:45:17:97:0f:38:13:d1:28:
7f:cb:13:59:71:6a:b5:e4:27:74:e2:4b:e7:3c:b7:f4:47:bd:
59:3b:8d:2c:7b:08:a7:86:1e:73:05:d9:87:8e:82:32:24:32:
62:75:58:da:5c:6b:7a:3b:ed:d7:69:f5:de:0e:81:66:63:7b:
68:43:6f:0e:c7:c7:4a:cc:44:b8:ce:df:2c:00:a2:ab:bf:06:
d9:e3:84:14:58:7c:08:97:dc:f4:a4:64:8f:8a:90:52:06:44:
1e:af:b2:90:f9:d9:24:1a:c4:0e:c3:81:63:99:e3:0a:a3:51:
74:12:f4:ad:44:0e:74:f0:ff:57:27:72:4e:74:15:f0:9b:a4:
61:41:aa:f3:40:e6:f0:1c:c4:21:2a:58:0c:4d:06:27:56:20:
e0:9d:f5:a9:dc:49:bf:c8:01:8b:07:4d:5e:28:d3:b5:88:b5:
4c:d0:42:6a:35:43:82:fd:a7:0b:bb:8c:01:3f:8e:48:8e:fa:
26:13:a9:43:cb:e8:c0:e4:4a:e0:0f:fa:ce:e4:90:9e:ed:d7:
ca:42:21:2b:4d:ba:a1:f6:a3:e7:a5:39:ee:dc:c9:5d:22:b4:
44:7f:d8:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oThVEiBlY6P47v9jGXsr7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWM3NGRjMGI2YzJkNWI5ZDMwZWFmM2NkMjIyOTRmNzEx
OTAzOWYwHhcNMjYwMzI2MDQwMTM4WhcNMjYwMzI3MDQwMTM4WjAzMTEwLwYDVQQD
Eyg4YjgyOWUwNDQ5MjBkNTYwMjdlMTU1YmI4NTNlZGI5YWE0MmM1OWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bQHifbtT8z0zcGf9kML++VbdFJc
pTYNzQCT9q+See5xyRt3cpRwgSldnKlVpE5K8MzFvgejp9+y7CML4v7AbwLKlbyv
fugS6RLKcu1QDUJ0DgLdYtmIbufra+ZxXBpIbWyXxdqIu3oPUBlSnBcOGavrjFF5
hkNvkayHHeSMR0JamW9Uynz/Y0mmCbqedgIPppGZ4bbU+pSG1uyHi/4Tgimq6jFt
OrOQJ1msKx5wzDLGA9VNWRPyANcmiSDrasieVa0q/ZmObkodyL190/u0IIs0bajA
Sfxw3ZGQ2kl4uolpfD2RcaXjOegEwMFzzpr0NhCdQDMP0n1XUKOUbefg2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuCngRJINVgJ+FVu4U+25qkLFnOMB8GA1UdIwQY
MBaAFAnsdNwLbC1bnTDq880iKU9xGQOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jZDg4M2MtNGQ3Ni00NTdlLWE4NWMt
ZGJhZmY4MWFkY2E4LzEvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jZDg4M2MtNGQ3Ni00NTdlLWE4NWMtZGJhZmY4MWFkY2E4
LzEvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7wE9Myv
EeBQtjaLxpX7upIXNavya1sPwUdmJUUXlw84E9Eof8sTWXFqteQndOJL5zy39Ee9
WTuNLHsIp4YecwXZh46CMiQyYnVY2lxrejvt12n13g6BZmN7aENvDsfHSsxEuM7f
LACiq78G2eOEFFh8CJfc9KRkj4qQUgZEHq+ykPnZJBrEDsOBY5njCqNRdBL0rUQO
dPD/VydyTnQV8JukYUGq80Dm8BzEISpYDE0GJ1Yg4J31qdxJv8gBiwdNXijTtYi1
TNBCajVDgv2nC7uMAT+OSI76JhOpQ8vowORK4A/6zuSQnu3XykIhK026ofaj56U5
7tzJXSK0RH/Yvw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:15:40 2026 by rpki-client