Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: OLJiBJTLhGzMaT0qZ8GlKemmekOA6QoE4OZWdVda22Y=
Subject key identifier: 59:BD:CC:13:96:7E:5D:57:22:B4:8A:FF:01:2D:BD:74:23:18:CD:DD
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 019F92487C22BE1DC8327BA4C48B41924C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 0B62
Signing time: Fri 24 Jul 2026 04:00:51 +0000
Manifest this update: Fri 24 Jul 2026 04:00:51 +0000
Manifest next update: Sat 25 Jul 2026 04:00:51 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: LzHFxnfUhddtyzl74nzZDFQ71dNk0ALp/N+T1DXbIO0=)
2: MOCPp2EklA9KiOER-D8tmFoh_tA.roa (hash: K1IAySUMUAKsiAnRdk6VSTb/S+lbIKi0pXcziMBqppk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:7c:22:be:1d:c8:32:7b:a4:c4:8b:41:92:4c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Jul 24 04:00:51 2026 GMT
Not After : Jul 25 04:00:51 2026 GMT
Subject: CN=59bdcc13967e5d5722b48aff012dbd742318cddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:77:70:64:2f:98:1a:6f:d5:15:bb:63:73:
d2:9a:06:f5:4c:4b:59:28:21:64:f3:d7:23:75:0d:
14:5a:9c:67:d1:7f:19:e0:c4:3b:32:02:c4:fc:78:
bc:e4:e0:78:67:0e:4d:d3:2a:63:78:13:2c:c2:27:
68:f5:b5:a9:7f:ca:1a:ed:15:7f:b0:05:e0:07:5a:
ad:ec:6b:19:12:9f:2c:f0:3d:18:04:58:b3:f9:98:
78:8f:07:38:67:78:e9:6c:be:72:d7:90:f9:41:5d:
1b:31:4c:a3:c2:c9:fd:39:fc:be:7c:78:87:1a:5e:
40:70:ff:c0:4a:fb:a9:d8:64:6c:3e:1c:bc:3e:36:
ce:97:d3:06:00:31:41:fb:57:e9:0b:01:f4:0a:20:
df:b8:a2:9b:2d:02:98:2f:bf:72:3e:7a:8a:40:33:
0f:7a:58:ab:98:18:57:84:da:f4:3f:d0:28:2f:82:
a3:9c:1e:4c:a4:7f:07:93:c1:d0:a6:a1:c8:f0:4c:
55:37:11:12:87:ac:32:9f:e9:40:0a:4d:7d:59:4a:
34:7e:9b:e2:19:f7:93:a7:06:7e:52:b1:f0:f4:46:
f3:13:8c:51:e6:21:e2:01:15:1f:68:9d:e7:0a:e3:
c5:be:69:c8:de:ab:05:b9:0c:34:52:36:74:00:df:
f6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BD:CC:13:96:7E:5D:57:22:B4:8A:FF:01:2D:BD:74:23:18:CD:DD
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:d0:72:d2:91:66:5c:6e:ec:cb:30:0f:12:0f:05:d5:49:fd:
51:fd:5f:d0:c4:f8:ba:14:fb:87:81:93:b0:d4:ba:c4:15:08:
f9:81:22:c8:f0:83:fe:b1:a3:3a:40:ef:1a:5a:54:c4:71:14:
93:12:13:fc:92:26:14:01:0f:00:a3:82:6c:c8:fd:c5:7b:de:
a0:bf:0a:36:b3:69:b7:69:5b:da:c5:4b:6f:c8:f0:05:b2:8a:
19:f3:52:06:25:a6:6e:65:4d:29:8f:5b:63:92:6a:da:78:94:
43:fa:b0:8f:92:a3:b1:b8:c5:2f:b2:df:5f:8c:31:71:d6:23:
80:da:b2:a5:52:16:b0:79:3c:1d:45:d7:13:c0:90:1e:a3:d9:
16:ff:ae:d4:2d:ed:b3:72:30:2c:46:cd:20:30:42:d9:4f:15:
92:40:20:35:a8:8f:17:98:8c:01:65:77:0e:53:ed:ca:6a:1c:
bc:7f:25:60:67:75:2e:85:b9:05:06:96:70:64:a7:8a:d9:ac:
5d:ce:eb:2a:e4:8b:01:a2:28:02:e6:33:ca:d7:cb:b4:b5:44:
86:87:8f:bb:5f:8e:ff:b3:5f:59:57:0f:b1:ef:68:ca:8b:6c:
4b:c9:59:19:f8:65:74:2d:59:cb:e9:5d:23:bd:28:99:44:4c:
57:e6:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:03:17 2026 by rpki-client