
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: 13aSopcNtmhjk592u0PskKDKMySyYLa1TjMcFQCRBp4=
Subject key identifier: D8:89:76:FE:7E:42:FE:B0:A8:13:E8:CE:D3:40:3C:43:4D:0D:AD:AB
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 019D9A3EB4040A335C7015598A8A38D746A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 0A5D
Signing time: Fri 17 Apr 2026 07:01:33 +0000
Manifest this update: Fri 17 Apr 2026 07:01:33 +0000
Manifest next update: Sat 18 Apr 2026 07:01:33 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: gkxsZvBpMOTcnk7z5zAVnEX/p7pGv2WSM+5qxNkxQjQ=)
2: MOCPp2EklA9KiOER-D8tmFoh_tA.roa (hash: K1IAySUMUAKsiAnRdk6VSTb/S+lbIKi0pXcziMBqppk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:b4:04:0a:33:5c:70:15:59:8a:8a:38:d7:46:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Apr 17 07:01:33 2026 GMT
Not After : Apr 18 07:01:33 2026 GMT
Subject: CN=d88976fe7e42feb0a813e8ced3403c434d0dadab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:be:d7:0f:f5:c1:a5:db:4a:17:64:92:9f:
db:89:21:5d:1c:f9:c8:35:59:86:eb:c4:5e:bd:92:
1c:43:74:22:a9:54:ac:0e:fb:a8:3f:b5:ea:08:2b:
39:df:2a:44:e6:0a:eb:f9:9a:13:16:2e:c8:6e:f4:
6b:f9:f4:5d:ad:13:d3:f2:7f:d6:bb:7d:1a:5d:1d:
4e:db:3f:ba:b2:e5:b7:f3:70:39:bb:f8:56:e4:92:
77:13:61:e7:06:15:d5:9a:a8:e9:2c:a8:9d:7f:3e:
f0:bb:ef:6e:95:f9:a4:6c:ed:67:4c:30:94:fe:1c:
84:e4:a0:68:7e:fc:d5:a1:36:ff:33:42:15:50:cc:
b2:28:1d:4d:56:8b:4b:9d:83:6c:f5:98:e9:ab:d3:
70:9b:8c:38:d3:4e:d5:74:8e:f8:32:83:f0:20:9a:
cc:f0:44:0e:b9:d2:70:06:58:78:da:19:98:66:c6:
40:5c:d1:a8:b2:09:f2:d7:61:e0:fc:fb:60:2c:92:
5a:b3:24:8d:33:ce:5c:0e:f4:9c:f9:34:1c:a5:00:
70:e2:91:e1:26:44:e1:3d:01:77:61:cf:66:d3:6e:
b4:b0:63:a6:95:9f:c1:59:ca:7f:e9:4c:26:c3:10:
45:a0:c5:30:23:97:7e:0d:e5:6d:f2:58:b5:a9:19:
3a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:89:76:FE:7E:42:FE:B0:A8:13:E8:CE:D3:40:3C:43:4D:0D:AD:AB
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d1:66:09:a7:3b:17:ad:60:27:9a:c4:1e:21:0a:fe:e4:81:
12:41:ee:3d:e5:43:7b:60:18:be:34:7e:27:b3:1d:ed:40:85:
b1:ae:79:f9:fe:61:13:6f:bb:08:b8:98:b7:5a:91:3e:13:85:
e5:47:24:e5:db:48:8d:0b:03:68:3e:79:93:4f:e8:9c:85:b3:
3d:1a:5d:40:c2:16:ad:4d:e2:86:05:e9:c5:6a:f0:b1:19:00:
72:ca:8a:54:27:18:0c:79:64:b7:4f:af:9a:f7:b3:d9:22:fc:
45:bd:e9:78:cb:8c:78:2b:f1:5c:12:57:de:22:f4:e8:30:9c:
6e:6a:99:93:59:18:40:d6:c8:cf:fd:bc:ac:e7:5a:df:bd:18:
09:f3:e4:26:8c:f0:85:1e:ec:db:d8:63:a9:af:91:80:f2:af:
65:4a:94:2d:43:a9:6b:d5:23:67:d8:0e:9f:f9:4e:16:f4:1e:
cd:ae:2f:0c:f6:b3:96:1c:c4:94:65:e3:c3:aa:70:e8:1a:5b:
58:1e:84:e0:4e:4d:ec:b6:99:f1:33:8b:8a:ad:01:58:30:7b:
d7:1b:5c:1a:1c:72:47:c4:71:9d:d2:64:f4:ba:ae:66:30:01:
5a:f7:b7:e9:5a:5a:1f:a9:ae:1e:b9:9b:20:4c:f8:c6:cc:64:
f2:5c:f8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:30 2026 by rpki-client