Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: qAYqiXYHx1Tpw5Ga6e0hqBWUruUUPgrVAmxvs+3UdO4=
Subject key identifier: 72:91:CB:C9:82:55:CD:13:F9:39:C3:30:BC:28:A8:CD:D2:39:D1:78
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 01A0C933D7AF0774DDF6E1CCC22E858A8FC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 0C03
Signing time: Tue 22 Sep 2026 13:00:12 +0000
Manifest this update: Tue 22 Sep 2026 13:00:12 +0000
Manifest next update: Wed 23 Sep 2026 13:00:12 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: SOxNEJSfNd4W+0hcf0yV1jfvdAF0QfJidZI4pJdZHiI=)
2: MOCPp2EklA9KiOER-D8tmFoh_tA.roa (hash: K1IAySUMUAKsiAnRdk6VSTb/S+lbIKi0pXcziMBqppk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:33:d7:af:07:74:dd:f6:e1:cc:c2:2e:85:8a:8f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Sep 22 13:00:12 2026 GMT
Not After : Sep 23 13:00:12 2026 GMT
Subject: CN=7291cbc98255cd13f939c330bc28a8cdd239d178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:f5:1f:cd:50:a6:d6:27:2e:8b:c9:cd:77:
21:bc:c3:94:22:52:c2:3b:01:09:47:b5:7d:2f:a2:
2e:fa:60:ca:f1:45:c4:48:6f:b8:4f:ad:96:c2:f8:
14:45:ad:87:9a:c6:86:24:40:aa:2a:78:d6:98:94:
21:f3:0b:e4:94:3d:d2:c5:a4:f3:f7:ef:69:99:7d:
bc:6f:0f:bf:e2:58:3a:0d:c3:5a:dd:f3:46:c6:3d:
0e:a1:46:56:8a:b2:c6:f6:d9:7b:8d:6d:ab:76:aa:
92:db:9b:a4:ec:7a:b8:df:22:56:89:7a:ad:7c:25:
78:fc:e3:ed:88:fd:6f:e7:45:bf:09:e8:74:df:b8:
b7:25:62:73:9d:41:86:62:95:d5:38:de:02:8b:ee:
76:fb:83:c7:f0:f8:6e:f2:73:6f:8c:f4:b7:3a:7e:
22:3c:1f:06:e3:97:76:4f:14:9b:9b:3c:0e:c5:95:
26:40:19:35:76:72:ce:ad:02:8f:0f:33:b2:2f:49:
6e:dd:df:4e:f2:d6:54:10:6e:b9:14:76:85:a2:9b:
8e:32:ab:48:ed:f0:99:8a:05:f4:7c:b0:53:36:23:
a2:23:b7:4b:82:e1:b4:bd:e5:76:a9:b7:87:32:ae:
af:4b:ff:2e:16:4c:63:fc:ee:c5:96:00:4d:bc:c3:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:91:CB:C9:82:55:CD:13:F9:39:C3:30:BC:28:A8:CD:D2:39:D1:78
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:25:da:0a:e7:95:ea:b6:5b:dc:b9:61:80:3d:46:28:d5:81:
22:be:82:c6:23:97:b5:fe:28:45:3e:61:12:28:40:b9:32:50:
7d:a6:c8:de:f7:72:96:21:b7:36:93:ee:cb:d2:48:ea:78:1d:
e8:41:7e:69:8b:95:8b:73:d2:bd:03:64:19:da:b5:56:1c:3f:
a2:97:9d:b4:0d:91:18:98:72:cb:89:62:7e:4a:f0:10:8c:f3:
2f:09:9a:8c:88:d8:55:9f:c4:75:11:a6:15:11:9b:f3:09:ec:
eb:5b:e6:17:81:e9:6a:08:ad:87:1d:75:67:c2:57:4b:b6:40:
e8:da:d2:6b:08:c4:19:df:14:af:cb:c7:c9:ec:a2:a8:ba:ab:
9c:20:4b:0c:d6:9e:32:d3:09:a3:24:f7:ce:a9:a6:5b:51:6a:
69:69:90:1d:b7:5b:6b:16:eb:37:ca:cc:56:fb:7d:00:d6:ab:
19:13:f3:7b:3e:db:5e:1b:f9:97:a2:51:85:e4:36:90:4c:ba:
1f:df:42:d8:21:7f:33:1f:19:10:f0:8c:96:d1:66:a4:11:71:
9f:20:c6:0a:f0:16:cb:4f:6b:90:1f:35:0e:50:89:d0:ab:dc:
01:73:e3:5a:3b:cb:2c:42:d0:7e:e4:84:15:ea:b0:76:70:9d:
35:82:d1:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJM9evB3Td9uHMwi6Fio/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWM3NGRjMGI2YzJkNWI5ZDMwZWFmM2NkMjIyOTRmNzEx
OTAzOWYwHhcNMjYwOTIyMTMwMDEyWhcNMjYwOTIzMTMwMDEyWjAzMTEwLwYDVQQD
Eyg3MjkxY2JjOTgyNTVjZDEzZjkzOWMzMzBiYzI4YThjZGQyMzlkMTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYD1H81QptYnLovJzXchvMOUIlLC
OwEJR7V9L6Iu+mDK8UXESG+4T62WwvgURa2HmsaGJECqKnjWmJQh8wvklD3SxaTz
9+9pmX28bw+/4lg6DcNa3fNGxj0OoUZWirLG9tl7jW2rdqqS25uk7Hq43yJWiXqt
fCV4/OPtiP1v50W/Ceh037i3JWJznUGGYpXVON4Ci+52+4PH8Phu8nNvjPS3On4i
PB8G45d2TxSbmzwOxZUmQBk1dnLOrQKPDzOyL0lu3d9O8tZUEG65FHaFopuOMqtI
7fCZigX0fLBTNiOiI7dLguG0veV2qbeHMq6vS/8uFkxj/O7FlgBNvMNsGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKRy8mCVc0T+TnDMLwoqM3SOdF4MB8GA1UdIwQY
MBaAFAnsdNwLbC1bnTDq880iKU9xGQOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jZDg4M2MtNGQ3Ni00NTdlLWE4NWMt
ZGJhZmY4MWFkY2E4LzEvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jZDg4M2MtNGQ3Ni00NTdlLWE4NWMtZGJhZmY4MWFkY2E4
LzEvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsiXaCueV
6rZb3LlhgD1GKNWBIr6CxiOXtf4oRT5hEihAuTJQfabI3vdyliG3NpPuy9JI6ngd
6EF+aYuVi3PSvQNkGdq1Vhw/opedtA2RGJhyy4lifkrwEIzzLwmajIjYVZ/EdRGm
FRGb8wns61vmF4Hpagithx11Z8JXS7ZA6NrSawjEGd8Ur8vHyeyiqLqrnCBLDNae
MtMJoyT3zqmmW1FqaWmQHbdbaxbrN8rMVvt9ANarGRPzez7bXhv5l6JRheQ2kEy6
H99C2CF/Mx8ZEPCMltFmpBFxnyDGCvAWy09rkB81DlCJ0KvcAXPjWjvLLELQfuSE
FeqwdnCdNYLRyA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:11:54 2026 by rpki-client