Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
File: Cex03AtsLVudMOrzzSIpT3EZA58.mft (raw, json)
Hash identifier: t7GxWlobDMvr0/u+Kazj+41sSXNxhUy8j1/+LrpFUAY=
Subject key identifier: D4:F1:51:99:88:D6:EF:22:DF:44:D6:78:13:3A:92:AA:E3:B9:21:57
Authority key identifier: 09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
Certificate issuer: /CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Certificate serial: 019CAAC6CACB98E1516FDCF12A0BE85C793C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
Manifest number: 09E1
Signing time: Sun 01 Mar 2026 19:01:20 +0000
Manifest this update: Sun 01 Mar 2026 19:01:20 +0000
Manifest next update: Mon 02 Mar 2026 19:01:20 +0000
Files and hashes: 1: Cex03AtsLVudMOrzzSIpT3EZA58.crl (hash: zD9wRdwgQbAw/bBigOaHvSfB4Q4mjDEKC7ZCvZJa8Jw=)
2: MOCPp2EklA9KiOER-D8tmFoh_tA.roa (hash: K1IAySUMUAKsiAnRdk6VSTb/S+lbIKi0pXcziMBqppk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ca:cb:98:e1:51:6f:dc:f1:2a:0b:e8:5c:79:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09ec74dc0b6c2d5b9d30eaf3cd22294f7119039f
Validity
Not Before: Mar 1 19:01:20 2026 GMT
Not After : Mar 2 19:01:20 2026 GMT
Subject: CN=d4f1519988d6ef22df44d678133a92aae3b92157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:0d:f5:b2:2f:41:a7:85:0c:c4:e7:fe:f3:
b6:0f:3e:97:74:ed:24:ff:ff:e6:e8:29:0a:bd:22:
2e:ac:cf:9b:b1:30:9b:6c:36:77:5c:c2:77:ee:17:
48:44:da:60:d6:d5:69:15:3a:9c:2c:df:d4:c4:fd:
8a:3c:4c:20:06:7b:f0:13:ac:1c:4a:15:a2:fc:39:
89:f0:7a:10:8a:97:be:41:66:9b:cc:a1:7a:a2:b7:
12:08:95:34:b3:70:b2:c5:dc:49:8a:a7:de:67:a7:
85:40:5f:96:b3:cb:5d:37:3f:b0:0c:d9:33:ef:a1:
5b:bb:a6:0f:82:9c:b0:2c:3d:ff:7f:b2:2f:c1:09:
92:01:a3:95:59:a1:74:cc:2e:40:70:23:7f:6f:8a:
50:b1:5e:3e:83:b9:ee:5d:9d:e9:65:a5:eb:4f:31:
ad:49:56:dc:d0:f5:5b:36:3d:04:c4:73:c6:7b:89:
dd:0b:3c:54:28:50:01:44:f5:2e:dd:18:47:c8:f1:
d2:83:73:64:c2:66:06:b2:18:ba:78:b6:08:98:b0:
d4:65:fa:b6:3c:86:d2:ed:22:51:37:e7:e2:9c:7f:
f0:00:aa:f1:4d:4a:5e:e5:18:5a:a9:de:07:37:2b:
58:8a:9d:19:6f:ae:06:51:8e:73:a5:cc:10:d1:4a:
eb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F1:51:99:88:D6:EF:22:DF:44:D6:78:13:3A:92:AA:E3:B9:21:57
X509v3 Authority Key Identifier:
keyid:09:EC:74:DC:0B:6C:2D:5B:9D:30:EA:F3:CD:22:29:4F:71:19:03:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cex03AtsLVudMOrzzSIpT3EZA58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/cd883c-4d76-457e-a85c-dbaff81adca8/1/Cex03AtsLVudMOrzzSIpT3EZA58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:80:51:42:42:90:63:b6:7c:28:ff:70:13:89:49:21:d7:ed:
04:38:36:f9:42:24:6e:ca:45:31:c8:ac:1f:ed:04:9d:7d:c0:
cf:f3:08:b5:22:cc:17:9b:9f:53:8f:ee:4f:c0:4d:9c:46:8b:
c6:b7:7b:f3:a0:cf:81:31:15:71:a8:e4:cf:a4:54:64:6c:e3:
65:6a:f6:c1:3a:17:41:df:f0:51:e1:fc:21:aa:c4:d6:47:e6:
c6:55:17:4d:64:51:92:50:8b:3d:a8:ea:c5:be:53:e3:34:5b:
a9:ea:bc:99:b9:fc:d8:e2:92:c3:51:42:e6:2f:8e:5d:04:ab:
1b:8d:ac:85:86:ac:3e:42:40:a9:ec:81:8c:2e:6f:a3:36:2b:
04:92:bf:6b:5f:56:4f:fe:11:76:7d:a9:15:cc:d6:a1:61:95:
70:5e:a5:84:4c:c7:c0:88:6d:e4:98:e3:07:32:c0:ad:19:1c:
88:40:7c:6a:9a:e3:b1:16:f6:1b:7d:65:5d:86:ba:d4:e8:02:
c9:2b:6f:2e:57:2e:93:2f:b1:7c:50:56:28:af:4e:ea:e7:2d:
63:a1:17:4c:84:db:14:b2:3f:1a:9d:e7:38:01:b0:96:ac:b2:
e2:a1:94:f0:d2:58:78:25:1e:eb:78:d2:2d:95:a1:30:c0:fc:
db:4f:33:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxsrLmOFRb9zxKgvoXHk8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5ZWM3NGRjMGI2YzJkNWI5ZDMwZWFmM2NkMjIyOTRmNzEx
OTAzOWYwHhcNMjYwMzAxMTkwMTIwWhcNMjYwMzAyMTkwMTIwWjAzMTEwLwYDVQQD
EyhkNGYxNTE5OTg4ZDZlZjIyZGY0NGQ2NzgxMzNhOTJhYWUzYjkyMTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG0N9bIvQaeFDMTn/vO2Dz6XdO0k
///m6CkKvSIurM+bsTCbbDZ3XMJ37hdIRNpg1tVpFTqcLN/UxP2KPEwgBnvwE6wc
ShWi/DmJ8HoQipe+QWabzKF6orcSCJU0s3CyxdxJiqfeZ6eFQF+Ws8tdNz+wDNkz
76Fbu6YPgpywLD3/f7IvwQmSAaOVWaF0zC5AcCN/b4pQsV4+g7nuXZ3pZaXrTzGt
SVbc0PVbNj0ExHPGe4ndCzxUKFABRPUu3RhHyPHSg3NkwmYGshi6eLYImLDUZfq2
PIbS7SJRN+finH/wAKrxTUpe5Rhaqd4HNytYip0Zb64GUY5zpcwQ0UrrxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTxUZmI1u8i30TWeBM6kqrjuSFXMB8GA1UdIwQY
MBaAFAnsdNwLbC1bnTDq880iKU9xGQOfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jZDg4M2MtNGQ3Ni00NTdlLWE4NWMt
ZGJhZmY4MWFkY2E4LzEvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9jZDg4M2MtNGQ3Ni00NTdlLWE4NWMtZGJhZmY4MWFkY2E4
LzEvQ2V4MDNBdHNMVnVkTU9yenpTSXBUM0VaQTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4BRQkKQ
Y7Z8KP9wE4lJIdftBDg2+UIkbspFMcisH+0EnX3Az/MItSLMF5ufU4/uT8BNnEaL
xrd786DPgTEVcajkz6RUZGzjZWr2wToXQd/wUeH8IarE1kfmxlUXTWRRklCLPajq
xb5T4zRbqeq8mbn82OKSw1FC5i+OXQSrG42shYasPkJAqeyBjC5vozYrBJK/a19W
T/4Rdn2pFczWoWGVcF6lhEzHwIht5JjjBzLArRkciEB8aprjsRb2G31lXYa61OgC
yStvLlcuky+xfFBWKK9O6uctY6EXTITbFLI/Gp3nOAGwlqyy4qGU8NJYeCUe63jS
LZWhMMD8208zDQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:53 2026 by rpki-client