Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier: rAL1igcgpFpLyg0+AYKLelBv9TGX5IHkXgh4Pc8G7ww=
Subject key identifier: C0:3C:D8:6B:99:72:1D:30:CE:B9:17:00:7E:B5:FE:37:13:57:22:2C
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial: 019D37F7291F8DF26BCE5BF44CBC498596FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number: 04DF
Signing time: Sun 29 Mar 2026 05:00:37 +0000
Manifest this update: Sun 29 Mar 2026 05:00:37 +0000
Manifest next update: Mon 30 Mar 2026 05:00:37 +0000
Files and hashes: 1: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: csH+PnRLwTppYyoz7sUwc7o+k7pPigKLhB0FPslN4lE=)
2: w6aVtPi_QGLU8BO4yYE5hc26NUU.roa (hash: D1OzGspWySA2P+VWszH41u2S7emBKgssmNnj37u02no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:29:1f:8d:f2:6b:ce:5b:f4:4c:bc:49:85:96:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Validity
Not Before: Mar 29 05:00:37 2026 GMT
Not After : Mar 30 05:00:37 2026 GMT
Subject: CN=c03cd86b99721d30ceb917007eb5fe371357222c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:56:40:82:5a:3a:45:21:af:49:d5:22:54:
a7:10:88:9f:e2:b1:8b:11:32:04:a1:c9:96:75:46:
6d:5b:d5:57:34:7a:26:01:40:71:d5:e7:5b:47:96:
68:ba:a5:16:a1:8d:e6:5d:ac:09:2a:34:15:41:d6:
6e:e6:e2:28:85:66:b7:13:be:b7:9e:c8:b2:4f:89:
39:39:d4:84:78:b7:b4:b6:6c:08:5a:67:52:83:36:
ca:21:e5:ab:57:16:c1:20:ce:a4:d7:f7:de:f6:e2:
f7:a2:1d:25:e8:f7:ab:65:ef:b4:0c:78:cc:16:83:
cc:77:f9:b5:61:dd:c7:dd:28:12:96:82:a7:5b:f4:
31:aa:6a:51:5c:b4:2f:51:f1:d6:1f:3a:dc:91:41:
4f:1a:1b:78:f4:55:c3:7f:ba:9c:c1:90:6f:b9:72:
4c:77:8d:c9:9b:6c:85:73:cd:b0:d6:21:d5:f3:cf:
5e:90:7a:70:53:a4:42:30:39:41:10:d9:47:b5:97:
98:86:56:6e:22:3a:49:23:c6:08:f0:8e:96:b3:6f:
3b:ed:bf:47:88:31:ac:55:dd:5c:27:97:15:fc:1f:
42:0f:e0:3a:78:82:ad:33:5e:66:c2:db:0d:9a:3e:
62:31:5b:fc:ca:9c:cc:c5:fe:c8:b1:eb:52:bd:92:
0c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3C:D8:6B:99:72:1D:30:CE:B9:17:00:7E:B5:FE:37:13:57:22:2C
X509v3 Authority Key Identifier:
keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:60:17:4d:a3:fb:78:1a:91:54:8e:f0:00:cf:f9:4a:a7:46:
e2:37:e1:5d:b9:81:d4:ed:31:eb:ee:3a:52:71:4b:76:df:ea:
3e:04:8d:c7:3f:34:fa:3d:92:d3:ff:25:41:b1:a9:0a:3d:0a:
46:6a:eb:ad:e0:cc:78:60:c4:81:8b:dc:0e:4f:b6:96:3e:33:
a5:01:1f:94:ff:28:e1:3f:2c:bd:d3:01:db:c8:0c:01:a1:d0:
79:1e:8b:e7:c5:80:4d:81:36:5c:77:53:01:8a:45:b0:cd:4b:
df:9d:41:83:28:b2:27:09:3b:18:b6:8d:b4:20:20:4d:5e:37:
43:43:db:f0:3f:e0:ce:08:82:3c:9f:d4:51:9b:65:10:b1:0b:
bf:08:cf:9b:18:d7:7b:c9:9e:27:48:7b:a5:e0:4c:df:5a:11:
73:d2:31:14:4f:e2:54:49:37:1c:d1:e7:4d:b7:4b:00:06:16:
7b:68:da:de:52:db:0b:2a:0d:0c:40:a9:16:22:f2:9d:fe:02:
61:b0:41:15:1e:16:9e:0d:f3:f5:1c:4e:49:d2:a4:1d:8c:7f:
e6:a2:37:58:5c:a6:90:05:d1:85:c7:b7:e8:2d:f7:a5:0d:47:
d0:ba:2b:f3:df:da:b9:82:b2:85:8d:93:37:22:03:9b:20:ae:
90:ea:a4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:32 2026 by rpki-client