Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
File: ATx0EyWXFizbLdY3YKvZlx4wv2M.mft (raw, json)
Hash identifier: KAHJWeyuHKXOnZjcVbR2n+33LlMl+sOMGev2jzpgvYA=
Subject key identifier: D9:F9:35:86:AA:B2:6B:7B:CA:86:FE:08:5E:5B:4D:26:B9:09:CB:26
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Certificate issuer: /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial: 019F189E5894B8CFB35E3C38CDF00661D973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
Manifest number: 1009
Signing time: Tue 30 Jun 2026 13:00:58 +0000
Manifest this update: Tue 30 Jun 2026 13:00:58 +0000
Manifest next update: Wed 01 Jul 2026 13:00:58 +0000
Files and hashes: 1: 5QIRXwbGdujxdQZQo1ogf2n4ECU.roa (hash: swE11M7pxffwm23eQGI729DPqze3M2Czs+U2Z9G7DZk=)
2: ATx0EyWXFizbLdY3YKvZlx4wv2M.crl (hash: EBcw6Z/w7qfL9aH2PYKHS4WiyLqXz7Nq+7lCWBUHb+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:58:94:b8:cf:b3:5e:3c:38:cd:f0:06:61:d9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
Validity
Not Before: Jun 30 13:00:58 2026 GMT
Not After : Jul 1 13:00:58 2026 GMT
Subject: CN=d9f93586aab26b7bca86fe085e5b4d26b909cb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:86:4d:33:23:8a:11:9c:ec:0e:7f:58:61:2a:
4e:32:04:55:dc:08:18:bf:b6:5a:81:fe:a3:3e:db:
23:be:cb:34:33:a7:76:df:71:d3:61:bd:46:c7:4e:
54:40:ae:d5:2a:5d:b5:b9:c0:39:48:22:be:cc:12:
4b:bc:27:38:7a:bd:0f:fc:84:f3:75:2a:dc:b3:e7:
96:17:ab:46:db:b0:ad:aa:3d:5a:07:88:e5:d3:b5:
97:6e:fd:fc:9c:1f:ac:8b:3b:87:0a:f8:8f:2d:da:
99:48:7b:fa:7c:68:a9:f3:4c:49:37:c2:58:80:85:
5d:df:97:cf:4f:d1:14:1f:b4:c7:24:95:24:51:65:
0d:96:65:d7:fd:a4:09:66:4b:47:f9:d5:a2:d2:66:
42:9b:bb:76:d2:aa:bf:01:f2:09:10:27:8c:e1:49:
88:c3:eb:bf:cd:47:a2:42:bd:74:40:2f:f2:77:38:
d0:0d:f5:c1:0b:d7:a7:03:a4:32:cc:06:be:7f:c7:
8b:e5:b5:43:d9:97:49:27:f0:74:da:47:6b:25:3d:
78:21:00:88:02:00:47:71:a9:07:4a:23:df:31:87:
1e:8c:e1:93:d0:90:7c:90:20:5b:82:3c:5d:be:71:
2c:2c:35:a0:01:b2:e9:12:98:57:ca:e9:46:d3:b9:
8f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F9:35:86:AA:B2:6B:7B:CA:86:FE:08:5E:5B:4D:26:B9:09:CB:26
X509v3 Authority Key Identifier:
keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cc:5b:b8:d1:53:8a:b2:8b:14:1e:7e:63:62:59:bd:32:75:
8d:77:11:5d:75:d9:8e:aa:cd:34:50:d3:bc:24:8b:03:fe:de:
8c:6a:fd:53:85:82:0f:1d:b1:ba:54:db:64:6c:60:38:da:82:
5b:68:57:05:79:12:0b:d0:66:84:96:f8:44:49:cb:85:17:ff:
54:ba:f5:bd:5e:63:86:8d:ee:73:b1:33:89:e8:f7:68:52:98:
9f:af:bd:3e:27:5b:87:1b:4d:7b:04:cb:7f:0e:a1:0a:a8:f6:
a2:cb:53:21:3a:3d:91:0c:ba:22:23:17:3e:fe:15:ab:6f:36:
8a:ac:1a:51:2f:7f:48:e6:90:27:e9:cc:0a:fc:1f:d6:83:3e:
cd:69:5e:87:80:53:2a:b9:85:c2:88:c4:b6:02:23:3b:60:26:
a7:58:01:48:ea:83:72:89:f2:e6:26:20:fb:5b:4e:e3:b7:e8:
91:bb:02:5a:d3:6a:77:b6:cc:7b:f6:55:65:89:9d:7d:f6:da:
04:8a:5e:60:d4:5d:ec:a0:26:89:e5:72:85:e1:26:5b:90:e1:
11:18:9b:76:30:bb:35:d1:65:8c:ea:e8:31:f2:33:7d:87:4b:
ec:50:2d:d8:87:6c:d5:43:b6:d2:5b:02:8e:0e:6b:2b:b4:ab:
d5:09:eb:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YnliUuM+zXjw4zfAGYdlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxM2M3NDEzMjU5NzE2MmNkYjJkZDYzNzYwYWJkOTk3MWUz
MGJmNjMwHhcNMjYwNjMwMTMwMDU4WhcNMjYwNzAxMTMwMDU4WjAzMTEwLwYDVQQD
EyhkOWY5MzU4NmFhYjI2YjdiY2E4NmZlMDg1ZTViNGQyNmI5MDljYjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIZNMyOKEZzsDn9YYSpOMgRV3AgY
v7Zagf6jPtsjvss0M6d233HTYb1Gx05UQK7VKl21ucA5SCK+zBJLvCc4er0P/ITz
dSrcs+eWF6tG27Ctqj1aB4jl07WXbv38nB+sizuHCviPLdqZSHv6fGip80xJN8JY
gIVd35fPT9EUH7THJJUkUWUNlmXX/aQJZktH+dWi0mZCm7t20qq/AfIJECeM4UmI
w+u/zUeiQr10QC/ydzjQDfXBC9enA6QyzAa+f8eL5bVD2ZdJJ/B02kdrJT14IQCI
AgBHcakHSiPfMYcejOGT0JB8kCBbgjxdvnEsLDWgAbLpEphXyulG07mP+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNn5NYaqsmt7yob+CF5bTSa5CcsmMB8GA1UdIwQY
MBaAFAE8dBMllxYs2y3WN2Cr2ZceML9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYTZjODAtMDNhMS00YTRjLTkxY2Yt
MDY4Yjc3ZTkwM2EwLzEvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYTZjODAtMDNhMS00YTRjLTkxY2YtMDY4Yjc3ZTkwM2Ew
LzEvQVR4MEV5V1hGaXpiTGRZM1lLdlpseDR3djJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcxbuNFT
irKLFB5+Y2JZvTJ1jXcRXXXZjqrNNFDTvCSLA/7ejGr9U4WCDx2xulTbZGxgONqC
W2hXBXkSC9BmhJb4REnLhRf/VLr1vV5jho3uc7Eziej3aFKYn6+9PidbhxtNewTL
fw6hCqj2ostTITo9kQy6IiMXPv4Vq282iqwaUS9/SOaQJ+nMCvwf1oM+zWleh4BT
KrmFwojEtgIjO2Amp1gBSOqDcony5iYg+1tO47fokbsCWtNqd7bMe/ZVZYmdffba
BIpeYNRd7KAmieVyheEmW5DhERibdjC7NdFljOroMfIzfYdL7FAt2Ids1UO20lsC
jg5rK7Sr1QnrnA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:26 2026 by rpki-client