Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
File: ATx0EyWXFizbLdY3YKvZlx4wv2M.mft (raw, json)
Hash identifier: uf2U2kJF68FMC7iyZgG7U4tiT7ReKCYrSu1Z77mHAos=
Subject key identifier: D2:80:41:2C:72:11:F8:B3:57:2D:1E:92:77:63:7C:B4:F6:BF:2C:EC
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Certificate issuer: /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial: 019D37C029EBE596F564B5976934B47FA045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
Manifest number: 0F10
Signing time: Sun 29 Mar 2026 04:00:33 +0000
Manifest this update: Sun 29 Mar 2026 04:00:33 +0000
Manifest next update: Mon 30 Mar 2026 04:00:33 +0000
Files and hashes: 1: 5QIRXwbGdujxdQZQo1ogf2n4ECU.roa (hash: swE11M7pxffwm23eQGI729DPqze3M2Czs+U2Z9G7DZk=)
2: ATx0EyWXFizbLdY3YKvZlx4wv2M.crl (hash: jdjTvmBByrtEsAczI6xEspMLFxKv3NBSNI6+bJk2dR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:29:eb:e5:96:f5:64:b5:97:69:34:b4:7f:a0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
Validity
Not Before: Mar 29 04:00:33 2026 GMT
Not After : Mar 30 04:00:33 2026 GMT
Subject: CN=d280412c7211f8b3572d1e9277637cb4f6bf2cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:ae:ac:b7:78:97:50:b8:36:e4:c8:73:a2:
f5:f4:c8:70:6c:30:cf:5e:9e:85:cc:11:8b:02:c0:
65:a5:59:75:fc:59:b4:8e:07:88:24:1c:b6:ff:1b:
d0:ad:6e:ce:0c:da:2d:3e:c3:d9:d0:78:79:82:85:
a5:d3:a9:23:ce:ee:29:07:15:92:b5:80:f3:18:76:
92:25:6e:bc:a0:03:9a:69:36:be:30:5f:6c:0f:7f:
d2:02:14:bc:ff:a6:7f:69:4f:16:6c:ce:a0:e1:e2:
9e:99:da:56:24:04:54:d2:da:48:3c:14:c6:7b:74:
d7:3f:4a:4a:1b:2c:9d:16:52:6b:af:c0:d0:bf:65:
51:ea:b8:c3:cf:d8:e9:9f:66:ee:89:eb:4f:cd:85:
35:1f:04:af:32:f9:71:60:7c:80:00:f5:2a:78:0f:
2c:94:ae:77:83:f8:ae:ab:f1:44:4d:95:dc:96:24:
4e:82:43:fc:26:7a:9e:8b:39:9e:3f:74:42:f4:50:
09:2d:6e:1d:db:29:23:58:19:ab:7c:65:f4:9b:d0:
c8:00:2f:78:11:93:95:4b:cd:62:09:76:32:37:33:
6e:61:12:37:2a:59:fd:98:c0:18:27:a9:04:1a:8e:
f6:29:0a:85:bc:a0:7d:65:3f:ed:d3:59:04:12:a2:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:80:41:2C:72:11:F8:B3:57:2D:1E:92:77:63:7C:B4:F6:BF:2C:EC
X509v3 Authority Key Identifier:
keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d9:09:30:40:f4:84:77:a9:5f:6a:c6:4b:d6:72:4d:86:f8:
18:37:fd:ad:60:ae:86:9e:1a:4c:9b:66:7f:82:6c:ea:e3:ac:
ec:bc:2d:64:9f:43:f2:ef:f9:93:38:1e:55:a8:9b:89:d7:f6:
f3:1a:87:90:33:01:73:5f:d3:5e:01:d8:e2:aa:30:bc:9f:1d:
17:8e:f7:79:d3:26:c3:03:a4:f4:16:12:51:96:2f:0f:0a:27:
6f:76:9c:f3:b1:92:73:a0:a9:c6:31:9a:af:a3:ca:1f:ca:1e:
ae:3c:25:94:46:da:46:e9:9c:17:b2:44:0d:33:d5:15:5e:16:
9a:f2:2b:3c:05:0d:54:5a:44:ea:2b:3f:29:f4:86:b3:15:b0:
79:b1:34:9a:c2:a7:24:f6:54:91:3a:f8:42:23:96:21:89:db:
c0:fb:ce:19:ec:7e:c3:2e:3c:de:18:14:c5:88:05:a6:d1:95:
b4:8b:2b:40:4e:71:25:3a:00:b3:a4:d0:c7:12:52:77:41:01:
e7:e2:e3:15:f3:34:c2:d9:a5:0a:84:20:e5:a7:b6:de:78:35:
b4:12:a7:b1:97:f4:25:e8:a9:b6:2c:7e:a4:42:a7:58:ec:32:
c5:4c:7f:1a:26:fb:95:d6:45:f5:f5:a7:8f:12:cc:85:ea:f8:
d8:ff:61:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:47 2026 by rpki-client