Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
File: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft (raw, json)
Hash identifier: d6lpdBi7nxyB8V38ABSmGslMda8zUYTZCsEJDEE6a2w=
Subject key identifier: 76:F5:82:6D:45:67:96:BF:41:B1:3B:F9:B1:A2:F4:40:80:18:B0:B8
Authority key identifier: 6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
Certificate issuer: /CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Certificate serial: 019DFFBCB622B72FAE6758F85E1037670B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
Manifest number: 0270
Signing time: Thu 07 May 2026 00:00:50 +0000
Manifest this update: Thu 07 May 2026 00:00:50 +0000
Manifest next update: Fri 08 May 2026 00:00:50 +0000
Files and hashes: 1: Oqj1Ttz2i8mATEEUkFaL7xibRq4.roa (hash: o5FJc5XuskwqI7qAYVTfbbhlM+Mf4Qj9G3YZZAgXrmE=)
2: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl (hash: HehzcKRzShMnKG/N8pgee+Nu/5/dyCGQB3tgBP/fqUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ff:bc:b6:22:b7:2f:ae:67:58:f8:5e:10:37:67:0b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Validity
Not Before: May 7 00:00:50 2026 GMT
Not After : May 8 00:00:50 2026 GMT
Subject: CN=76f5826d456796bf41b13bf9b1a2f4408018b0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:1d:63:96:32:60:7d:cd:ae:72:75:b2:8c:
59:7a:d5:fb:e2:a5:b3:c3:5f:ae:e2:84:f0:b4:ae:
b3:91:ba:cb:ce:09:c3:dd:2a:bd:02:f1:b5:0a:c8:
07:4e:9b:85:70:7d:a6:59:bc:1d:34:c9:c4:ad:52:
27:21:ee:64:5b:d1:57:9d:02:22:49:51:86:65:3a:
ca:b5:c5:64:9a:b7:66:93:7a:b6:e8:b1:3c:14:64:
d4:e8:ef:e5:c9:4b:de:8e:8b:31:de:e9:a9:a6:23:
58:78:99:af:5f:7c:91:22:ef:6a:60:4a:3f:e7:d1:
53:07:6b:96:6e:29:78:6b:d9:d4:fd:44:90:6d:d5:
4c:16:b8:db:9f:c4:65:d7:82:35:05:86:82:7f:16:
7e:11:d9:75:ac:a6:3b:03:40:50:fe:7c:05:68:fc:
d5:c2:cf:41:c5:6d:40:fe:ad:3c:7b:e7:f5:f5:08:
df:4c:76:aa:11:a4:13:6d:aa:cf:a5:53:ca:84:ec:
33:d2:f3:c4:4b:55:d1:59:a0:64:41:67:e5:99:e2:
bc:e0:3d:02:77:0c:73:f2:f3:88:bd:64:9c:f8:5e:
3d:bf:42:9f:27:42:3b:a1:07:76:ea:fc:7c:91:40:
12:e2:1c:17:c2:0c:68:d5:e7:bc:fe:90:81:e4:f0:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F5:82:6D:45:67:96:BF:41:B1:3B:F9:B1:A2:F4:40:80:18:B0:B8
X509v3 Authority Key Identifier:
keyid:6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:96:05:c6:32:85:a9:19:97:c0:fb:70:84:c9:c3:cf:0b:af:
10:17:20:54:49:7c:7d:86:4a:a4:ea:05:43:96:87:8f:b6:6e:
71:a5:36:ed:69:db:79:34:6a:e2:b2:db:f2:15:f0:e4:39:2f:
f1:5b:35:9e:ad:49:04:d9:aa:fa:8a:56:c1:5a:60:d1:31:aa:
f6:18:96:fa:cf:8b:80:39:a3:fe:29:76:6e:3e:8c:5e:39:eb:
61:ed:87:bf:df:07:ec:1b:06:6f:84:cb:9f:78:13:92:76:8f:
55:1d:f5:5d:5e:a6:56:34:19:b9:24:4b:2e:5a:d7:8a:e7:3f:
4f:36:f6:49:93:13:31:71:76:0c:5a:47:ca:23:20:4d:0c:00:
ef:2a:23:40:25:b7:62:91:28:a0:44:c7:54:d7:a1:4a:e1:1f:
46:d8:a4:cb:65:5d:b3:74:e0:e1:5c:65:a9:e0:d8:8b:7a:b3:
65:ef:56:fd:f6:25:b5:12:08:12:97:08:36:05:1e:ed:76:1b:
ab:e3:b4:fb:13:80:c9:a2:56:19:39:6d:b3:19:9b:1b:a7:cc:
a8:62:3c:7f:dc:dc:40:89:a9:00:53:5f:b9:ae:d9:1f:0b:0d:
d2:9b:4f:7d:75:83:a5:b4:c2:81:c3:3e:d2:2f:7e:07:2f:6f:
2c:e3:9f:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3/vLYity+uZ1j4XhA3ZwuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZDM4YmQ0YzBkMGU5ZjMwMjgwMjE5ODRjZDgzNTU2MDQ3
ZjYzOTgwHhcNMjYwNTA3MDAwMDUwWhcNMjYwNTA4MDAwMDUwWjAzMTEwLwYDVQQD
Eyg3NmY1ODI2ZDQ1Njc5NmJmNDFiMTNiZjliMWEyZjQ0MDgwMThiMGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/wdY5YyYH3NrnJ1soxZetX74qWz
w1+u4oTwtK6zkbrLzgnD3Sq9AvG1CsgHTpuFcH2mWbwdNMnErVInIe5kW9FXnQIi
SVGGZTrKtcVkmrdmk3q26LE8FGTU6O/lyUvejosx3umppiNYeJmvX3yRIu9qYEo/
59FTB2uWbil4a9nU/USQbdVMFrjbn8Rl14I1BYaCfxZ+Edl1rKY7A0BQ/nwFaPzV
ws9BxW1A/q08e+f19QjfTHaqEaQTbarPpVPKhOwz0vPES1XRWaBkQWflmeK84D0C
dwxz8vOIvWSc+F49v0KfJ0I7oQd26vx8kUAS4hwXwgxo1ee8/pCB5PB5zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHb1gm1FZ5a/QbE7+bGi9ECAGLC4MB8GA1UdIwQY
MBaAFGrTi9TA0OnzAoAhmEzYNVYEf2OYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Mjg2MTgtMmE2OS00ZmJmLTk2Yzkt
Y2U3MDAwNzRhN2ZjLzEvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85Mjg2MTgtMmE2OS00ZmJmLTk2YzktY2U3MDAwNzRhN2Zj
LzEvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpYFxjKF
qRmXwPtwhMnDzwuvEBcgVEl8fYZKpOoFQ5aHj7ZucaU27WnbeTRq4rLb8hXw5Dkv
8Vs1nq1JBNmq+opWwVpg0TGq9hiW+s+LgDmj/il2bj6MXjnrYe2Hv98H7BsGb4TL
n3gTknaPVR31XV6mVjQZuSRLLlrXiuc/Tzb2SZMTMXF2DFpHyiMgTQwA7yojQCW3
YpEooETHVNehSuEfRtiky2Vds3Tg4VxlqeDYi3qzZe9W/fYltRIIEpcINgUe7XYb
q+O0+xOAyaJWGTltsxmbG6fMqGI8f9zcQImpAFNfua7ZHwsN0ptPfXWDpbTCgcM+
0i9+By9vLOOftg==
-----END CERTIFICATE-----
Generated at Thu May 7 03:36:38 2026 by rpki-client