Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
File: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft (raw, json)
Hash identifier: 0gTPCv1IGf8cyykuhvsCWPcoQZypMohghjiUeFpui+4=
Subject key identifier: E9:F0:24:35:7C:7E:20:0B:E0:85:59:97:62:47:14:E2:F0:6C:C5:B9
Authority key identifier: 6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
Certificate issuer: /CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Certificate serial: 019D1422B2C3ACC30ABD3116E897FD9CD7B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
Manifest number: 01F6
Signing time: Sun 22 Mar 2026 06:01:51 +0000
Manifest this update: Sun 22 Mar 2026 06:01:51 +0000
Manifest next update: Mon 23 Mar 2026 06:01:51 +0000
Files and hashes: 1: Oqj1Ttz2i8mATEEUkFaL7xibRq4.roa (hash: o5FJc5XuskwqI7qAYVTfbbhlM+Mf4Qj9G3YZZAgXrmE=)
2: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl (hash: FoSOp9CNg8OxU2Dy1PiZCYmdWddgjnqxKwmqq3WhQC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 06:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:14:22:b2:c3:ac:c3:0a:bd:31:16:e8:97:fd:9c:d7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Validity
Not Before: Mar 22 06:01:51 2026 GMT
Not After : Mar 23 06:01:51 2026 GMT
Subject: CN=e9f024357c7e200be0855997624714e2f06cc5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e3:3f:33:82:00:99:a6:e1:fe:bb:53:c1:0c:
c1:ed:6c:67:fd:5f:c3:bf:1f:69:2a:e1:ee:a3:2f:
69:16:8a:96:69:35:0c:92:3e:70:cd:38:03:0f:0e:
78:97:2b:8b:79:18:b6:7d:f9:75:0d:cd:83:03:68:
b3:64:0d:42:6f:fa:a8:11:86:4a:25:dd:7e:b5:06:
ae:42:3c:87:a7:bd:42:e0:66:1e:e0:7b:3e:e5:ee:
36:77:e2:6c:9e:33:49:98:8c:f5:c5:56:27:27:2e:
a4:d7:e4:51:04:7e:d6:ee:56:9d:c5:44:ae:3c:57:
f4:13:e5:50:e0:8e:8a:64:2d:89:f1:a5:78:92:06:
9c:11:1f:1e:97:19:45:b7:00:c7:29:99:33:ae:6d:
f9:ea:8d:b1:04:01:86:c8:24:2e:d8:67:62:d2:b8:
31:37:a2:e4:a1:4f:29:13:6d:2b:21:d7:bb:01:8f:
a5:fe:ed:ce:e6:44:fb:ee:c5:cf:66:e0:ba:4d:9e:
50:38:7d:b5:46:b8:e7:b8:69:3b:65:74:1c:34:99:
34:e9:95:d8:38:7c:3c:51:18:c1:db:90:03:2b:fb:
b9:60:c4:0c:4c:60:32:29:27:d5:bc:af:df:0b:5e:
d0:a4:4c:8d:e2:6f:54:81:6b:b7:d8:b4:c4:f3:91:
59:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F0:24:35:7C:7E:20:0B:E0:85:59:97:62:47:14:E2:F0:6C:C5:B9
X509v3 Authority Key Identifier:
keyid:6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fa:1c:00:d3:a8:a3:4a:20:11:d3:7d:9c:f1:20:a4:13:f7:
3a:76:86:06:fe:78:e8:2e:74:27:25:b7:bd:bc:d3:b4:71:78:
b4:53:8c:eb:8b:2b:4f:99:2a:34:ec:22:21:a7:7b:3e:18:fd:
9c:18:fc:ef:fb:f4:74:51:49:9a:35:4a:e3:f3:3e:46:1d:c3:
1d:b4:b7:32:67:ae:f8:bc:d2:fe:8b:bf:a9:a0:76:84:9e:30:
ae:ca:be:56:84:a6:0b:62:12:53:bf:c6:84:9b:7c:fd:e0:ef:
91:87:a2:3d:2d:d5:90:3a:fe:62:65:ec:d7:c8:23:e4:b8:b4:
9d:5c:fb:99:47:66:8c:57:1d:c5:4f:f9:41:0e:95:4e:2d:40:
cb:73:e9:01:a7:4c:58:c9:14:c9:ee:c9:c9:11:6b:b2:42:32:
d5:67:43:a8:e0:ff:e0:30:31:60:6e:18:d3:c0:a6:c4:e2:77:
2a:6b:e7:b7:d9:36:38:19:ed:1f:4c:4a:7c:52:76:7c:5f:af:
68:f6:69:e4:f1:5e:ee:49:a8:b5:60:6b:c6:b3:fe:fb:3e:db:
bc:fa:f5:2e:d9:55:43:d5:43:d8:94:27:ce:1e:9f:d7:9a:27:
ff:df:75:8f:3c:e8:88:3f:b2:8c:81:33:29:dc:a9:f7:df:28:
db:4a:e5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 13:57:31 2026 by rpki-client