Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
File: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft (raw, json)
Hash identifier: cOYHB2XPtZmWxwHnwzCv+4B4eoEPZGZeBZeDAMYOmjg=
Subject key identifier: 21:10:17:F6:4B:75:64:4E:F0:5B:58:2A:BD:16:16:5E:E2:B2:BE:63
Authority key identifier: 6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
Certificate issuer: /CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Certificate serial: 019EF6EED0508CDE809218BFC2F53EDE8AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
Manifest number: 02F0
Signing time: Wed 24 Jun 2026 00:01:46 +0000
Manifest this update: Wed 24 Jun 2026 00:01:46 +0000
Manifest next update: Thu 25 Jun 2026 00:01:46 +0000
Files and hashes: 1: Oqj1Ttz2i8mATEEUkFaL7xibRq4.roa (hash: o5FJc5XuskwqI7qAYVTfbbhlM+Mf4Qj9G3YZZAgXrmE=)
2: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl (hash: s9n3Ff+U6dfmsUvW6WWPu+Q+1rNAWlkGgtXD6Omx/Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 24 Jun 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f6:ee:d0:50:8c:de:80:92:18:bf:c2:f5:3e:de:8a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Validity
Not Before: Jun 24 00:01:46 2026 GMT
Not After : Jun 25 00:01:46 2026 GMT
Subject: CN=211017f64b75644ef05b582abd16165ee2b2be63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:48:70:6c:07:4c:b6:95:0b:dc:a4:31:5e:
cc:36:46:2d:37:3e:34:99:3a:2c:15:e9:ef:c3:64:
8a:ba:a4:f4:75:0b:7e:89:09:f6:23:c1:d8:58:99:
56:6b:c8:b9:e3:4c:1b:44:7d:a5:e0:0f:29:ff:70:
eb:72:38:34:fe:40:32:bf:cf:59:3f:86:85:71:2d:
03:59:d8:5f:7c:08:42:07:94:b8:97:ae:00:82:8c:
a7:03:b9:86:dc:13:be:67:c9:1d:6a:2b:02:d3:1d:
21:a8:90:f3:22:09:ed:f8:fa:90:cf:a6:7e:41:de:
bb:1b:2e:08:cc:47:0a:8d:30:14:60:65:05:03:3a:
d7:9b:0f:00:1f:9a:6b:0a:74:dd:c9:9e:7d:f6:89:
40:57:1e:92:e2:5d:a2:16:ec:95:97:5f:98:43:95:
51:73:28:24:46:3f:8d:d8:ab:61:b1:9f:35:e6:7d:
1a:d4:38:cd:0f:b5:65:c4:10:06:27:c4:fb:14:65:
84:5c:09:6b:e2:30:ef:b0:14:ad:57:59:a3:a7:73:
0b:62:e7:2c:57:bb:44:ae:81:b2:c3:8e:02:20:5b:
d4:70:d7:1a:5b:9d:d2:e2:88:64:08:b3:05:5a:34:
f9:0b:4e:9f:c7:0b:ca:3c:79:2e:ec:da:c2:54:11:
b2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:10:17:F6:4B:75:64:4E:F0:5B:58:2A:BD:16:16:5E:E2:B2:BE:63
X509v3 Authority Key Identifier:
keyid:6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b9:8c:4e:1e:8a:e5:49:14:7e:e6:eb:58:bb:f4:1e:69:b2:
7c:ad:a6:8e:33:56:54:1d:bd:7d:bb:1f:4b:10:71:bb:23:f7:
1e:f4:d8:95:b2:b0:c4:64:b4:34:7a:72:2a:5b:bd:97:cd:bf:
70:e8:ec:e6:27:ee:c7:61:d5:01:c2:4b:cd:8e:67:35:62:8a:
0d:2c:ce:27:5f:37:a4:39:bb:63:9a:5f:59:f9:f8:14:3e:5f:
f8:3d:d3:f6:d9:50:2b:8b:20:e8:0f:e1:0e:e4:39:fa:07:8a:
e1:64:a6:5b:69:45:0c:b1:10:23:1e:b0:00:bd:f2:76:c0:95:
41:a3:22:24:cf:63:d6:00:b5:3d:49:eb:25:3a:d7:f3:70:fd:
21:bf:25:2a:87:aa:bb:ed:e2:ce:56:f6:f7:e5:71:dc:0c:a5:
d2:75:d8:c2:33:9b:75:4f:3f:de:de:0d:b0:b8:f2:19:bc:bb:
35:5e:4b:94:13:eb:45:23:85:74:68:db:9e:71:b2:85:7c:3a:
4b:85:f0:ba:46:15:dd:1b:b9:93:80:63:03:1f:fe:a6:f9:10:
55:1e:d9:a5:19:bc:09:22:82:ff:9f:45:60:cc:0a:38:2d:6c:
0b:6b:f5:c1:41:89:c5:ad:d1:a3:22:5c:52:46:81:f9:3d:7a:
75:a8:bb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 08:39:33 2026 by rpki-client