Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
File: ATNUQlFNUkm1FDz9-CEha7XFKUA.mft (raw, json)
Hash identifier: MKvWif0GmI7l/s/UKd7ElkhtZHhXcFQIICVzzQ0Ymd0=
Subject key identifier: 13:28:D6:A5:FF:74:40:76:F0:E1:2D:81:3C:3D:3E:64:8D:C7:F2:D6
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Certificate issuer: /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial: 019D3909DE576F0ED769C184EA09E7522E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
Manifest number: 15EC
Signing time: Sun 29 Mar 2026 10:00:41 +0000
Manifest this update: Sun 29 Mar 2026 10:00:41 +0000
Manifest next update: Mon 30 Mar 2026 10:00:41 +0000
Files and hashes: 1: ATNUQlFNUkm1FDz9-CEha7XFKUA.crl (hash: vfHg0UaOzJymTkhPqA/UamZN3p7vRj36agTt9SsxB10=)
2: rM0FGnvlMxVnBDejgMVa-ko-qg8.roa (hash: xaR1odMEKAJSPNcFWjrniRDpb0Y5i0ojVSbD/UxfcDQ=)
3: w8ZuRQyK62OI8GoGdanaljFmtMI.roa (hash: xLIOqMZ/996WD0cHfz0VFhrfrePPUxfR1CU3QVv6WKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:de:57:6f:0e:d7:69:c1:84:ea:09:e7:52:2e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
Validity
Not Before: Mar 29 10:00:41 2026 GMT
Not After : Mar 30 10:00:41 2026 GMT
Subject: CN=1328d6a5ff744076f0e12d813c3d3e648dc7f2d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:21:fc:2e:33:0c:c1:0a:d8:09:af:47:c8:
63:a5:30:d5:68:3d:e5:22:e8:38:e5:85:60:71:57:
a0:d1:95:b3:6a:6c:a7:16:24:e3:3a:84:e9:8d:07:
6e:d8:38:c0:ed:d2:2c:8c:5d:ff:d4:ea:ab:50:a0:
4e:f1:49:aa:5c:7f:e5:79:ae:ff:b0:15:a6:82:96:
02:58:1b:00:a7:b7:44:02:57:7a:72:00:07:17:94:
19:ef:79:57:50:30:41:62:92:a7:7b:86:4c:d3:24:
8c:9c:a7:bf:d2:38:18:3a:38:8f:28:88:38:88:4b:
38:50:8e:68:0d:49:f6:f7:df:12:2f:11:e7:70:52:
3c:6e:55:a3:3c:2c:25:f4:2f:51:f6:db:13:60:da:
18:1a:7e:4d:7a:2f:19:d4:7d:b3:27:36:a6:f2:76:
55:fd:11:11:16:bc:0a:e6:1e:3d:fe:ef:31:7b:22:
30:18:30:11:d0:6e:ba:7d:b3:28:44:d1:11:2b:30:
ac:9d:12:5e:c7:da:e8:5b:34:91:94:e1:1a:1f:00:
72:23:e4:50:a7:8e:42:91:c1:9e:25:07:bf:f6:b9:
e4:ca:72:7b:85:e8:47:90:58:e3:a8:37:db:df:c3:
16:4d:26:ce:47:d6:17:17:84:48:f0:ee:81:53:4e:
19:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:28:D6:A5:FF:74:40:76:F0:E1:2D:81:3C:3D:3E:64:8D:C7:F2:D6
X509v3 Authority Key Identifier:
keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:36:a7:af:de:b0:15:3c:a3:35:b3:79:84:ae:1b:15:4d:1d:
07:ea:ae:ce:40:3b:d5:a2:d5:a0:73:01:68:d7:ca:88:f2:ed:
30:42:38:29:ee:af:c9:fa:90:65:2d:61:c2:b4:6e:ee:84:84:
df:59:6c:6b:c0:b5:eb:72:3a:93:79:dc:a8:1a:a0:3f:3e:38:
f8:ad:62:90:dc:73:82:d6:f9:ca:13:23:ca:f0:32:ed:eb:ff:
e7:5b:fe:2d:64:85:08:ab:b0:fa:b9:33:02:49:ba:ce:20:e6:
df:f8:42:3d:18:87:2c:7f:c5:6c:3f:97:35:ce:59:c2:81:bb:
7c:22:60:f7:b7:65:eb:83:09:5f:22:67:ee:a6:0c:09:3b:3f:
8d:5c:63:6e:80:7f:ee:15:bd:37:fb:b7:51:c0:f0:47:02:77:
70:27:64:69:82:1a:41:e6:7b:47:3c:c1:6f:ad:02:e3:19:64:
ff:23:6a:2a:07:7c:8c:9c:49:23:a7:92:bb:d8:32:a6:d2:af:
28:c6:d5:95:c0:0a:68:01:80:4f:77:fa:10:a6:70:8f:aa:47:
65:a7:a0:9e:54:7f:4b:8a:31:f7:5d:55:f4:81:41:03:e4:72:
1d:f0:3f:c4:70:25:24:52:b6:41:85:c6:c4:d6:ab:66:58:ec:
34:b3:00:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cd5Xbw7XacGE6gnnUi5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMzM1NDQyNTE0ZDUyNDliNTE0M2NmZGY4MjEyMTZiYjVj
NTI5NDAwHhcNMjYwMzI5MTAwMDQxWhcNMjYwMzMwMTAwMDQxWjAzMTEwLwYDVQQD
EygxMzI4ZDZhNWZmNzQ0MDc2ZjBlMTJkODEzYzNkM2U2NDhkYzdmMmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIQh/C4zDMEK2AmvR8hjpTDVaD3l
Iug45YVgcVeg0ZWzamynFiTjOoTpjQdu2DjA7dIsjF3/1OqrUKBO8UmqXH/lea7/
sBWmgpYCWBsAp7dEAld6cgAHF5QZ73lXUDBBYpKne4ZM0ySMnKe/0jgYOjiPKIg4
iEs4UI5oDUn2998SLxHncFI8blWjPCwl9C9R9tsTYNoYGn5Nei8Z1H2zJzam8nZV
/RERFrwK5h49/u8xeyIwGDAR0G66fbMoRNERKzCsnRJex9roWzSRlOEaHwByI+RQ
p45CkcGeJQe/9rnkynJ7hehHkFjjqDfb38MWTSbOR9YXF4RI8O6BU04ZgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMo1qX/dEB28OEtgTw9PmSNx/LWMB8GA1UdIwQY
MBaAFAEzVEJRTVJJtRQ8/fghIWu1xSlAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVROVVFsRk5Va20xRkR6OS1DRWhhN1hGS1VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9jN2E2OGYtN2JmOC00ZjgwLWE5YTIt
ODE1ZDJjMDI2NjQ2LzEvQVROVVFsRk5Va20xRkR6OS1DRWhhN1hGS1VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9jN2E2OGYtN2JmOC00ZjgwLWE5YTItODE1ZDJjMDI2NjQ2
LzEvQVROVVFsRk5Va20xRkR6OS1DRWhhN1hGS1VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzanr96w
FTyjNbN5hK4bFU0dB+quzkA71aLVoHMBaNfKiPLtMEI4Ke6vyfqQZS1hwrRu7oSE
31lsa8C163I6k3ncqBqgPz44+K1ikNxzgtb5yhMjyvAy7ev/51v+LWSFCKuw+rkz
Akm6ziDm3/hCPRiHLH/FbD+XNc5ZwoG7fCJg97dl64MJXyJn7qYMCTs/jVxjboB/
7hW9N/u3UcDwRwJ3cCdkaYIaQeZ7RzzBb60C4xlk/yNqKgd8jJxJI6eSu9gyptKv
KMbVlcAKaAGAT3f6EKZwj6pHZaegnlR/S4ox911V9IFBA+RyHfA/xHAlJFK2QYXG
xNarZljsNLMAgA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:48:55 2026 by rpki-client