Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/610b54-4174-4605-8c56-b8a3e9cfeaf7/1/atwsIKz5mPCjL-cp_bLMnRoBP9I.mft
File: atwsIKz5mPCjL-cp_bLMnRoBP9I.mft (raw, json)
Hash identifier: bLHqLl4Jo8WJAnE/Ik8ubsYQLxYvxM0uzT6b4vsEEZA=
Subject key identifier: 25:75:11:D3:35:A9:C8:3E:39:FB:7D:3D:FF:B7:23:6E:DA:DF:F9:4D
Authority key identifier: 6A:DC:2C:20:AC:F9:98:F0:A3:2F:E7:29:FD:B2:CC:9D:1A:01:3F:D2
Certificate issuer: /CN=6adc2c20acf998f0a32fe729fdb2cc9d1a013fd2
Certificate serial: 019D390A2B2F78CFBC2063178138B9065BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atwsIKz5mPCjL-cp_bLMnRoBP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/610b54-4174-4605-8c56-b8a3e9cfeaf7/1/atwsIKz5mPCjL-cp_bLMnRoBP9I.mft
Manifest number: 0170
Signing time: Sun 29 Mar 2026 10:01:00 +0000
Manifest this update: Sun 29 Mar 2026 10:01:00 +0000
Manifest next update: Mon 30 Mar 2026 10:01:00 +0000
Files and hashes: 1: atwsIKz5mPCjL-cp_bLMnRoBP9I.crl (hash: PqYg5tWhwHug66EHsOqWK6AfSRo2AZugu2PuvzHnzMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/610b54-4174-4605-8c56-b8a3e9cfeaf7/1/atwsIKz5mPCjL-cp_bLMnRoBP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/610b54-4174-4605-8c56-b8a3e9cfeaf7/1/atwsIKz5mPCjL-cp_bLMnRoBP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/atwsIKz5mPCjL-cp_bLMnRoBP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:2b:2f:78:cf:bc:20:63:17:81:38:b9:06:5b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6adc2c20acf998f0a32fe729fdb2cc9d1a013fd2
Validity
Not Before: Mar 29 10:01:00 2026 GMT
Not After : Mar 30 10:01:00 2026 GMT
Subject: CN=257511d335a9c83e39fb7d3dffb7236edadff94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9a:37:8e:f1:77:4a:9d:94:bc:eb:d5:71:1f:
9e:95:16:36:62:86:4d:7b:a3:f5:6b:7c:3f:a6:3e:
6b:ba:a6:2f:6c:38:48:d0:0a:49:33:22:43:52:3c:
28:b2:f2:12:df:53:06:32:33:eb:2e:97:c2:6b:29:
77:cc:0f:e2:84:87:f2:da:51:3e:59:f1:c4:ce:cc:
b7:59:ed:2e:a8:0c:98:4f:5a:1d:8b:f9:de:6c:02:
2c:f4:ba:cf:20:97:f2:4f:75:70:28:26:02:24:1e:
f1:df:10:53:a2:92:9c:0d:ed:9b:52:e1:56:f5:90:
e1:ed:6d:6e:d0:e1:41:76:96:1f:2e:d8:63:4a:75:
07:77:6e:d9:d5:1e:94:03:03:24:ad:ba:83:d7:f1:
90:d7:06:bf:8f:9b:00:17:89:06:44:f1:a6:8a:81:
28:e8:1b:9b:b9:a9:bf:45:40:ca:a6:ca:d8:88:8a:
ee:73:53:cf:7e:4d:33:fd:aa:b5:6e:3b:0b:6c:d4:
cd:f3:7b:ba:04:37:19:0f:67:40:dd:ec:a6:1e:5c:
69:d1:5f:a3:4d:a9:1d:d6:b6:ef:bc:eb:e2:5d:88:
48:1b:b4:22:fb:37:cb:3e:35:e0:aa:68:59:a3:26:
49:80:69:d8:f2:9f:45:04:73:fd:c5:84:66:1a:cf:
14:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:75:11:D3:35:A9:C8:3E:39:FB:7D:3D:FF:B7:23:6E:DA:DF:F9:4D
X509v3 Authority Key Identifier:
keyid:6A:DC:2C:20:AC:F9:98:F0:A3:2F:E7:29:FD:B2:CC:9D:1A:01:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atwsIKz5mPCjL-cp_bLMnRoBP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/610b54-4174-4605-8c56-b8a3e9cfeaf7/1/atwsIKz5mPCjL-cp_bLMnRoBP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/610b54-4174-4605-8c56-b8a3e9cfeaf7/1/atwsIKz5mPCjL-cp_bLMnRoBP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:6e:f5:12:ba:42:52:62:61:d4:eb:e5:05:63:b9:8e:bc:2c:
fb:77:5a:1e:5e:c4:be:39:84:81:61:4e:66:a1:26:5e:d6:42:
b4:ec:1d:e7:1c:ae:04:ca:2a:e3:7f:de:40:ee:b6:db:fd:a2:
07:25:42:42:6c:db:43:bb:26:93:1c:fa:91:87:28:ad:63:dd:
18:13:8b:98:d9:6e:3d:eb:16:bb:37:0c:ae:cd:4b:16:b1:81:
38:f8:77:aa:38:13:34:0c:5a:1a:c0:10:fc:ae:9f:76:e7:fa:
18:03:0f:98:cc:bc:11:d9:ea:50:77:4c:18:10:a5:4f:89:17:
89:91:e5:ea:7b:48:97:a4:3d:d2:d9:0a:af:e4:0b:7e:5e:a3:
1a:fc:eb:50:9b:e7:72:58:09:8c:9e:25:a9:ad:0c:f0:6f:b9:
94:8f:0b:ae:0e:5f:4e:72:cd:2c:4b:b9:87:21:ad:e0:b6:73:
17:3f:64:cd:9b:2e:93:7c:9c:27:f9:89:f7:bf:87:ed:97:61:
92:ad:bf:d0:c8:e7:60:a5:64:d7:32:73:9d:6d:44:c3:b6:e8:
49:b7:06:3f:94:9b:02:d2:38:d7:ec:69:5f:de:c1:29:4a:b4:
d9:fa:9a:02:57:94:4c:fc:6f:e9:59:57:bc:ca:0e:ba:64:f7:
05:dc:79:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:09 2026 by rpki-client