Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier: QL3MTl399XbscDKfLefBOcItISZb0SK7lAbjNSufqD0=
Subject key identifier: 65:7D:82:C6:FF:B9:DA:39:A1:16:F3:2A:AC:ED:5C:EB:F7:65:DE:37
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial: 019D2695FDD8C8EFEA1E534105D8D1E10A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number: 04D6
Signing time: Wed 25 Mar 2026 20:00:57 +0000
Manifest this update: Wed 25 Mar 2026 20:00:57 +0000
Manifest next update: Thu 26 Mar 2026 20:00:57 +0000
Files and hashes: 1: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: 9rpgGTCgQJEbCrFtJGGYOuoW/b0l7TLaX+abRPps9JY=)
2: w6aVtPi_QGLU8BO4yYE5hc26NUU.roa (hash: D1OzGspWySA2P+VWszH41u2S7emBKgssmNnj37u02no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:fd:d8:c8:ef:ea:1e:53:41:05:d8:d1:e1:0a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Validity
Not Before: Mar 25 20:00:57 2026 GMT
Not After : Mar 26 20:00:57 2026 GMT
Subject: CN=657d82c6ffb9da39a116f32aaced5cebf765de37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:90:d0:6b:b5:d4:f1:b1:c9:6d:2b:7a:c3:97:
a4:75:3b:39:e5:6e:06:ef:03:37:bf:8e:25:48:3b:
98:82:e8:f2:5c:ce:da:23:ea:9f:e3:c6:a3:64:8e:
5a:01:88:d8:95:3d:1e:1d:d3:ea:ad:0f:3d:b3:72:
4e:76:f2:2f:32:e7:d6:dd:99:cc:18:55:9b:18:4e:
a6:fa:05:4b:db:2a:43:e7:b2:69:6c:4d:00:4e:4c:
69:c6:7c:f9:b9:fc:be:3b:3d:cd:9d:d9:9d:88:76:
e6:ad:9a:e6:02:08:a8:75:94:27:e5:ab:52:68:79:
e2:3b:ad:26:01:ff:4c:49:ba:56:dd:d3:48:7c:37:
13:ba:5d:09:4c:db:18:00:89:a1:44:57:07:d1:88:
e1:2e:21:87:ca:5c:a1:73:f3:29:ea:e0:f1:63:05:
e1:08:24:4a:61:da:48:e1:dc:e0:79:9c:07:b8:02:
e6:95:6f:da:04:57:a0:ac:48:35:07:0f:30:d3:4b:
0b:18:d0:27:27:06:88:f8:06:aa:f1:df:34:73:0e:
be:33:01:ff:15:ac:e4:48:2f:a7:ff:c5:21:43:aa:
03:31:69:4f:1b:cd:6e:23:28:36:1f:72:aa:6b:c0:
31:6b:62:5c:66:1d:59:97:b1:e6:86:e2:16:03:51:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:7D:82:C6:FF:B9:DA:39:A1:16:F3:2A:AC:ED:5C:EB:F7:65:DE:37
X509v3 Authority Key Identifier:
keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:3c:05:a2:e9:f9:95:d5:fe:2d:79:46:b2:4b:76:e1:e2:f8:
e7:e8:90:71:5f:dc:af:9b:de:cc:4f:65:a5:01:5d:40:52:50:
a8:31:88:5a:de:bb:25:b7:6b:86:3d:0e:95:f0:b3:8f:ef:c6:
bb:c8:db:86:81:32:f9:df:82:bf:3c:f1:8f:dd:e5:22:ee:8d:
1c:36:8e:8e:45:3e:57:d2:a0:56:aa:8a:96:ab:17:47:ee:b9:
86:84:b3:d9:af:59:55:b1:55:00:bc:d4:5a:6f:11:10:ce:28:
85:f1:35:80:04:cf:e7:9c:2e:24:a1:f8:70:84:43:80:8a:11:
91:cd:d9:eb:8b:1a:2c:27:1d:8a:25:62:32:b5:a9:f3:78:7d:
da:7b:c5:11:85:c1:a7:b5:f0:3f:c7:d6:56:4f:ca:9a:16:8d:
de:ba:42:a5:e2:ef:58:77:f1:51:98:ed:d1:87:68:50:be:15:
cf:19:7c:0b:92:3e:cd:05:e3:61:3a:6e:fd:12:8b:db:f1:7d:
95:0b:67:69:d1:0e:2b:09:4f:45:56:58:2e:2a:ac:f0:97:86:
d0:0b:84:21:48:d5:f3:3b:43:ff:e3:f1:4f:6c:64:b1:13:1b:
01:fa:05:2a:41:17:11:60:03:d3:bb:3a:3f:7c:f6:20:a8:27:
a3:be:e9:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:26 2026 by rpki-client