Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
File: ATx0EyWXFizbLdY3YKvZlx4wv2M.mft (raw, json)
Hash identifier: axLJsMj4/pmkxDgEeHWhZTdw/DFeV4RwwO6uzMofFug=
Subject key identifier: C4:DD:F9:BE:11:2D:C0:64:42:A9:00:8B:0A:A8:2B:21:04:21:16:B4
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Certificate issuer: /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial: 019D284D6B30E18AC9FCF8167DDDDBE90B4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
Manifest number: 0F08
Signing time: Thu 26 Mar 2026 04:00:55 +0000
Manifest this update: Thu 26 Mar 2026 04:00:55 +0000
Manifest next update: Fri 27 Mar 2026 04:00:55 +0000
Files and hashes: 1: 5QIRXwbGdujxdQZQo1ogf2n4ECU.roa (hash: swE11M7pxffwm23eQGI729DPqze3M2Czs+U2Z9G7DZk=)
2: ATx0EyWXFizbLdY3YKvZlx4wv2M.crl (hash: BFsyatNOmrPD6vP7r1bc42LiMEI3ZC/xZ6tW0smsoVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:6b:30:e1:8a:c9:fc:f8:16:7d:dd:db:e9:0b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
Validity
Not Before: Mar 26 04:00:55 2026 GMT
Not After : Mar 27 04:00:55 2026 GMT
Subject: CN=c4ddf9be112dc06442a9008b0aa82b21042116b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b6:19:46:42:96:0e:24:1f:fe:50:8a:2f:de:
3c:37:dc:b5:09:06:85:c9:2c:6b:18:51:a1:8d:ac:
0a:25:fb:fd:24:8f:4d:12:85:f6:c8:99:a7:8a:b0:
7b:eb:3f:e1:0d:5a:fc:b4:8d:7c:9f:48:55:5f:64:
f6:76:ad:ad:28:ba:7a:cf:bb:77:ff:bd:c3:16:bb:
fa:6e:55:0d:ec:b6:5d:69:36:1b:fb:56:95:d4:de:
3d:27:c5:ee:ff:c1:18:09:05:c3:60:6a:52:eb:33:
c4:75:85:0d:a0:2e:eb:59:db:19:59:2e:59:ba:ca:
5a:55:24:47:74:df:b2:2a:c0:c7:63:7f:94:91:bb:
6c:dc:83:26:a5:d2:c7:fe:8d:ee:ec:f0:ea:4b:65:
fd:36:a4:ef:0e:02:ba:4a:42:4a:63:b2:66:84:7e:
c4:ff:52:6d:4c:81:18:3a:f8:d1:99:a8:f8:e0:e8:
9d:2c:ce:50:ce:fd:c1:94:60:da:62:61:76:8f:74:
52:f6:66:42:af:c4:7d:8a:ad:39:b6:99:1a:aa:08:
f9:af:35:fb:76:f9:03:31:84:cc:26:2e:31:2e:ae:
29:0c:6a:18:d4:69:f2:29:ec:ee:c4:bf:bd:2e:8c:
a3:ba:6e:01:f9:08:3a:a5:cf:2c:9a:92:8b:7d:1c:
7c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DD:F9:BE:11:2D:C0:64:42:A9:00:8B:0A:A8:2B:21:04:21:16:B4
X509v3 Authority Key Identifier:
keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9f:40:9d:a4:6a:00:b0:fc:1c:76:e6:f9:e1:4e:11:2f:b5:
c5:1a:1e:66:32:33:97:5c:5e:e6:46:7b:51:a8:eb:6c:b2:d7:
72:92:16:15:c2:4c:a0:04:43:ac:77:d5:23:1b:f5:86:4a:c8:
ac:49:0d:ad:42:99:80:6a:dd:9c:48:9f:1d:7a:b2:64:2b:8f:
b1:5f:c8:67:2e:3c:37:7a:d6:b3:c8:79:8f:58:c5:c4:5e:95:
03:76:1a:63:95:2a:63:87:ed:37:7c:8e:bc:80:d1:55:eb:e8:
dc:1e:c5:f2:9d:73:04:26:71:f0:bf:8c:23:a8:cb:58:ad:05:
8b:58:af:69:60:7f:bd:e1:0d:29:6a:cd:fe:31:2c:59:ea:15:
5f:64:65:d7:c7:39:bc:60:f2:5a:98:cd:21:ec:ad:7d:38:85:
ae:84:3a:c0:71:fd:57:15:ef:2e:c7:07:e0:a4:81:59:0e:80:
ef:08:c3:db:d7:3b:18:20:d9:8b:6b:3e:70:23:f0:6d:d6:02:
59:22:d3:58:7f:e4:0c:e0:b9:5b:c9:3e:dc:84:4c:82:a6:5f:
85:c3:21:0b:6b:e9:5d:bf:7e:b1:f3:d5:12:91:cc:f7:ed:5e:
6b:ad:a4:fc:17:13:35:ad:04:c2:5d:ce:ef:b9:e5:a9:75:9b:
9e:74:ef:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:57 2026 by rpki-client