Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
File: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft (raw, json)
Hash identifier: cv404jBKklnxmgsra7u8QnNkvFmfHXMSUKO/BrrSQAA=
Subject key identifier: DA:84:CC:03:71:FD:40:13:2E:6E:A1:97:D7:0A:DA:09:A1:4D:00:D4
Authority key identifier: 6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
Certificate issuer: /CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Certificate serial: 019D2961228B474140656F0CD3BEF83B954C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
Manifest number: 0201
Signing time: Thu 26 Mar 2026 09:02:04 +0000
Manifest this update: Thu 26 Mar 2026 09:02:04 +0000
Manifest next update: Fri 27 Mar 2026 09:02:04 +0000
Files and hashes: 1: Oqj1Ttz2i8mATEEUkFaL7xibRq4.roa (hash: o5FJc5XuskwqI7qAYVTfbbhlM+Mf4Qj9G3YZZAgXrmE=)
2: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl (hash: WVb6PptePoPEZDYg1Om2TZwR1Ke6i9XB0YNWX+DsOyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:22:8b:47:41:40:65:6f:0c:d3:be:f8:3b:95:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Validity
Not Before: Mar 26 09:02:04 2026 GMT
Not After : Mar 27 09:02:04 2026 GMT
Subject: CN=da84cc0371fd40132e6ea197d70ada09a14d00d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:3a:17:41:7f:23:56:bc:18:eb:56:af:10:
9d:8b:9c:f9:ad:90:df:de:55:aa:1e:4e:8c:b3:b7:
57:0a:a3:82:5a:c1:fc:a2:6f:35:a3:c9:59:44:a9:
53:87:6e:c0:6d:15:eb:cf:fa:7c:91:f2:a8:84:6a:
85:e7:59:65:a8:a0:a2:2c:78:8b:bb:cb:f7:15:17:
e1:d8:12:fb:65:31:22:33:47:41:18:40:e6:90:d4:
53:b4:af:02:07:62:34:e0:eb:dd:63:7b:cd:e3:43:
a6:52:18:7c:5f:0c:2c:86:87:43:47:14:d0:01:ff:
81:19:76:81:41:96:af:ff:ad:ce:45:54:ef:d1:4d:
d8:84:93:b8:ea:2b:c2:8b:56:2c:36:62:05:df:1c:
1c:32:2c:15:73:26:65:2a:a4:fc:4f:e9:b0:34:47:
db:4a:a7:6e:d9:c3:33:d1:ad:20:38:75:64:88:77:
69:76:6b:22:25:af:95:45:66:e1:d4:7d:ec:dd:3b:
ee:5b:c4:4e:54:98:41:49:38:18:36:d5:22:9f:a3:
59:e7:d0:29:fe:e2:6c:00:67:10:22:f1:c4:92:da:
a6:4a:4c:2f:f3:69:2e:cb:8b:52:4b:4d:5e:ae:4a:
9a:81:a1:68:c1:95:28:84:f2:da:8b:8c:9b:d7:42:
20:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:84:CC:03:71:FD:40:13:2E:6E:A1:97:D7:0A:DA:09:A1:4D:00:D4
X509v3 Authority Key Identifier:
keyid:6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9a:a6:99:a8:7a:b8:52:92:aa:a8:b7:08:45:4b:27:c1:4a:
35:dd:a3:ba:8f:82:91:02:27:2b:d8:3d:53:80:69:54:cf:25:
dc:9e:3f:6a:32:e4:e9:44:0c:36:b1:7e:8a:ca:78:35:55:48:
22:c9:2b:b7:c0:72:dd:01:8d:cf:90:5e:fb:3b:7a:87:13:ba:
0c:8f:1c:89:ce:72:40:da:95:ff:51:71:0c:b4:3a:5d:bf:ea:
80:32:e8:4c:2a:64:30:c5:f7:9c:2b:15:d3:60:95:63:a8:4d:
47:1c:ba:38:c3:ae:d2:36:a7:3b:5d:72:12:65:9e:d3:68:39:
1b:0b:bf:ef:30:6c:f3:db:e2:3e:e2:ef:a1:8f:11:c3:fd:c7:
a2:23:11:11:57:34:9c:63:25:b9:00:d0:fb:2b:b0:0e:59:c2:
2b:4d:55:ea:2e:f6:ba:0c:f4:51:05:92:3e:19:ee:b7:19:51:
60:79:60:28:2c:11:d4:87:2a:1e:d1:be:2d:85:e1:3a:b2:e0:
5d:69:a0:dd:a5:c3:16:7a:b6:8d:21:34:d6:80:6c:eb:1a:52:
e6:80:ff:d2:fa:47:40:cf:dd:65:2b:a8:0a:43:b6:53:62:eb:
94:ae:25:29:f4:d4:1a:80:a7:b1:55:b2:af:25:58:9f:29:b6:
82:3c:09:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:59 2026 by rpki-client