Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
File: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft (raw, json)
Hash identifier: 9wznol1K3g7BqwwgjLoZWGN1yW/cN5IgoBcn39JSCLQ=
Subject key identifier: 2D:AA:C7:75:08:CF:FA:15:6E:C8:A8:88:D2:4C:DF:01:21:47:3B:3A
Authority key identifier: 6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
Certificate issuer: /CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Certificate serial: 019E20918ABD9CB233ECE4B80B269BB3A10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
Manifest number: 0281
Signing time: Wed 13 May 2026 09:01:09 +0000
Manifest this update: Wed 13 May 2026 09:01:09 +0000
Manifest next update: Thu 14 May 2026 09:01:09 +0000
Files and hashes: 1: Oqj1Ttz2i8mATEEUkFaL7xibRq4.roa (hash: o5FJc5XuskwqI7qAYVTfbbhlM+Mf4Qj9G3YZZAgXrmE=)
2: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl (hash: qiVswAj7jU2bV6lHEEqJ9akTG8fMrplM45sN5qsCGbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:8a:bd:9c:b2:33:ec:e4:b8:0b:26:9b:b3:a1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Validity
Not Before: May 13 09:01:09 2026 GMT
Not After : May 14 09:01:09 2026 GMT
Subject: CN=2daac77508cffa156ec8a888d24cdf0121473b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:bd:5a:00:f5:ac:f4:58:55:1c:75:bd:0b:
be:fc:21:9d:94:19:17:f2:2d:0a:45:a4:de:4e:08:
77:71:f3:15:63:8f:e5:be:4a:8c:1d:bd:15:5c:c0:
38:86:36:70:1f:82:66:47:33:fc:93:f5:f3:a3:f3:
12:6e:44:0f:80:c3:77:1b:20:ba:9f:3a:8c:f9:e5:
76:42:e5:3b:20:7b:3f:6d:0a:4b:06:1a:66:a5:36:
68:82:5e:3f:a4:28:c7:45:26:c6:f6:e8:ea:ae:7c:
5a:d7:be:be:89:62:39:07:1f:ef:d8:33:43:ca:a8:
56:f8:92:d6:9c:c5:ce:82:08:49:5f:29:56:41:cb:
5e:9c:b2:17:fc:5a:f9:ad:df:31:8e:b7:df:4c:24:
f9:b3:e4:6d:2d:ec:89:eb:a3:5e:2a:14:fe:9f:19:
e8:cb:5b:d0:2d:71:dd:03:4c:b1:70:f0:8d:95:4d:
a9:a7:17:05:6f:67:14:27:a6:35:e8:5d:23:24:c6:
1d:97:3f:7e:33:8e:a5:c4:0a:88:52:f7:a0:65:d9:
54:69:2a:51:c1:a3:b8:58:29:d3:c2:78:44:7f:e7:
43:3c:a0:c3:04:97:05:37:b0:e9:ba:06:ba:ab:3d:
92:e3:6e:d0:a6:46:7d:c7:74:48:ca:e5:47:d5:98:
ab:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AA:C7:75:08:CF:FA:15:6E:C8:A8:88:D2:4C:DF:01:21:47:3B:3A
X509v3 Authority Key Identifier:
keyid:6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:10:12:92:32:a2:97:4b:41:3d:a4:26:95:5c:31:f8:49:1b:
8a:9a:a5:9e:ba:30:b8:29:33:01:24:c1:6a:47:7a:16:ca:33:
6b:b1:18:50:9e:f5:69:3f:35:7c:39:bb:ca:4f:14:51:5f:62:
54:73:df:0e:a5:33:2b:11:7d:f4:3f:77:64:57:06:ac:f8:a8:
a1:86:91:fd:8c:08:2c:09:5f:4f:12:ed:ec:04:54:ad:3a:c5:
14:28:d9:8d:eb:90:e0:17:57:cc:31:bc:b0:54:a9:0c:76:7b:
af:1d:53:1c:27:8d:9f:61:96:73:cb:fb:dd:26:ef:fc:58:ea:
79:11:bf:e7:2c:6c:90:bd:b7:8c:8c:d7:25:5f:24:63:db:23:
6d:46:e9:16:9a:b1:74:8d:8c:0b:f5:b1:34:be:07:a2:91:27:
e4:1c:74:b9:b1:c3:ed:16:74:c5:06:ed:70:dd:9f:7d:0b:af:
bf:9d:42:06:40:e8:81:02:c3:7d:ec:09:e9:e0:e6:1f:39:70:
97:e0:52:b4:b4:33:a0:28:45:08:08:6d:30:39:92:de:ac:95:
f4:3b:cf:73:8a:05:8d:82:94:3b:93:d8:56:c1:98:5a:01:0f:
62:ce:3a:97:8a:57:71:89:ef:a6:9e:5f:a3:42:9b:34:d1:ba:
38:9d:c1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:26:36 2026 by rpki-client