Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
File: ATNUQlFNUkm1FDz9-CEha7XFKUA.mft (raw, json)
Hash identifier: TpViYyHqEY2gzlzj0AKLM+pJjhyP0ZCdALiuei+ucIg=
Subject key identifier: 73:D9:D1:17:D7:5B:B7:2C:80:93:F1:EF:2F:D7:68:50:85:E8:00:0A
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Certificate issuer: /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial: 019D2996EC69F4FE6434AC8A0FD0851962DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
Manifest number: 15E4
Signing time: Thu 26 Mar 2026 10:00:49 +0000
Manifest this update: Thu 26 Mar 2026 10:00:49 +0000
Manifest next update: Fri 27 Mar 2026 10:00:49 +0000
Files and hashes: 1: ATNUQlFNUkm1FDz9-CEha7XFKUA.crl (hash: ovwlWs0qcW9aBMSFhmWdkYpVoLMDl3Kp1D7f2+40/LY=)
2: rM0FGnvlMxVnBDejgMVa-ko-qg8.roa (hash: xaR1odMEKAJSPNcFWjrniRDpb0Y5i0ojVSbD/UxfcDQ=)
3: w8ZuRQyK62OI8GoGdanaljFmtMI.roa (hash: xLIOqMZ/996WD0cHfz0VFhrfrePPUxfR1CU3QVv6WKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:ec:69:f4:fe:64:34:ac:8a:0f:d0:85:19:62:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
Validity
Not Before: Mar 26 10:00:49 2026 GMT
Not After : Mar 27 10:00:49 2026 GMT
Subject: CN=73d9d117d75bb72c8093f1ef2fd7685085e8000a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:36:1f:de:43:6d:4c:ab:6e:ca:b8:bf:cd:0c:
8c:98:bd:ba:cd:4a:64:99:de:14:7b:42:5e:e8:d1:
0a:f3:b8:05:a2:e0:21:3f:a1:f6:8f:d3:96:dc:29:
50:be:00:aa:7b:b4:65:bb:fa:e6:69:cb:32:35:c4:
74:00:f7:94:3d:44:63:2f:a6:a7:aa:14:80:38:00:
b0:2e:0f:1d:93:7e:b7:c2:b4:71:77:f6:f1:38:8b:
ad:9e:35:d0:96:c8:f4:1f:fc:f9:78:37:23:06:b9:
06:fa:f6:5b:df:b1:54:98:aa:05:71:02:1a:7b:e8:
ac:c8:06:2f:6c:0a:e5:b9:af:9f:de:ad:c3:91:70:
16:41:b3:69:ee:18:a6:62:f7:02:8e:58:ed:90:be:
06:16:25:d7:12:50:ff:a9:31:08:0b:23:e4:ad:92:
1c:17:b3:8c:42:71:a4:6f:cb:a6:bb:3b:4b:b2:01:
35:b2:73:96:53:c4:88:59:d4:19:ac:27:bd:a3:c6:
a6:02:a5:f9:6e:78:3b:ba:6f:60:90:ee:73:f7:3a:
75:53:c5:3d:ff:6e:80:1e:6a:69:f1:a4:c3:cc:85:
46:61:39:b4:a9:96:6a:ea:52:f2:77:3d:46:31:74:
ec:54:aa:f4:3d:54:f3:34:57:dd:1f:b9:bf:d3:df:
af:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D9:D1:17:D7:5B:B7:2C:80:93:F1:EF:2F:D7:68:50:85:E8:00:0A
X509v3 Authority Key Identifier:
keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:01:8a:61:c1:35:6b:64:1d:92:25:00:d0:27:73:7b:c4:36:
36:d2:13:38:49:73:0c:47:9c:05:9c:f0:a4:f2:b4:60:4c:e2:
00:5f:3b:ca:2a:05:79:dc:fc:67:ca:57:f6:f2:18:93:ef:4c:
44:ff:03:ea:74:3f:c6:b0:92:cc:ae:8f:41:43:d1:e9:96:17:
76:6b:58:8d:3c:25:14:e8:73:0c:3f:d5:9b:d4:f6:52:dc:34:
a9:79:86:64:d1:1e:6f:b0:f9:60:8d:b9:28:c3:eb:60:89:c4:
ef:38:75:02:4d:db:c2:da:35:3c:19:b1:da:33:7f:18:26:a2:
a4:84:6e:e3:84:ba:75:f4:ef:36:fc:86:91:a1:19:72:cf:c5:
5e:73:17:2e:e5:3c:f1:8c:44:3d:20:7b:fa:07:f0:73:7a:5f:
0a:6d:2f:a0:93:57:7e:19:9c:78:ad:1b:d9:cb:1d:71:43:3f:
cc:4a:c8:4a:68:3c:92:85:90:c6:de:b2:07:5c:8f:c2:e0:2d:
7e:43:9c:07:00:f0:ce:bb:99:bb:2a:b2:b4:e4:28:61:3f:55:
80:37:3b:be:ab:59:de:74:e3:0f:ce:51:c0:07:86:82:33:f8:
cf:81:df:9d:01:d0:9c:36:7f:aa:9b:19:09:92:16:5b:0a:9b:
97:5c:1d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:23 2026 by rpki-client