Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
File: atcO8l5SLA0m6Xeh0k_3fq062hk.mft (raw, json)
Hash identifier: usuYfMX0qHWClq6c+PmpE3+DyOxRId+jAXmgAZNRXzc=
Subject key identifier: C0:D4:C1:A4:B6:F4:60:F4:B9:04:FC:D6:DA:59:5C:41:DA:D7:D4:86
Authority key identifier: 6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
Certificate issuer: /CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Certificate serial: 019CAAFD71D9D1B29B27E5C6EE7F44990BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
Manifest number: 0496
Signing time: Sun 01 Mar 2026 20:01:02 +0000
Manifest this update: Sun 01 Mar 2026 20:01:02 +0000
Manifest next update: Mon 02 Mar 2026 20:01:02 +0000
Files and hashes: 1: atcO8l5SLA0m6Xeh0k_3fq062hk.crl (hash: HQcPTY0Ug0A5H0N1Lxcl4O49+MzaEU7142B5HeR8eRA=)
2: w6aVtPi_QGLU8BO4yYE5hc26NUU.roa (hash: D1OzGspWySA2P+VWszH41u2S7emBKgssmNnj37u02no=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:71:d9:d1:b2:9b:27:e5:c6:ee:7f:44:99:0b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad70ef25e522c0d26e977a1d24ff77ead3ada19
Validity
Not Before: Mar 1 20:01:02 2026 GMT
Not After : Mar 2 20:01:02 2026 GMT
Subject: CN=c0d4c1a4b6f460f4b904fcd6da595c41dad7d486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:aa:82:3e:1f:60:40:f1:f6:20:bd:ff:51:3b:
3a:f5:5b:d1:7b:cd:44:6b:00:de:c7:1b:1c:b5:38:
71:eb:71:e9:51:fa:0e:02:a2:f1:1a:55:4b:67:e0:
b9:d9:68:a6:82:19:6c:8a:9c:5a:69:80:89:4a:5b:
07:2e:9f:40:8f:e4:e5:4f:57:89:ce:e7:4a:e5:56:
cb:01:9d:3e:9b:1b:28:4e:94:45:19:a4:90:64:91:
84:f4:85:17:a0:d0:42:7e:94:82:4e:22:66:67:67:
c6:1f:fe:1e:e9:65:4c:95:36:4a:07:8b:40:cd:05:
09:f8:3f:9e:9b:c5:f0:a6:57:26:7e:f4:b2:c1:83:
18:22:a7:7b:f0:37:13:4a:27:e1:5e:30:6a:98:92:
a0:8c:f3:8c:36:1e:1e:be:9e:3e:c7:bf:06:fa:2e:
6f:45:17:68:b7:c8:f4:11:ec:ae:3c:ab:cf:1a:49:
29:16:4a:bd:fb:5f:7b:2a:0a:ff:c1:d0:cd:83:76:
9f:71:b2:41:0c:50:b7:88:18:c0:e7:2b:a5:a5:f8:
95:f6:9d:69:6d:7e:89:1b:2e:f8:b7:80:55:bc:bf:
42:0b:61:25:2c:29:83:35:84:ad:b7:11:51:87:1d:
e3:1a:b6:7b:37:89:67:c7:3f:b5:b7:e2:de:c1:6f:
3f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D4:C1:A4:B6:F4:60:F4:B9:04:FC:D6:DA:59:5C:41:DA:D7:D4:86
X509v3 Authority Key Identifier:
keyid:6A:D7:0E:F2:5E:52:2C:0D:26:E9:77:A1:D2:4F:F7:7E:AD:3A:DA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atcO8l5SLA0m6Xeh0k_3fq062hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/23968a-fa36-4654-bfbf-9404e177200e/1/atcO8l5SLA0m6Xeh0k_3fq062hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e6:6b:0f:a9:8d:f4:36:dd:37:7e:23:bb:b3:00:e1:24:9e:
5e:32:87:cb:e4:cf:9b:fb:00:cf:58:bc:41:ba:b9:59:57:4a:
0f:9c:28:48:51:27:89:2a:b1:1c:23:6b:21:ed:09:50:91:b8:
56:36:ea:e7:29:37:f4:a4:64:d3:29:73:46:42:f5:57:35:2a:
3c:a3:d8:50:71:6b:2a:9a:e9:a3:f3:ee:a8:df:39:96:69:fe:
cb:68:07:10:84:4c:cc:49:cb:d8:ac:f8:97:98:bd:d6:18:88:
70:1f:26:70:32:b6:9b:81:a9:bd:db:c2:de:f0:fb:0d:7b:c4:
73:8b:eb:1d:63:5b:a9:fc:b0:f0:6c:cf:5a:22:33:59:b1:28:
64:2e:87:e4:db:ad:c4:1e:19:f5:44:6b:cb:92:d4:3f:96:fe:
e7:a1:a6:2b:62:2a:c8:13:b1:30:16:1d:43:9c:6c:23:c3:3e:
2f:2f:8b:46:f7:d4:1d:3c:da:ac:33:9d:fd:9a:43:83:af:79:
45:f8:c6:c5:9e:48:ab:5c:f4:a3:03:e8:8a:60:b3:c1:f7:76:
0d:b8:bd:45:7e:f9:e5:3a:f6:58:2f:09:f1:1b:a1:84:52:77:
c0:55:05:24:83:97:e0:a9:fa:0f:14:ab:25:81:ed:9e:dc:0b:
7b:00:5d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:07 2026 by rpki-client