Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
File: ATx0EyWXFizbLdY3YKvZlx4wv2M.mft (raw, json)
Hash identifier: wcGrcmdhEXaezEH71S2B+k7bDnVcVSIkWeWWco/0kCI=
Subject key identifier: 53:E0:1F:4C:F5:32:4D:FD:BB:56:57:64:05:E4:07:8A:B1:30:A3:B9
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Certificate issuer: /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial: 019D98504BD9763B84EA5D47E2C411D034B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
Manifest number: 0F42
Signing time: Thu 16 Apr 2026 22:01:32 +0000
Manifest this update: Thu 16 Apr 2026 22:01:32 +0000
Manifest next update: Fri 17 Apr 2026 22:01:32 +0000
Files and hashes: 1: 5QIRXwbGdujxdQZQo1ogf2n4ECU.roa (hash: swE11M7pxffwm23eQGI729DPqze3M2Czs+U2Z9G7DZk=)
2: ATx0EyWXFizbLdY3YKvZlx4wv2M.crl (hash: Z/85G71499LNgvznevu3vP/ey295jO161ujsbrUQ+Wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:4b:d9:76:3b:84:ea:5d:47:e2:c4:11:d0:34:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
Validity
Not Before: Apr 16 22:01:32 2026 GMT
Not After : Apr 17 22:01:32 2026 GMT
Subject: CN=53e01f4cf5324dfdbb56576405e4078ab130a3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7e:58:1a:97:b1:50:f9:ff:37:2a:f6:12:ad:
99:20:07:ad:c3:37:eb:9e:cb:1c:77:91:f2:81:b2:
8c:ab:97:b3:da:9d:20:c1:e7:62:df:8c:1e:5c:cc:
41:1c:5a:a3:c7:85:ce:a1:6e:82:58:a9:73:01:66:
81:32:20:ca:a6:06:77:40:ce:b7:fe:65:af:af:17:
d3:3a:cb:01:8b:c7:c9:24:7b:6d:e8:bc:b1:48:50:
9a:97:40:24:fb:c4:ac:b1:03:03:88:53:f8:c9:e4:
68:02:89:00:0c:b1:77:15:a2:f5:da:a2:24:23:2a:
e3:5e:e9:90:05:2a:a1:d1:b6:12:fb:fc:fc:8a:93:
34:c8:ba:be:5e:c2:87:6b:ef:12:6b:6c:8c:e0:01:
22:e2:9e:da:42:4c:bd:e0:f8:a9:01:58:08:06:fe:
23:49:b6:c7:eb:f6:84:9e:69:53:c6:58:57:69:a3:
d3:e8:21:77:ef:34:18:f1:a0:f3:e9:4b:88:9f:a0:
61:26:c4:64:3f:81:f4:bb:05:52:07:3e:0c:c2:e4:
37:fb:de:c1:bc:1c:b4:0d:ab:8e:f1:40:13:a9:3e:
11:2e:13:e6:5f:26:a6:54:32:1d:4d:26:25:7b:81:
29:2b:0e:8a:20:1d:47:5d:2d:6b:bf:4a:88:ac:35:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E0:1F:4C:F5:32:4D:FD:BB:56:57:64:05:E4:07:8A:B1:30:A3:B9
X509v3 Authority Key Identifier:
keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:88:a8:b5:c0:ad:bb:82:44:bc:32:e4:7f:61:86:3c:32:08:
04:cf:1e:c3:d6:b9:ae:29:60:3e:4c:42:39:33:35:03:fe:86:
ca:f4:bd:1e:75:12:5d:7a:69:16:bf:53:42:3e:9d:b3:45:ca:
92:9f:42:cc:3f:d0:ee:e3:e2:1a:73:0d:65:34:c4:18:b7:da:
48:ea:54:2e:ea:00:2e:e1:d0:be:ed:07:8a:51:71:37:a1:e3:
a3:9e:f6:19:ef:b8:01:80:a9:29:70:b5:fb:64:f1:89:7d:6b:
25:91:d2:3e:69:c0:e6:39:32:fb:83:07:c6:ae:58:c2:f7:9a:
de:07:26:f4:4e:7f:52:a2:f7:14:13:e4:9a:78:bb:e5:e7:0b:
81:e5:2f:75:e5:7a:ad:a1:36:bd:ea:a9:31:06:d5:fb:cd:d5:
e9:2c:38:d6:6c:ff:a5:a8:6b:e7:fa:38:b9:15:17:15:c6:50:
0b:f3:c0:89:7a:78:4e:86:bc:ec:90:8e:b8:4f:8b:51:80:6f:
a1:0f:2f:c1:36:a3:c9:99:4e:58:24:9f:65:d5:ca:5d:64:8e:
16:09:8f:53:61:e2:c3:1e:c5:3e:f5:90:7c:63:dd:79:2c:a0:
9c:2e:95:01:33:9b:dd:75:46:c9:8f:8e:80:41:c9:8e:53:a6:
5e:c5:2c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:33 2026 by rpki-client