Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
File: ATx0EyWXFizbLdY3YKvZlx4wv2M.mft (raw, json)
Hash identifier: 3CqkM5jxlacHx5Q0SzV1epmS6wugDHELECHacDwRLq0=
Subject key identifier: 16:B2:63:BA:E4:53:33:04:FC:BA:10:4C:74:86:8D:36:CF:1B:B2:A5
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Certificate issuer: /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial: 019CAAC62396F4CEB900904938D11A22FAD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
Manifest number: 0EC7
Signing time: Sun 01 Mar 2026 19:00:37 +0000
Manifest this update: Sun 01 Mar 2026 19:00:37 +0000
Manifest next update: Mon 02 Mar 2026 19:00:37 +0000
Files and hashes: 1: 5QIRXwbGdujxdQZQo1ogf2n4ECU.roa (hash: swE11M7pxffwm23eQGI729DPqze3M2Czs+U2Z9G7DZk=)
2: ATx0EyWXFizbLdY3YKvZlx4wv2M.crl (hash: xa4vq+YwEmlYkQ0rrJR3N1E5xc18krry+mrPzx2gSsw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:23:96:f4:ce:b9:00:90:49:38:d1:1a:22:fa:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
Validity
Not Before: Mar 1 19:00:37 2026 GMT
Not After : Mar 2 19:00:37 2026 GMT
Subject: CN=16b263bae4533304fcba104c74868d36cf1bb2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:9a:4c:6a:90:0e:57:13:69:7f:35:7c:9c:
f5:a7:8f:53:12:ac:ee:04:6d:6b:fb:1b:95:e1:c0:
7d:51:bc:6d:33:ef:19:91:4b:a2:c4:76:c7:09:3c:
9d:e2:d9:cd:6e:6e:90:a9:55:05:7c:b8:bf:62:60:
35:4e:b6:68:36:61:f1:01:7b:48:d6:83:b6:8c:11:
1e:83:f6:bc:89:a9:3f:9a:e8:01:bd:d9:0d:cd:55:
81:02:ef:8d:d1:d8:97:72:fe:2a:d6:0f:b3:0e:55:
62:15:37:41:3c:77:84:24:00:c1:db:44:34:fd:79:
87:94:61:86:de:0e:dd:d6:d5:e8:85:a2:60:f1:95:
75:a0:2d:e1:66:2f:96:e9:4c:4b:54:d1:2b:c0:15:
c8:ff:4b:de:8b:46:d3:94:a1:50:48:4c:1c:1b:10:
37:a0:68:d3:50:b1:8d:9e:5e:3d:91:13:a4:2b:ca:
1a:1e:dd:86:cf:c9:1e:57:f2:01:b0:83:f2:66:95:
b9:7b:d6:b3:f6:c9:29:f5:bc:81:a1:95:88:db:98:
34:bb:42:47:d0:52:a9:e6:e5:70:8f:10:88:da:d2:
39:6f:aa:a5:b4:72:69:aa:6d:11:04:f7:d8:e3:b8:
45:2c:ca:fc:8a:2d:7d:fe:3c:4c:72:f6:6b:0d:77:
85:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B2:63:BA:E4:53:33:04:FC:BA:10:4C:74:86:8D:36:CF:1B:B2:A5
X509v3 Authority Key Identifier:
keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:46:b6:96:21:19:19:c8:df:60:b9:ed:7f:ae:d4:21:bc:a1:
b9:c0:0b:57:a2:3b:ac:7f:eb:6f:b2:43:5b:ec:73:79:6a:a6:
f7:09:c4:a8:df:82:4d:d3:9c:57:c9:21:4b:8d:ea:13:80:69:
cd:7c:b7:5b:90:db:b2:1d:f2:d8:00:1e:5b:54:02:d9:91:68:
1d:c9:5b:52:52:09:ff:f1:41:fa:fe:9c:27:43:24:48:fc:b0:
1e:1f:52:8c:17:f7:3e:57:fe:91:5b:69:29:57:71:c9:a8:84:
fd:e6:e4:4b:5a:00:7a:08:4d:1a:26:ba:1e:ec:c4:3f:86:ca:
9e:d1:2f:3a:45:08:1a:eb:e8:44:95:9b:70:b9:e6:6a:33:60:
67:72:df:0a:78:6e:de:60:1f:17:48:b9:d7:b1:ab:ca:52:4c:
44:92:84:d5:3b:fa:e7:d5:da:ba:b7:0e:75:c0:ce:07:d2:cc:
57:83:0b:82:2c:7a:72:22:f2:a7:4f:59:d3:bc:8a:d8:72:79:
09:3e:77:3b:84:40:11:3d:d6:f5:cf:e8:5f:9c:58:f2:04:41:
cc:b5:f4:db:d9:74:8e:82:87:80:cb:ac:21:ab:3b:7f:eb:8b:
fc:3c:54:73:74:0a:85:e7:0f:cb:26:ec:7b:68:71:31:2f:30:
8c:85:2d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:29 2026 by rpki-client