Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
File: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft (raw, json)
Hash identifier: 1u78176G/L9lc99dRvSPufvn8TtEyPouxBshUMYD8nQ=
Subject key identifier: 9C:94:25:78:CB:0F:17:B1:8E:19:D6:F9:4E:E5:72:A7:45:EE:70:26
Authority key identifier: 6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
Certificate issuer: /CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Certificate serial: 019EC2C9D128C8ABE0FBA028644AEF33FCA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
Manifest number: 02D5
Signing time: Sat 13 Jun 2026 21:01:06 +0000
Manifest this update: Sat 13 Jun 2026 21:01:06 +0000
Manifest next update: Sun 14 Jun 2026 21:01:06 +0000
Files and hashes: 1: Oqj1Ttz2i8mATEEUkFaL7xibRq4.roa (hash: o5FJc5XuskwqI7qAYVTfbbhlM+Mf4Qj9G3YZZAgXrmE=)
2: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl (hash: 8DHKQdSiLIIi2OcmWhO4PpOIYlTXU9tHyj+EGRYR2Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:d1:28:c8:ab:e0:fb:a0:28:64:4a:ef:33:fc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Validity
Not Before: Jun 13 21:01:06 2026 GMT
Not After : Jun 14 21:01:06 2026 GMT
Subject: CN=9c942578cb0f17b18e19d6f94ee572a745ee7026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:b3:7b:76:1d:d7:5b:26:50:23:56:3c:e4:
69:30:83:ea:a9:80:a6:be:ec:ed:85:38:f6:44:be:
2c:f5:b7:85:17:f3:39:32:ea:20:94:f7:c3:24:a9:
3a:f3:57:17:ef:13:db:75:96:4f:e9:7e:57:0b:af:
81:7b:53:cf:9d:2b:bd:0d:ae:bf:7d:95:7e:c7:54:
82:61:10:43:f0:fe:f9:44:c8:6f:f9:16:25:c8:7e:
8a:60:7a:f4:95:d0:ee:90:a2:6b:b4:bf:e4:1c:43:
ce:21:3c:34:82:c0:d2:6d:98:f4:6c:f5:e2:4b:e8:
5a:03:40:aa:ca:a9:0a:c1:97:14:1f:4f:0b:82:de:
da:1f:3f:a1:0d:58:16:bb:a2:e0:53:7d:46:5e:44:
b1:37:c3:45:49:67:ec:ff:f2:7c:c2:65:b7:51:bf:
5d:8f:0e:73:aa:d2:ec:8c:ae:2e:15:81:60:cd:98:
c6:48:14:5b:69:de:16:60:93:2f:69:1a:ac:d0:c7:
ac:21:54:38:01:3a:e8:56:03:ae:60:8f:ad:86:e2:
61:30:11:89:20:ac:c1:4b:df:bc:2d:56:60:15:2a:
43:4b:87:92:e8:a3:c5:2f:38:a7:a4:85:b8:ff:da:
49:27:99:85:b6:98:0f:fd:73:02:09:64:e6:4c:2b:
2a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:94:25:78:CB:0F:17:B1:8E:19:D6:F9:4E:E5:72:A7:45:EE:70:26
X509v3 Authority Key Identifier:
keyid:6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f8:ea:5e:7a:01:99:ff:60:72:b7:b8:ea:fb:73:17:2c:67:
0c:4c:1f:50:43:5b:30:58:22:9f:f6:7c:a4:8c:6d:66:9d:38:
6b:33:2f:1d:54:c2:79:37:b2:6d:d1:0f:d8:0b:59:17:bf:96:
64:32:5d:ef:4a:d5:4e:10:48:7e:32:9e:2a:22:92:00:29:67:
53:5a:14:67:e4:52:25:9b:c4:99:f3:cb:a3:d3:41:36:72:c9:
17:4a:75:b0:9e:6a:0b:ba:37:a5:4f:16:dd:6b:f7:ee:af:33:
d5:64:c3:1e:a0:d4:10:84:f5:48:b3:3e:87:a2:37:58:a3:5b:
61:63:37:ed:68:01:e9:fa:8a:5d:08:77:6a:81:04:b8:54:50:
f9:f4:32:4e:7d:d8:a9:c2:4e:e5:de:d6:4a:7c:bc:d6:8f:2b:
53:8e:e9:f8:0c:d7:f6:eb:a0:32:02:08:24:2f:fc:42:27:40:
47:b2:3f:8d:da:8f:91:8a:b3:06:50:8f:a5:f4:9a:ee:6f:dc:
99:13:e9:5d:12:d9:f3:a4:c9:18:b4:4f:b1:dc:ae:e7:c4:5e:
22:35:7c:c2:ca:9d:fe:6e:b7:94:d0:51:f1:a3:52:0d:ab:87:
6d:91:43:c6:d8:06:ec:3b:e9:dd:18:8b:00:8a:77:94:cf:f3:
63:64:e3:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:46:27 2026 by rpki-client