Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
File: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft (raw, json)
Hash identifier: vOJbrX6gbdTdUIetpOB0vh0N33rMGmRvNADk2971BOY=
Subject key identifier: F1:B8:50:FD:A4:2C:EF:05:53:42:EF:11:AE:16:73:24:8C:E6:76:C3
Authority key identifier: 6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
Certificate issuer: /CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Certificate serial: 019D9D3EC4A517D82A27ECEEA610F952954C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
Manifest number: 023D
Signing time: Fri 17 Apr 2026 21:00:29 +0000
Manifest this update: Fri 17 Apr 2026 21:00:29 +0000
Manifest next update: Sat 18 Apr 2026 21:00:29 +0000
Files and hashes: 1: Oqj1Ttz2i8mATEEUkFaL7xibRq4.roa (hash: o5FJc5XuskwqI7qAYVTfbbhlM+Mf4Qj9G3YZZAgXrmE=)
2: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl (hash: LukwtM1M9cDNLkLF76OBBaLYCR7hy8HwUWyV5KnLQuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:c4:a5:17:d8:2a:27:ec:ee:a6:10:f9:52:95:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Validity
Not Before: Apr 17 21:00:29 2026 GMT
Not After : Apr 18 21:00:29 2026 GMT
Subject: CN=f1b850fda42cef055342ef11ae1673248ce676c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:d4:e6:47:f0:02:e2:10:98:3e:7a:a6:c8:
f4:6b:af:ad:69:59:c7:5b:23:b2:57:6c:1d:32:72:
8e:22:15:25:f0:e0:e9:0b:1c:88:81:88:ba:ae:69:
f8:35:b7:69:a6:e5:c9:94:71:90:e0:3e:af:65:9b:
27:01:43:c1:cc:05:fd:62:7d:84:68:31:2a:92:1b:
e6:1e:c8:f6:fe:c6:79:65:26:5d:de:4b:c6:4e:d2:
25:b0:c9:0d:3e:72:41:db:d1:81:d1:81:4c:4e:40:
23:9f:d6:43:be:9a:61:0b:af:36:76:c8:59:ac:61:
24:99:d4:b0:8e:67:11:65:fb:f0:fe:fd:2f:a4:24:
d2:44:33:76:71:e3:18:41:e3:1c:01:81:e7:4e:3a:
80:cb:1f:b5:56:d9:08:1c:6b:e5:72:fd:b0:7b:df:
ac:2f:58:61:07:ed:a4:99:a2:b5:a3:81:23:d7:be:
34:d0:1f:bf:3b:42:b6:17:31:63:ac:2a:4d:75:89:
7f:56:ac:91:9d:f0:11:9a:48:f8:49:9b:d4:b4:68:
71:08:74:36:ac:c6:75:21:9a:75:4f:92:4f:3a:37:
da:42:53:18:e7:1d:e7:be:8f:a9:25:46:86:37:88:
fd:ed:34:bf:6b:c6:0d:a8:e8:de:a8:c9:85:cf:c9:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B8:50:FD:A4:2C:EF:05:53:42:EF:11:AE:16:73:24:8C:E6:76:C3
X509v3 Authority Key Identifier:
keyid:6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:f3:5b:2f:55:9c:d8:0a:1f:4f:76:a4:56:f0:42:d7:5d:cd:
e0:f6:49:d0:d9:62:75:81:6d:1d:5d:52:df:03:9f:29:c4:c8:
49:a9:c6:7f:0e:a2:8e:6c:55:64:48:c6:7e:0f:48:34:8f:c8:
76:3b:12:f0:8f:c6:6c:05:3c:97:d8:18:8f:34:b7:26:be:4b:
38:3b:91:0e:25:49:33:61:9a:f9:15:a6:d1:4e:da:30:aa:10:
5d:5a:01:7d:9d:15:bc:41:12:75:22:4e:50:b5:69:39:9f:66:
a1:1c:fe:0d:78:d7:79:b8:19:0a:42:ef:d4:8d:be:e0:24:33:
71:25:41:d4:c2:d7:ae:f7:62:d6:4f:35:48:e8:c6:54:4d:69:
5f:08:0e:22:e2:9a:8f:df:9e:2a:f5:48:e3:be:41:1b:30:64:
26:3f:c5:b4:71:0a:71:9a:05:ac:f0:65:45:78:bb:9b:e6:fb:
2f:74:9c:d8:53:99:37:72:25:42:6f:d2:97:84:23:08:59:93:
69:ef:78:ff:b0:ff:95:de:90:22:d3:0d:83:6c:06:c4:ca:ca:
00:fc:f0:19:16:be:ab:83:1c:74:e9:71:79:0b:7c:17:4b:4b:
6c:31:b2:ee:b2:62:94:f2:ec:31:65:60:e6:8f:97:69:70:30:
a4:42:4b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:00:04 2026 by rpki-client