Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
File: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft (raw, json)
Hash identifier: LRTVH4VdhbLyn3FX5fl6Wb12YKQ7HI0UmqIbfXcSgqw=
Subject key identifier: 18:BA:12:2F:BD:27:27:17:2B:9B:73:D0:2E:08:7E:CD:0E:25:C1:21
Authority key identifier: 6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
Certificate issuer: /CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Certificate serial: 019CAFB60C33863B4D3FEF844BCD6A5A5278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
Manifest number: 01C2
Signing time: Mon 02 Mar 2026 18:01:09 +0000
Manifest this update: Mon 02 Mar 2026 18:01:09 +0000
Manifest next update: Tue 03 Mar 2026 18:01:09 +0000
Files and hashes: 1: Oqj1Ttz2i8mATEEUkFaL7xibRq4.roa (hash: o5FJc5XuskwqI7qAYVTfbbhlM+Mf4Qj9G3YZZAgXrmE=)
2: atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl (hash: f6yARNlEg9aGCsi+QR7yYs0Z+VeZkDvG5p4/oRy0KcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:0c:33:86:3b:4d:3f:ef:84:4b:cd:6a:5a:52:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad38bd4c0d0e9f3028021984cd83556047f6398
Validity
Not Before: Mar 2 18:01:09 2026 GMT
Not After : Mar 3 18:01:09 2026 GMT
Subject: CN=18ba122fbd2727172b9b73d02e087ecd0e25c121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f4:5d:5a:4b:1d:82:f6:6f:c0:b7:49:af:aa:
b6:8b:f8:ff:e0:03:1e:ee:53:39:90:8a:b3:e9:7e:
48:a4:3f:14:df:61:6d:3b:d2:75:64:1a:00:c2:5a:
ad:ad:28:e1:85:18:8f:8e:a4:47:eb:ac:6d:1b:d3:
8e:09:76:7d:7d:28:06:eb:52:c0:7c:8a:e0:f0:86:
d0:ef:ea:4d:a2:7a:ea:12:2d:ed:d4:73:bf:80:68:
25:89:d4:4f:7d:62:1c:28:c9:b4:12:ca:1f:10:92:
9a:74:e5:00:3d:ac:36:66:9c:c0:e0:c2:91:66:fd:
35:a4:b0:f9:84:f6:8f:b7:cf:0d:87:aa:87:fa:7a:
dd:10:89:28:ba:40:f3:b7:fa:23:d1:4d:fb:e6:22:
d6:c1:e0:40:56:f6:cf:4b:36:fc:fe:89:50:9c:77:
a9:17:48:4a:00:b6:f1:51:35:61:da:0a:2d:7c:88:
18:e0:1e:75:71:c7:b8:df:0e:a1:58:eb:e0:5a:ee:
7d:7f:bb:45:59:e2:82:1a:f9:b1:ac:cc:a1:f0:76:
68:fc:d3:6a:53:66:7f:76:5b:bb:57:1d:6f:c6:3b:
c8:2e:0f:40:b6:56:1d:60:67:f7:78:57:b0:f6:e1:
6b:93:94:d2:b3:c0:0e:bc:3e:ae:15:6d:50:81:45:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BA:12:2F:BD:27:27:17:2B:9B:73:D0:2E:08:7E:CD:0E:25:C1:21
X509v3 Authority Key Identifier:
keyid:6A:D3:8B:D4:C0:D0:E9:F3:02:80:21:98:4C:D8:35:56:04:7F:63:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/928618-2a69-4fbf-96c9-ce700074a7fc/1/atOL1MDQ6fMCgCGYTNg1VgR_Y5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:85:09:a5:bb:d0:56:9a:66:e0:b8:f6:f6:96:44:e7:0e:d2:
94:46:a2:a5:ac:be:ba:5e:60:ee:64:36:5e:5d:d4:03:e6:f5:
09:61:da:be:df:32:e9:77:18:00:1e:2d:98:37:4d:9a:59:9c:
95:ec:30:c1:ff:9f:08:b8:62:a9:12:4a:a6:72:87:32:e3:6c:
06:25:3c:7e:cd:14:90:65:4e:9f:c0:90:bb:88:82:8c:d3:f4:
02:b4:55:c9:18:b6:85:a7:0a:0a:b0:03:82:c6:41:4d:45:84:
56:95:70:28:f6:ad:f6:17:ee:e7:6b:38:74:2b:2f:f3:af:4a:
46:a2:2b:36:7a:51:86:20:6b:35:92:07:20:71:1e:8e:fe:89:
83:29:ec:09:ba:67:12:9b:f5:29:8e:be:52:ff:46:7c:33:ff:
3c:47:00:90:ac:68:3f:36:91:2d:a6:f8:22:27:c9:1a:21:b0:
79:61:58:90:fd:90:85:56:f2:ac:62:ab:6d:f7:1a:f9:a9:ca:
8b:0f:97:2b:38:46:c6:44:0a:c0:4e:c5:ff:4d:7c:b9:fb:14:
f1:b7:cb:09:3f:57:43:c8:be:07:17:51:8a:3b:5e:3c:68:d6:
7e:9c:1e:ed:cd:f8:81:43:65:c8:87:fd:36:e8:57:f7:f5:bb:
4b:f1:1b:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvtgwzhjtNP++ES81qWlJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZDM4YmQ0YzBkMGU5ZjMwMjgwMjE5ODRjZDgzNTU2MDQ3
ZjYzOTgwHhcNMjYwMzAyMTgwMTA5WhcNMjYwMzAzMTgwMTA5WjAzMTEwLwYDVQQD
EygxOGJhMTIyZmJkMjcyNzE3MmI5YjczZDAyZTA4N2VjZDBlMjVjMTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7fRdWksdgvZvwLdJr6q2i/j/4AMe
7lM5kIqz6X5IpD8U32FtO9J1ZBoAwlqtrSjhhRiPjqRH66xtG9OOCXZ9fSgG61LA
fIrg8IbQ7+pNonrqEi3t1HO/gGglidRPfWIcKMm0EsofEJKadOUAPaw2ZpzA4MKR
Zv01pLD5hPaPt88Nh6qH+nrdEIkoukDzt/oj0U375iLWweBAVvbPSzb8/olQnHep
F0hKALbxUTVh2gotfIgY4B51cce43w6hWOvgWu59f7tFWeKCGvmxrMyh8HZo/NNq
U2Z/dlu7Vx1vxjvILg9AtlYdYGf3eFew9uFrk5TSs8AOvD6uFW1QgUVqcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBi6Ei+9JycXK5tz0C4Ifs0OJcEhMB8GA1UdIwQY
MBaAFGrTi9TA0OnzAoAhmEzYNVYEf2OYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS85Mjg2MTgtMmE2OS00ZmJmLTk2Yzkt
Y2U3MDAwNzRhN2ZjLzEvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS85Mjg2MTgtMmE2OS00ZmJmLTk2YzktY2U3MDAwNzRhN2Zj
LzEvYXRPTDFNRFE2Zk1DZ0NHWVROZzFWZ1JfWTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4UJpbvQ
Vppm4Lj29pZE5w7SlEaipay+ul5g7mQ2Xl3UA+b1CWHavt8y6XcYAB4tmDdNmlmc
lewwwf+fCLhiqRJKpnKHMuNsBiU8fs0UkGVOn8CQu4iCjNP0ArRVyRi2hacKCrAD
gsZBTUWEVpVwKPat9hfu52s4dCsv869KRqIrNnpRhiBrNZIHIHEejv6JgynsCbpn
Epv1KY6+Uv9GfDP/PEcAkKxoPzaRLab4IifJGiGweWFYkP2QhVbyrGKrbfca+anK
iw+XKzhGxkQKwE7F/018ufsU8bfLCT9XQ8i+BxdRijtePGjWfpwe7c34gUNlyIf9
NuhX9/W7S/Ebuw==
-----END CERTIFICATE-----
Generated at Tue Mar 3 00:06:12 2026 by rpki-client