Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
File: atCw5EzIalF2lUfCKteWGEtUsJI.mft (raw, json)
Hash identifier: AGrIjmdcTe2i3W6I3Yvo2WaLz8F7vAyO5nkpvS6k9SM=
Subject key identifier: C5:E4:44:E2:06:14:1B:B9:AC:DB:A7:A0:5C:5F:1D:81:BA:65:C6:02
Authority key identifier: 6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
Certificate issuer: /CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Certificate serial: 019D9A751EF1322C404735D981D9D4422D3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
Manifest number: 08C0
Signing time: Fri 17 Apr 2026 08:01:00 +0000
Manifest this update: Fri 17 Apr 2026 08:01:00 +0000
Manifest next update: Sat 18 Apr 2026 08:01:00 +0000
Files and hashes: 1: atCw5EzIalF2lUfCKteWGEtUsJI.crl (hash: 52OipOGw+nILBRYFnLP6PYRmGBsd/tdin3U67CErAPM=)
2: yfIVfxN62mXPNIQcBAIr1HDWsQ0.roa (hash: IDg/3WOtqztOAgh+Loowhsk9bIJzHnk5Pz6kWQuqSiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:1e:f1:32:2c:40:47:35:d9:81:d9:d4:42:2d:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ad0b0e44cc86a51769547c22ad796184b54b092
Validity
Not Before: Apr 17 08:01:00 2026 GMT
Not After : Apr 18 08:01:00 2026 GMT
Subject: CN=c5e444e206141bb9acdba7a05c5f1d81ba65c602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:f8:f4:16:0f:e6:8b:c0:e5:da:33:f7:d4:
cc:75:85:c5:d5:6e:d8:38:2d:32:70:ae:e3:8d:55:
08:1f:eb:92:e3:34:7d:4b:5c:34:41:f3:47:9d:a3:
3f:ef:06:66:71:62:f8:c6:37:be:48:b4:7c:a7:9d:
9f:43:99:b2:7b:43:a1:81:17:69:77:f1:62:e9:9a:
fc:e2:26:24:e4:f4:dc:ca:ad:c4:67:74:e6:16:3c:
a8:10:9f:0b:ff:20:2c:61:cb:db:01:15:11:85:2d:
28:ea:82:85:05:c7:61:bf:fa:aa:a1:36:95:83:03:
3b:6d:d4:54:60:44:45:89:11:4f:96:4d:84:28:52:
46:fb:10:ba:6c:e6:2a:f5:19:eb:f6:0b:92:71:84:
30:41:d4:ec:09:3f:23:d1:b3:e1:5d:be:9a:12:56:
a1:5c:c3:f7:2c:e8:b3:2d:cd:46:4a:04:2f:af:1b:
4f:26:10:99:1c:1f:92:5e:e3:09:ff:60:d1:22:f4:
f9:29:5f:fb:c2:95:be:15:a6:15:c6:06:82:7f:ef:
84:dd:44:f5:38:a2:2c:8a:2a:cc:45:11:15:13:e5:
31:38:fd:01:65:fa:37:d6:3b:01:83:f8:97:66:9b:
9f:77:38:02:fe:cd:e6:d5:7e:42:01:8d:9c:bc:c1:
16:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E4:44:E2:06:14:1B:B9:AC:DB:A7:A0:5C:5F:1D:81:BA:65:C6:02
X509v3 Authority Key Identifier:
keyid:6A:D0:B0:E4:4C:C8:6A:51:76:95:47:C2:2A:D7:96:18:4B:54:B0:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/atCw5EzIalF2lUfCKteWGEtUsJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5a1ef7-f3a4-473c-a69c-48225f3111cf/1/atCw5EzIalF2lUfCKteWGEtUsJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:28:55:53:15:80:41:45:26:e3:d3:67:ab:a5:fe:f1:fc:bb:
ea:f2:5f:94:c0:f7:b7:92:e0:b4:7b:9a:1b:8c:5f:cc:31:54:
31:16:0f:0b:b1:84:be:a6:af:83:3e:eb:17:89:fc:4f:e9:2e:
30:71:a2:4c:cc:eb:84:e1:06:15:13:6b:2c:5f:71:e7:d9:ce:
2a:25:c7:96:11:20:cd:fb:e5:d0:07:c0:d8:5c:14:0d:1f:5c:
8d:f9:c2:15:32:a1:9b:a3:d4:95:b8:96:a6:49:d5:f4:6e:4d:
4b:ac:5b:7f:0a:17:1f:f6:84:30:66:7f:3b:ad:3f:01:f3:8d:
f3:c2:7b:9a:59:fc:4f:72:34:80:9c:ca:20:86:3a:c5:38:79:
c3:fa:87:da:3a:9b:87:bb:d6:1a:23:23:08:fe:9c:86:74:a5:
f0:5c:7b:28:3c:c7:d7:a1:77:d7:51:82:fb:46:93:99:cc:15:
f4:53:d0:8d:c3:b8:1e:d7:fc:9f:55:32:dc:fe:e5:d3:97:00:
2f:c4:da:d4:78:cd:35:1a:46:96:77:c3:c4:0e:55:16:67:e0:
46:5c:5a:3e:a5:7d:fa:5c:f9:5d:8d:0f:0e:6a:32:e2:c7:9a:
2b:f2:0c:a7:a5:47:ef:72:0e:1f:30:ea:3b:11:20:da:df:c1:
6b:d0:78:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:41:22 2026 by rpki-client