
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: 19GuZvODJbV81NgjujF1H4yF18RyIe64le3TgASMIUE=
Subject key identifier: 6D:11:C6:D8:C5:65:64:52:CB:BF:FA:A2:9B:14:0F:03:A4:E6:5C:5C
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 019FA82BC0997D1B955BF6AAEE291CC967F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 16EE
Signing time: Tue 28 Jul 2026 10:01:07 +0000
Manifest this update: Tue 28 Jul 2026 10:01:07 +0000
Manifest next update: Wed 29 Jul 2026 10:01:07 +0000
Files and hashes: 1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: G/ktADF6FLU0lhpmmgGLqu6FGs7YAXFf8EMTc5JGFhU=)
2: MUqliOvEVeKb9JtEVUP0RYf4gIk.roa (hash: TMpOjL13MKdbstHzqTRKhkXl6TlyI0oj7OgB4SFPTCM=)
3: hmKoDxRn434vXEK-hPdsbe6_RKc.roa (hash: w7LrvFCs4q8tWPgfM7SEvaMXxSu+sAvyt4DZnLap2XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:c0:99:7d:1b:95:5b:f6:aa:ee:29:1c:c9:67:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Jul 28 10:01:07 2026 GMT
Not After : Jul 29 10:01:07 2026 GMT
Subject: CN=6d11c6d8c5656452cbbffaa29b140f03a4e65c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:ef:0d:4e:09:a5:51:8f:d6:d6:fb:2d:fc:
a8:46:95:36:61:c8:ab:25:b3:c1:98:05:96:89:5c:
89:de:4a:ef:5e:92:4a:2e:a4:39:3a:af:af:01:65:
af:89:e3:81:6a:89:23:63:c6:b0:db:ca:aa:7f:f2:
56:98:27:c3:0e:d1:84:f6:c9:5f:10:35:dd:5c:f8:
06:77:1f:c4:9b:c4:d4:1b:8d:2a:7d:ce:27:8e:49:
32:20:fc:61:e6:4a:ac:ea:95:4c:19:33:05:7b:6e:
77:99:e4:8c:f7:e1:71:68:ca:81:67:94:4d:0d:1e:
21:73:35:1c:ed:8d:a7:e7:1c:a0:16:79:4f:7f:39:
c1:31:96:d3:7c:0c:cd:01:60:e4:d6:e4:53:79:85:
d5:6c:e5:c5:63:1c:9c:c2:c9:ec:7f:3b:99:41:29:
32:69:03:71:d7:8e:c5:73:54:87:e1:b5:94:7d:81:
fd:ad:e5:a7:25:50:f6:a2:60:36:81:ed:a9:09:9a:
d3:ce:d2:48:ae:e6:d0:d4:67:00:3f:f1:88:2f:f1:
7e:09:97:3c:d7:cb:19:09:4a:53:20:63:a1:af:e0:
92:27:89:70:f4:1b:60:3b:8f:b1:aa:9c:d8:0a:7f:
7a:c8:9a:8e:04:7b:82:e8:07:1e:72:c0:76:bd:2a:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:11:C6:D8:C5:65:64:52:CB:BF:FA:A2:9B:14:0F:03:A4:E6:5C:5C
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ba:a8:40:86:ce:13:fa:19:a3:1e:f0:4c:bf:54:58:96:a6:
6d:5c:28:83:76:5b:c4:0b:1f:1a:19:d8:28:a8:c1:47:33:43:
7b:bd:2c:89:77:d2:9f:ab:c9:4b:f1:5f:e3:b3:e1:e2:a8:39:
88:a3:5d:7d:b8:b2:b1:f7:79:0a:68:07:bf:e1:78:36:bf:cf:
1a:d5:41:b1:d3:b8:c3:d3:ea:af:50:47:f0:12:d0:41:34:89:
74:52:fe:80:96:be:c5:73:7f:14:9d:f4:44:bf:07:45:0c:8d:
34:f9:a4:67:87:a9:fc:f3:02:7f:f4:09:79:5f:ec:1c:90:c2:
63:49:60:7a:da:ba:1b:88:c1:cf:c9:ea:ab:cf:cf:3c:c5:0a:
90:23:e1:1b:69:6e:d4:43:fd:83:e3:9d:ba:19:9a:79:9d:0a:
d4:c6:51:ac:79:ce:d3:92:15:36:e1:ca:61:78:18:05:f4:16:
31:09:18:9a:73:83:7b:7d:99:fc:cf:ca:0c:95:21:fe:a3:91:
b5:58:f8:b0:97:f6:90:04:a0:6b:af:20:d6:3c:a3:d7:cb:a7:
51:e4:53:8d:2f:ca:84:d7:08:bb:b2:dd:65:fc:49:0e:bd:f2:
be:f2:c7:f6:5d:1f:08:24:ae:fc:01:57:f6:9c:8f:56:d1:f1:
00:7d:e3:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oK8CZfRuVW/aq7ikcyWfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZDBlODg4ODVlZjQ4YjIwYzg3Yjc2ZmQ4NWQ0MmU2ZWIz
ZDcxODMwHhcNMjYwNzI4MTAwMTA3WhcNMjYwNzI5MTAwMTA3WjAzMTEwLwYDVQQD
Eyg2ZDExYzZkOGM1NjU2NDUyY2JiZmZhYTI5YjE0MGYwM2E0ZTY1YzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk/vDU4JpVGP1tb7LfyoRpU2Ycir
JbPBmAWWiVyJ3krvXpJKLqQ5Oq+vAWWvieOBaokjY8aw28qqf/JWmCfDDtGE9slf
EDXdXPgGdx/Em8TUG40qfc4njkkyIPxh5kqs6pVMGTMFe253meSM9+FxaMqBZ5RN
DR4hczUc7Y2n5xygFnlPfznBMZbTfAzNAWDk1uRTeYXVbOXFYxycwsnsfzuZQSky
aQNx147Fc1SH4bWUfYH9reWnJVD2omA2ge2pCZrTztJIrubQ1GcAP/GIL/F+CZc8
18sZCUpTIGOhr+CSJ4lw9BtgO4+xqpzYCn96yJqOBHuC6AcecsB2vSpnOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0RxtjFZWRSy7/6opsUDwOk5lxcMB8GA1UdIwQY
MBaAFALQ6IiF70iyDIe3b9hdQubrPXGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDct
OTUzYzY4NTA2ZDVjLzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDctOTUzYzY4NTA2ZDVj
LzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLqoQIbO
E/oZox7wTL9UWJambVwog3ZbxAsfGhnYKKjBRzNDe70siXfSn6vJS/Ff47Ph4qg5
iKNdfbiysfd5CmgHv+F4Nr/PGtVBsdO4w9Pqr1BH8BLQQTSJdFL+gJa+xXN/FJ30
RL8HRQyNNPmkZ4ep/PMCf/QJeV/sHJDCY0lgetq6G4jBz8nqq8/PPMUKkCPhG2lu
1EP9g+OduhmaeZ0K1MZRrHnO05IVNuHKYXgYBfQWMQkYmnODe32Z/M/KDJUh/qOR
tVj4sJf2kASga68g1jyj18unUeRTjS/KhNcIu7LdZfxJDr3yvvLH9l0fCCSu/AFX
9pyPVtHxAH3jqg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:22 2026 by rpki-client