Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: 7zai7RwPg3zBnWu6D4Ni4UteHTwC/8KhRmS9bSDq2Yg=
Subject key identifier: F2:F8:25:B8:2D:5B:27:81:41:FE:B5:27:D9:48:C5:0E:52:C4:50:F6
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 019CAB6BAEB8E99A33E01522E2FF853601AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 1562
Signing time: Sun 01 Mar 2026 22:01:26 +0000
Manifest this update: Sun 01 Mar 2026 22:01:26 +0000
Manifest next update: Mon 02 Mar 2026 22:01:26 +0000
Files and hashes: 1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: r/mOsgzmTbr/4J7r4edYN/Q7YZDJXBeLCK9zMRjgdcs=)
2: MUqliOvEVeKb9JtEVUP0RYf4gIk.roa (hash: TMpOjL13MKdbstHzqTRKhkXl6TlyI0oj7OgB4SFPTCM=)
3: hmKoDxRn434vXEK-hPdsbe6_RKc.roa (hash: w7LrvFCs4q8tWPgfM7SEvaMXxSu+sAvyt4DZnLap2XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:ae:b8:e9:9a:33:e0:15:22:e2:ff:85:36:01:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Mar 1 22:01:26 2026 GMT
Not After : Mar 2 22:01:26 2026 GMT
Subject: CN=f2f825b82d5b278141feb527d948c50e52c450f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:95:9d:3f:f1:95:de:7a:58:96:99:c1:79:7e:
11:c8:f0:80:f4:f8:90:3d:99:a3:e0:de:22:3a:b8:
67:93:91:64:9f:bc:d3:3d:0d:5b:b6:c8:c8:05:da:
54:a6:7b:68:5f:71:23:33:d3:42:2d:0e:fb:74:af:
66:7f:2e:d5:cd:bd:cf:5d:62:c6:85:80:20:33:2d:
a6:30:33:fc:25:e0:e0:34:1a:e7:2e:00:e2:32:29:
1e:65:1b:72:cf:9f:02:9f:87:17:df:e8:94:0f:1e:
19:b4:bb:65:fe:3f:43:4c:d1:4f:a4:c3:2e:2f:84:
2b:0c:4b:fd:d8:d1:ce:8a:99:9f:7e:51:66:6c:61:
ef:25:7c:ae:0d:39:e9:18:70:21:7c:ec:93:b0:84:
8c:83:e6:29:32:57:9b:65:bf:b1:85:ed:ef:a4:b7:
31:31:3c:8b:00:82:19:c5:6b:fc:0f:96:26:22:46:
ae:84:41:b5:c7:8d:db:b7:f9:79:8c:e7:79:f9:5b:
02:be:db:1b:2a:68:71:f1:64:40:c6:ce:43:f3:7a:
1a:16:82:15:63:a5:70:72:c7:24:03:38:25:29:74:
62:2c:7f:e6:19:05:2b:de:f3:c6:89:c4:f8:60:35:
a0:3a:83:eb:bb:74:3d:df:ce:8a:b9:0d:55:a0:cc:
37:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F8:25:B8:2D:5B:27:81:41:FE:B5:27:D9:48:C5:0E:52:C4:50:F6
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:43:1c:23:18:aa:6d:79:1a:25:63:97:0c:1f:d6:e6:8c:cc:
9b:30:61:69:55:37:30:af:65:46:ae:31:df:67:2f:c3:b5:47:
0a:ef:74:b9:3f:ce:7d:71:50:b1:f0:54:60:09:05:c1:82:f4:
60:a4:2e:03:5a:95:f1:45:fc:f8:ec:f5:37:79:06:6b:82:52:
54:21:61:d4:72:88:d9:9a:a1:7c:74:7d:d6:81:0d:cb:fc:71:
93:ec:df:b0:6c:1b:86:b8:b6:e9:85:a0:f0:b8:4f:1e:8d:76:
88:b2:58:ca:de:c9:dc:47:15:a6:b2:7d:77:0f:7b:67:a4:bb:
48:da:45:eb:ff:78:5e:05:27:c8:ac:9d:ce:7c:eb:65:0c:d9:
e9:5f:6c:c6:5d:50:45:a5:34:7f:8e:fc:94:11:79:f1:39:7d:
7a:39:bc:5d:6e:7b:c0:a1:79:fb:fb:bf:fe:a0:a7:43:eb:a6:
8d:2f:fc:f3:d4:c5:a0:50:7e:56:86:38:1c:4b:f5:63:e0:2f:
03:e1:39:a4:f5:76:da:3c:71:80:d8:8a:e1:01:5d:76:f2:98:
b2:30:27:8e:37:7a:f8:88:9b:9b:27:ef:da:ee:01:36:6f:6d:
67:ef:e1:53:6e:61:bf:2b:3f:66:12:b8:aa:c8:ee:dd:57:db:
86:32:68:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra6646Zoz4BUi4v+FNgGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZDBlODg4ODVlZjQ4YjIwYzg3Yjc2ZmQ4NWQ0MmU2ZWIz
ZDcxODMwHhcNMjYwMzAxMjIwMTI2WhcNMjYwMzAyMjIwMTI2WjAzMTEwLwYDVQQD
EyhmMmY4MjViODJkNWIyNzgxNDFmZWI1MjdkOTQ4YzUwZTUyYzQ1MGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJWdP/GV3npYlpnBeX4RyPCA9PiQ
PZmj4N4iOrhnk5Fkn7zTPQ1btsjIBdpUpntoX3EjM9NCLQ77dK9mfy7Vzb3PXWLG
hYAgMy2mMDP8JeDgNBrnLgDiMikeZRtyz58Cn4cX3+iUDx4ZtLtl/j9DTNFPpMMu
L4QrDEv92NHOipmfflFmbGHvJXyuDTnpGHAhfOyTsISMg+YpMlebZb+xhe3vpLcx
MTyLAIIZxWv8D5YmIkauhEG1x43bt/l5jOd5+VsCvtsbKmhx8WRAxs5D83oaFoIV
Y6VwcsckAzglKXRiLH/mGQUr3vPGicT4YDWgOoPru3Q9386KuQ1VoMw3KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPL4JbgtWyeBQf61J9lIxQ5SxFD2MB8GA1UdIwQY
MBaAFALQ6IiF70iyDIe3b9hdQubrPXGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDct
OTUzYzY4NTA2ZDVjLzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDctOTUzYzY4NTA2ZDVj
LzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD0McIxiq
bXkaJWOXDB/W5ozMmzBhaVU3MK9lRq4x32cvw7VHCu90uT/OfXFQsfBUYAkFwYL0
YKQuA1qV8UX8+Oz1N3kGa4JSVCFh1HKI2ZqhfHR91oENy/xxk+zfsGwbhri26YWg
8LhPHo12iLJYyt7J3EcVprJ9dw97Z6S7SNpF6/94XgUnyKydznzrZQzZ6V9sxl1Q
RaU0f478lBF58Tl9ejm8XW57wKF5+/u//qCnQ+umjS/889TFoFB+VoY4HEv1Y+Av
A+E5pPV22jxxgNiK4QFddvKYsjAnjjd6+Iibmyfv2u4BNm9tZ+/hU25hvys/ZhK4
qsju3VfbhjJoUg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:15:54 2026 by rpki-client