Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: osVCg5UlNwjmpWVVGvN1yRT3TwjgMiZwWQAKWI7wnMw=
Subject key identifier: 7B:F2:6D:AA:14:E2:1C:C1:F1:F5:8E:C5:F4:AB:AF:8A:4E:4B:17:B6
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 01A1C4E77D8CFCCB9239F30FFC5445633295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 1806
Signing time: Tue 10 Nov 2026 10:01:07 +0000
Manifest this update: Tue 10 Nov 2026 10:01:07 +0000
Manifest next update: Wed 11 Nov 2026 10:01:07 +0000
Files and hashes: 1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: vub1h+D+3W5TrmXNFQ/BlAh8UvwVXLPqcIVOsa2bWEg=)
2: MUqliOvEVeKb9JtEVUP0RYf4gIk.roa (hash: TMpOjL13MKdbstHzqTRKhkXl6TlyI0oj7OgB4SFPTCM=)
3: hmKoDxRn434vXEK-hPdsbe6_RKc.roa (hash: w7LrvFCs4q8tWPgfM7SEvaMXxSu+sAvyt4DZnLap2XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:e7:7d:8c:fc:cb:92:39:f3:0f:fc:54:45:63:32:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Nov 10 10:01:07 2026 GMT
Not After : Nov 11 10:01:07 2026 GMT
Subject: CN=7bf26daa14e21cc1f1f58ec5f4abaf8a4e4b17b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2a:29:c6:38:37:65:41:3c:33:9b:fa:3e:a6:
4f:a0:4f:09:8f:24:71:29:65:f0:79:30:fd:bc:83:
27:6e:46:bd:f5:a5:b4:8b:4d:db:1b:33:4d:b2:2c:
62:e9:65:a7:a1:74:8a:ce:71:8f:da:20:d2:62:e6:
f1:7d:38:0f:f1:2c:9a:cc:a0:c8:75:7b:49:58:d5:
30:c6:38:a3:f3:f0:f2:dc:da:2e:a2:2e:21:80:07:
65:c5:a9:70:b4:d6:89:51:fd:d7:8a:10:51:9c:be:
98:22:1b:3f:45:02:a9:85:27:22:c9:a0:b4:38:98:
cb:35:23:3f:89:ab:60:4e:4f:d1:24:e4:08:9d:96:
b2:4d:c2:5c:f9:1e:c0:6c:b4:50:e1:9e:1d:42:ce:
cf:75:c6:e1:9a:81:c8:ea:4a:61:31:be:02:d1:7b:
6b:41:6c:2c:60:de:bd:80:10:07:23:bc:e2:9a:4c:
a3:fe:e2:2a:c6:6d:51:db:62:33:84:d4:e1:f3:9f:
2c:f7:60:39:64:5c:b8:46:01:57:78:4b:8d:07:97:
69:d4:68:5f:ab:d6:c7:66:14:37:34:e5:0e:e3:1f:
c2:00:ca:7b:66:aa:4d:d7:7f:0e:6b:e7:4f:d6:9a:
90:b9:1f:36:e3:ff:5a:ce:7c:69:c0:52:a7:f5:32:
54:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F2:6D:AA:14:E2:1C:C1:F1:F5:8E:C5:F4:AB:AF:8A:4E:4B:17:B6
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d6:14:98:ac:43:54:7f:e5:4f:f0:ff:08:79:01:83:45:21:
27:4f:4d:ef:58:28:3e:72:d1:fd:22:30:0e:8d:22:b4:db:60:
98:e7:0d:cc:c9:f4:9a:b9:cf:61:2b:65:9e:fa:8e:e0:f4:0c:
74:a8:5d:8a:62:21:00:dc:f6:cf:ec:7a:6d:0d:41:e1:6e:41:
f3:9c:0a:35:53:30:35:a8:6c:82:11:bb:7e:74:36:09:ae:3c:
81:3c:a0:84:7f:3c:14:26:d1:e3:b6:3d:45:45:fe:54:86:a2:
46:d7:2b:bf:b0:ed:0d:81:3a:eb:99:ed:e2:90:b4:03:e9:8b:
12:92:df:fe:93:b8:17:6d:82:d5:f4:38:c4:4f:d7:4b:5b:c2:
3f:ec:08:98:d9:b0:61:bb:db:51:31:d3:24:f8:e3:a2:56:a6:
a1:8e:f5:64:82:92:71:6f:a6:2a:c1:03:d4:5b:9c:f6:10:83:
4c:13:05:9a:b2:cf:e4:84:43:dd:95:9e:a4:4e:a7:b9:35:65:
02:59:44:41:ab:53:44:c9:ff:25:a7:29:f6:76:06:2f:1f:b1:
67:ae:95:ef:fb:40:42:4a:7b:1c:a6:68:91:01:c5:b6:ee:79:
06:04:6f:3c:8a:83:25:cd:03:bc:53:f6:d3:58:da:32:7a:58:
a9:61:1d:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHE532M/MuSOfMP/FRFYzKVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZDBlODg4ODVlZjQ4YjIwYzg3Yjc2ZmQ4NWQ0MmU2ZWIz
ZDcxODMwHhcNMjYxMTEwMTAwMTA3WhcNMjYxMTExMTAwMTA3WjAzMTEwLwYDVQQD
Eyg3YmYyNmRhYTE0ZTIxY2MxZjFmNThlYzVmNGFiYWY4YTRlNGIxN2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCopxjg3ZUE8M5v6PqZPoE8JjyRx
KWXweTD9vIMnbka99aW0i03bGzNNsixi6WWnoXSKznGP2iDSYubxfTgP8SyazKDI
dXtJWNUwxjij8/Dy3Nouoi4hgAdlxalwtNaJUf3XihBRnL6YIhs/RQKphSciyaC0
OJjLNSM/iatgTk/RJOQInZayTcJc+R7AbLRQ4Z4dQs7PdcbhmoHI6kphMb4C0Xtr
QWwsYN69gBAHI7zimkyj/uIqxm1R22IzhNTh858s92A5ZFy4RgFXeEuNB5dp1Ghf
q9bHZhQ3NOUO4x/CAMp7ZqpN138Oa+dP1pqQuR824/9aznxpwFKn9TJUbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvybaoU4hzB8fWOxfSrr4pOSxe2MB8GA1UdIwQY
MBaAFALQ6IiF70iyDIe3b9hdQubrPXGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDct
OTUzYzY4NTA2ZDVjLzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDctOTUzYzY4NTA2ZDVj
LzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD9YUmKxD
VH/lT/D/CHkBg0UhJ09N71goPnLR/SIwDo0itNtgmOcNzMn0mrnPYStlnvqO4PQM
dKhdimIhANz2z+x6bQ1B4W5B85wKNVMwNahsghG7fnQ2Ca48gTyghH88FCbR47Y9
RUX+VIaiRtcrv7DtDYE665nt4pC0A+mLEpLf/pO4F22C1fQ4xE/XS1vCP+wImNmw
YbvbUTHTJPjjolamoY71ZIKScW+mKsED1Fuc9hCDTBMFmrLP5IRD3ZWepE6nuTVl
AllEQatTRMn/Jacp9nYGLx+xZ66V7/tAQkp7HKZokQHFtu55BgRvPIqDJc0DvFP2
01jaMnpYqWEdqA==
-----END CERTIFICATE-----
Generated at Tue Nov 10 13:33:07 2026 by rpki-client