Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: /iyuRUJU4Di4l+4uJylOUOuFz1DqtxhpdCq8nBCMr3g=
Subject key identifier: CD:C7:B1:27:9C:4C:2F:D9:E9:B0:26:17:7B:8D:EA:FE:E7:69:59:60
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 01A0C40D6FAACAA9AC822C7CCB23AEA8B05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 1781
Signing time: Mon 21 Sep 2026 13:00:09 +0000
Manifest this update: Mon 21 Sep 2026 13:00:09 +0000
Manifest next update: Tue 22 Sep 2026 13:00:09 +0000
Files and hashes: 1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: +ac47Kl9flfKWXjbOWlpDWI4iZp8Gc8OBeXCgKuKsoo=)
2: MUqliOvEVeKb9JtEVUP0RYf4gIk.roa (hash: TMpOjL13MKdbstHzqTRKhkXl6TlyI0oj7OgB4SFPTCM=)
3: hmKoDxRn434vXEK-hPdsbe6_RKc.roa (hash: w7LrvFCs4q8tWPgfM7SEvaMXxSu+sAvyt4DZnLap2XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:6f:aa:ca:a9:ac:82:2c:7c:cb:23:ae:a8:b0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Sep 21 13:00:09 2026 GMT
Not After : Sep 22 13:00:09 2026 GMT
Subject: CN=cdc7b1279c4c2fd9e9b026177b8deafee7695960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:89:de:2d:15:d1:21:9d:82:44:62:f8:f8:f4:
17:a4:22:d2:92:03:56:cc:78:31:ea:83:38:d7:87:
03:fc:12:57:21:d4:db:8c:69:17:38:5a:55:34:a5:
7f:90:99:c6:4a:3e:46:1d:d3:67:4d:ef:4a:fa:f6:
54:b7:13:f8:eb:70:90:7c:5d:a7:47:3e:32:d1:23:
bb:be:e9:91:4e:dd:30:ee:a4:aa:d9:95:e0:a3:c3:
dc:3f:f9:be:c3:bb:33:a8:5e:e3:0e:04:76:e2:e2:
53:64:a8:05:56:05:ae:0f:aa:da:a9:d0:37:3d:e0:
a1:92:12:18:65:f3:e9:84:24:6f:62:77:b3:67:6a:
0d:cf:1c:5a:d3:c9:1b:f6:c0:eb:77:7c:34:44:c2:
b6:d8:14:e6:4d:33:09:05:99:61:86:07:6f:df:01:
70:55:8a:b5:3d:5c:fd:fe:d2:cf:82:60:ec:8e:03:
74:e1:5d:98:47:5b:5e:b4:0c:3d:7f:c5:45:43:58:
4c:85:02:c4:1d:40:a9:62:9d:be:6d:ab:d0:a5:07:
88:65:f4:f4:b9:6c:a9:26:f3:ad:d3:b2:29:ea:e4:
1f:12:64:c2:39:8c:bf:88:a0:26:a0:cc:e2:0a:b4:
33:b4:6c:b6:7c:dc:ba:7c:13:48:6b:14:35:7d:d7:
84:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C7:B1:27:9C:4C:2F:D9:E9:B0:26:17:7B:8D:EA:FE:E7:69:59:60
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:59:0b:ed:20:0a:4c:35:68:99:0a:a9:f3:28:17:a2:fb:f6:
f3:8c:95:ac:29:54:c9:5b:59:e8:b9:cd:cf:d2:a6:02:0b:7a:
38:4a:6b:55:c5:83:f0:22:e1:26:be:34:9b:63:4e:36:64:59:
9e:91:53:31:11:a3:83:32:13:47:db:c3:4a:b3:d3:ab:a1:f1:
63:88:44:af:8d:e8:21:83:d8:6d:13:0e:6b:cf:42:5f:a2:41:
58:ff:bc:bf:a9:f1:bd:dd:13:79:62:ca:e0:3d:38:c1:d2:1c:
e8:75:d8:00:df:b3:5a:c3:55:9c:a5:be:04:35:f2:fb:cf:4e:
bd:e7:7f:a6:a5:c4:5f:13:36:b6:77:1a:4a:05:d8:f2:d0:bb:
d1:97:a4:e9:d5:93:33:ab:21:77:00:77:49:44:6d:95:a9:05:
92:a1:64:a4:57:75:2b:18:68:3c:bd:0a:a1:0c:1c:21:fd:28:
68:aa:03:a3:aa:70:e9:ec:99:6a:71:bc:22:0a:d1:8f:e9:a4:
e4:ce:9d:c4:df:89:da:26:e5:01:58:a8:31:35:52:71:8d:bd:
00:20:0e:28:46:43:a7:ec:ac:36:fa:60:d1:cf:01:34:50:93:
12:1d:2c:a3:40:7b:11:01:5a:9a:2e:c9:cc:67:7f:26:0b:62:
24:39:c7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:58:58 2026 by rpki-client