Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: mwZ+DpZp97GSPrQd5CCJyDTBipS15agZjS272WgcuAI=
Subject key identifier: AB:E7:AA:D7:90:CD:33:3E:A3:71:A4:66:B1:2F:CB:30:27:12:27:EB
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 019D98F5036FD57CA435CB1A22B336CE592A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 15DD
Signing time: Fri 17 Apr 2026 01:01:27 +0000
Manifest this update: Fri 17 Apr 2026 01:01:27 +0000
Manifest next update: Sat 18 Apr 2026 01:01:27 +0000
Files and hashes: 1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: JtnHzuTM+P2nmEAWbKwbyFpQtTAwIYIVuuA65CHDkuk=)
2: MUqliOvEVeKb9JtEVUP0RYf4gIk.roa (hash: TMpOjL13MKdbstHzqTRKhkXl6TlyI0oj7OgB4SFPTCM=)
3: hmKoDxRn434vXEK-hPdsbe6_RKc.roa (hash: w7LrvFCs4q8tWPgfM7SEvaMXxSu+sAvyt4DZnLap2XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:03:6f:d5:7c:a4:35:cb:1a:22:b3:36:ce:59:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Apr 17 01:01:27 2026 GMT
Not After : Apr 18 01:01:27 2026 GMT
Subject: CN=abe7aad790cd333ea371a466b12fcb30271227eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:3b:62:eb:4b:de:cb:1d:db:6e:9a:b9:d4:
a0:c8:44:ac:c3:9c:13:5c:50:d0:43:4a:de:03:d1:
a4:be:44:29:95:15:d5:d9:f0:43:4f:e9:92:65:6d:
71:1b:8b:9d:73:d9:31:3f:e4:6c:5d:dd:da:ce:39:
7e:fb:5e:72:e0:08:d1:b6:13:f1:e7:fa:fb:ca:f9:
d6:ee:db:6f:1f:c4:4b:a9:13:f2:f3:93:8e:96:2d:
95:6e:56:54:cb:b5:98:86:34:7b:9d:9b:2c:b0:b9:
99:ae:70:e4:9c:bc:3c:4d:89:57:9c:97:aa:9e:e6:
0b:de:b8:df:70:00:d2:5a:3b:a4:c7:80:82:82:b1:
91:bc:7c:be:29:c2:a6:90:3b:93:e9:a2:db:67:89:
e7:69:95:d0:a0:dd:b0:ee:5e:29:7d:61:ea:4d:21:
05:34:ad:f2:79:d7:e9:59:f3:75:1d:eb:d8:70:8c:
bf:c6:b8:39:93:ed:e3:3b:4a:bd:26:a6:1b:a5:9e:
5b:f3:52:9c:82:d4:58:fe:aa:a3:64:b6:9b:1c:88:
fd:fe:60:a8:38:7a:3b:91:62:4e:85:71:30:f6:e9:
be:62:0c:42:68:07:d9:67:2c:39:9b:6e:cd:db:5e:
d5:96:f8:48:0c:40:27:7d:de:b1:e5:b6:e3:89:3b:
4c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E7:AA:D7:90:CD:33:3E:A3:71:A4:66:B1:2F:CB:30:27:12:27:EB
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:6c:41:30:f0:85:87:ec:eb:8a:42:27:36:29:7c:9a:bf:2e:
8d:20:19:ab:23:f7:2d:fc:74:29:d5:94:5d:61:1a:a6:86:26:
ec:13:4b:6c:83:82:d3:1a:00:bb:63:97:14:a4:21:38:9d:ab:
61:8e:e8:a8:c7:36:8b:e5:38:bd:f0:81:3f:1b:ce:33:d3:2b:
56:0a:a3:ca:ff:56:6b:65:2e:a0:35:f9:0e:58:6c:c1:bd:72:
6b:c8:98:a3:8c:fe:9d:01:6d:cf:02:26:76:db:9c:f5:37:42:
3f:4d:2e:c1:a2:65:4c:fe:12:de:38:39:16:12:b3:9f:c4:ed:
81:f5:53:20:96:c0:bf:85:b1:bb:f0:23:51:09:0a:a9:30:94:
e7:87:b6:90:fd:f3:d2:3d:c0:14:cb:22:84:00:eb:28:45:c7:
b1:72:b2:87:21:f0:bb:91:1d:9a:5a:8b:c2:e8:0c:18:bd:ff:
ca:07:a1:36:1e:f3:0f:ea:e8:e7:69:5b:25:41:23:28:00:78:
27:00:49:93:3c:de:4a:d3:be:76:40:ac:8f:3e:e0:05:72:5c:
d0:64:85:12:fd:02:b0:fd:ce:82:11:dd:88:0e:b9:2e:4e:f7:
cc:84:76:d9:7e:20:34:ff:12:4b:7c:20:a5:43:69:27:f7:64:
67:33:12:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:28:48 2026 by rpki-client