Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
File: ATTJf7sEhrXGbRPKsaiymEYFIds.mft (raw, json)
Hash identifier: VzJaC+Xcst8RIc66wbNjnKMtJhrLd477799cDDUeUBg=
Subject key identifier: 57:B6:1D:FF:2E:E1:E2:C1:EA:3D:C8:54:92:E5:28:C7:8A:A6:EC:4D
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Certificate issuer: /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial: 01A1DD5E4849196E9BABDFFD2C3785E8B5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
Manifest number: 0C2B
Signing time: Sun 15 Nov 2026 04:01:45 +0000
Manifest this update: Sun 15 Nov 2026 04:01:45 +0000
Manifest next update: Mon 16 Nov 2026 04:01:45 +0000
Files and hashes: 1: 3De_e63suCP9ycJDJ_Ka1whD8Jw.roa (hash: ZUi0zvIhEAW3gS3GnJUwYhmDjTJ4T7kn28VhumIi1RA=)
2: ATTJf7sEhrXGbRPKsaiymEYFIds.crl (hash: vPbzX6airu1xJfS47RQ+YdyLALOLB4dQzTbCCG+Ig5U=)
3: sdvnk99Tq3EIIIB_nAVJu6v2-eg.roa (hash: rrdg+q8HbhUAgKysFVF0heLuEhPWLu99pYl5fvdmoyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5e:48:49:19:6e:9b:ab:df:fd:2c:37:85:e8:b5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Validity
Not Before: Nov 15 04:01:45 2026 GMT
Not After : Nov 16 04:01:45 2026 GMT
Subject: CN=57b61dff2ee1e2c1ea3dc85492e528c78aa6ec4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:b2:bf:06:81:b5:a8:91:d2:cf:e4:ef:fb:
60:d4:b2:bf:67:7c:76:ea:3a:1c:f0:d6:01:a3:c0:
ab:d6:7e:e9:1f:ed:4b:f6:ff:86:5f:86:01:e1:4d:
6b:fc:40:11:83:63:6e:1c:a9:b9:17:21:76:c1:8f:
d3:12:a8:ae:3d:9e:f8:3d:41:8a:0c:59:40:cc:95:
13:97:21:70:3d:17:c5:26:98:a6:44:6a:6f:00:14:
79:38:db:1c:7e:dd:a8:74:ff:38:e0:e7:15:53:8a:
92:5b:1d:70:29:b5:7b:47:53:29:70:c2:0e:ce:52:
51:df:d8:93:cf:94:68:07:2f:66:85:3e:44:78:b3:
f6:79:ad:04:0f:09:95:c7:3f:3e:f4:4c:4a:52:94:
7e:36:8f:c5:89:fd:34:49:da:e3:eb:21:f5:2b:ec:
3e:f4:54:60:43:ba:05:70:c6:9a:e7:76:94:24:5e:
d7:67:29:58:7d:07:30:69:f5:62:61:f6:e5:e2:4c:
ee:f2:95:e3:1f:89:ec:0d:00:4f:15:45:df:12:71:
69:de:36:2f:e2:7b:dc:51:08:f0:e9:d6:17:06:55:
22:3d:7f:c6:de:95:a3:f0:49:eb:41:00:fd:ab:7d:
cb:88:75:14:22:3e:a6:32:62:d3:1c:33:7e:3a:e1:
1b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B6:1D:FF:2E:E1:E2:C1:EA:3D:C8:54:92:E5:28:C7:8A:A6:EC:4D
X509v3 Authority Key Identifier:
keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:10:9f:dc:af:01:e3:ad:94:74:18:60:f0:5a:fa:fb:45:72:
a0:41:b9:f1:e6:ec:23:6f:f4:55:be:3a:b0:7a:10:4c:10:18:
64:47:bf:d2:ef:99:a6:3c:e5:f9:15:6b:83:7c:97:ed:a0:bb:
fd:76:c7:3f:23:fe:78:aa:f3:d0:ad:52:00:00:84:d4:97:f2:
09:b5:cc:b7:de:8a:f8:2a:eb:e7:27:01:cd:31:40:85:da:aa:
4a:7d:d3:33:49:9b:e7:cf:33:4c:4e:e4:52:a9:a0:da:38:d7:
43:de:da:78:04:bf:00:94:80:21:5f:60:15:fa:57:0a:59:76:
f9:c4:15:78:de:77:88:ad:ff:96:f4:ce:97:b6:e6:a5:91:34:
56:1c:15:6e:9f:9a:f2:41:dd:fb:0e:f5:12:d0:79:52:fd:00:
20:9c:37:8a:14:6e:7f:be:19:fe:49:f2:14:71:ad:0e:44:f3:
f0:ae:a4:02:9d:f2:e8:b2:b1:5e:33:e0:58:f6:3c:ca:94:8b:
2e:f9:d4:15:6d:f7:5c:71:e3:be:36:df:71:cc:ca:ff:2d:4e:
74:a0:6c:70:96:5b:18:24:ee:13:f4:61:75:f4:c8:2b:95:00:
c4:13:26:fe:ef:3a:9d:1d:3c:4f:e7:74:13:d8:08:c6:65:f1:
c9:ae:39:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:25:30 2026 by rpki-client