Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
File: ATTJf7sEhrXGbRPKsaiymEYFIds.mft (raw, json)
Hash identifier: +GWGtxVGUOqYDBxy8kydafFfYLiLZ4PsTMY4Z++/zPg=
Subject key identifier: 5B:76:F0:B3:ED:CB:99:96:A0:43:D1:0B:73:35:2A:52:2E:22:65:A9
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Certificate issuer: /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial: 019FA97564CDAE49C0A0A425E3287B81BC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
Manifest number: 0B07
Signing time: Tue 28 Jul 2026 16:01:10 +0000
Manifest this update: Tue 28 Jul 2026 16:01:10 +0000
Manifest next update: Wed 29 Jul 2026 16:01:10 +0000
Files and hashes: 1: 3De_e63suCP9ycJDJ_Ka1whD8Jw.roa (hash: ZUi0zvIhEAW3gS3GnJUwYhmDjTJ4T7kn28VhumIi1RA=)
2: ATTJf7sEhrXGbRPKsaiymEYFIds.crl (hash: EFDv8dMrYGX9KHV/oUN9QPZLevir1qX32V4+YgnE9Qo=)
3: sdvnk99Tq3EIIIB_nAVJu6v2-eg.roa (hash: rrdg+q8HbhUAgKysFVF0heLuEhPWLu99pYl5fvdmoyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:64:cd:ae:49:c0:a0:a4:25:e3:28:7b:81:bc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Validity
Not Before: Jul 28 16:01:10 2026 GMT
Not After : Jul 29 16:01:10 2026 GMT
Subject: CN=5b76f0b3edcb9996a043d10b73352a522e2265a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:a7:f9:4d:d5:36:f3:f4:e7:e1:e3:2d:d5:
08:75:e1:b5:bc:b5:25:43:a1:9b:02:cf:bc:b9:b2:
21:b8:78:2f:3f:ce:c5:0f:57:51:28:de:fb:e9:6b:
68:77:7d:c1:31:01:c5:b5:fc:bf:22:48:3c:cd:fc:
bb:e9:e6:44:87:35:74:37:e3:c9:e3:14:ad:5e:a9:
57:9f:c9:69:41:05:aa:d8:85:7e:7a:ff:97:11:d9:
7a:8e:c2:ce:7e:03:8d:49:04:7b:d4:ea:05:1e:3c:
f2:3a:59:39:bb:b4:1c:77:f1:5a:df:bb:d1:d0:49:
24:67:16:61:c1:61:56:cc:c7:d7:66:7f:44:c5:54:
47:bc:be:82:f8:31:93:d4:a2:62:51:19:cc:63:4d:
dc:55:b1:57:cc:bb:5a:44:f6:ac:3e:72:0b:d2:b4:
60:11:0d:7d:4f:0e:38:be:e6:19:d9:38:8f:6d:63:
d8:0e:e0:41:34:96:ce:45:f1:1a:f7:a0:51:90:af:
f5:aa:4a:9e:f1:29:83:e4:6d:f6:57:f0:2f:ac:af:
71:79:ca:44:74:d7:8a:04:5b:78:79:c9:0c:e5:ba:
f2:12:00:31:99:55:26:a4:7c:f3:c0:21:9d:51:7e:
ad:0e:86:e6:e1:e7:f4:53:40:74:ea:73:65:34:57:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:76:F0:B3:ED:CB:99:96:A0:43:D1:0B:73:35:2A:52:2E:22:65:A9
X509v3 Authority Key Identifier:
keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:14:21:22:8e:b2:fd:7e:f1:fb:fe:c2:be:ad:d6:a5:b7:1c:
1d:3b:2b:88:69:d3:f3:22:7c:b9:ab:49:7a:2d:ff:f5:f1:81:
9b:df:3d:aa:4d:85:4a:16:5c:7a:41:0e:61:2e:c8:9d:bd:ba:
ee:89:c9:35:19:9c:80:5d:91:26:7e:1e:71:40:28:94:8d:66:
59:99:52:b1:b5:1e:31:eb:76:7b:9e:a9:9e:69:ed:f3:b0:b6:
5e:05:98:ae:ea:43:12:86:65:11:9b:08:51:c7:59:df:9b:d8:
aa:0b:64:24:07:a9:61:dc:a3:01:94:f7:6a:b2:c1:65:1b:e0:
e8:8e:1b:b2:a2:ba:2c:fb:15:fc:cc:36:b2:5f:7a:56:7f:2f:
2c:60:12:a3:68:a4:a8:1d:c6:e9:ef:b8:08:79:b1:27:af:1c:
1c:6f:f6:31:5d:3c:96:ad:76:e7:82:55:cc:41:2d:0d:bc:87:
f3:fa:a1:44:e7:eb:d6:f4:16:e2:59:03:3a:63:5a:44:4e:71:
62:33:b0:c0:cc:5f:fd:9f:c7:3f:75:ca:94:4d:9a:07:c9:96:
cf:a4:fb:35:88:ab:85:76:84:77:63:02:01:db:ba:ea:64:4a:
1d:a5:21:89:75:6a:2d:18:3a:d1:fc:1e:7e:c3:53:f8:19:31:
36:ee:82:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdWTNrknAoKQl4yh7gbwHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMzRjOTdmYmIwNDg2YjVjNjZkMTNjYWIxYThiMjk4NDYw
NTIxZGIwHhcNMjYwNzI4MTYwMTEwWhcNMjYwNzI5MTYwMTEwWjAzMTEwLwYDVQQD
Eyg1Yjc2ZjBiM2VkY2I5OTk2YTA0M2QxMGI3MzM1MmE1MjJlMjI2NWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQen+U3VNvP05+HjLdUIdeG1vLUl
Q6GbAs+8ubIhuHgvP87FD1dRKN776Wtod33BMQHFtfy/Ikg8zfy76eZEhzV0N+PJ
4xStXqlXn8lpQQWq2IV+ev+XEdl6jsLOfgONSQR71OoFHjzyOlk5u7Qcd/Fa37vR
0EkkZxZhwWFWzMfXZn9ExVRHvL6C+DGT1KJiURnMY03cVbFXzLtaRPasPnIL0rRg
EQ19Tw44vuYZ2TiPbWPYDuBBNJbORfEa96BRkK/1qkqe8SmD5G32V/AvrK9xecpE
dNeKBFt4eckM5bryEgAxmVUmpHzzwCGdUX6tDobm4ef0U0B06nNlNFerAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFt28LPty5mWoEPRC3M1KlIuImWpMB8GA1UdIwQY
MBaAFAE0yX+7BIa1xm0TyrGosphGBSHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zMGUyYTktMDFmOC00MTI1LTlmZGIt
NThmMjg3NWNhMGJmLzEvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8zMGUyYTktMDFmOC00MTI1LTlmZGItNThmMjg3NWNhMGJm
LzEvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChQhIo6y
/X7x+/7Cvq3WpbccHTsriGnT8yJ8uatJei3/9fGBm989qk2FShZcekEOYS7Inb26
7onJNRmcgF2RJn4ecUAolI1mWZlSsbUeMet2e56pnmnt87C2XgWYrupDEoZlEZsI
UcdZ35vYqgtkJAepYdyjAZT3arLBZRvg6I4bsqK6LPsV/Mw2sl96Vn8vLGASo2ik
qB3G6e+4CHmxJ68cHG/2MV08lq1254JVzEEtDbyH8/qhROfr1vQW4lkDOmNaRE5x
YjOwwMxf/Z/HP3XKlE2aB8mWz6T7NYirhXaEd2MCAdu66mRKHaUhiXVqLRg60fwe
fsNT+BkxNu6Ceg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:33 2026 by rpki-client