Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: hqzqxESPtJfdBR4hv+gMs0y1Ow6hAhc+SJf/XA3R2Rw=
Subject key identifier: 20:B9:95:C4:35:EC:1F:C5:3F:CA:8B:39:C2:5F:78:C6:21:4E:18:69
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 01A001011AA9B18976E698C4214F29E6F5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 171C
Signing time: Fri 14 Aug 2026 16:00:44 +0000
Manifest this update: Fri 14 Aug 2026 16:00:44 +0000
Manifest next update: Sat 15 Aug 2026 16:00:44 +0000
Files and hashes: 1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: 9Fz0fKqvvqjkLZ2L3w39t4Ay1DPf7qOzmqbUG7n8S1A=)
2: MUqliOvEVeKb9JtEVUP0RYf4gIk.roa (hash: TMpOjL13MKdbstHzqTRKhkXl6TlyI0oj7OgB4SFPTCM=)
3: hmKoDxRn434vXEK-hPdsbe6_RKc.roa (hash: w7LrvFCs4q8tWPgfM7SEvaMXxSu+sAvyt4DZnLap2XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:1a:a9:b1:89:76:e6:98:c4:21:4f:29:e6:f5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Aug 14 16:00:44 2026 GMT
Not After : Aug 15 16:00:44 2026 GMT
Subject: CN=20b995c435ec1fc53fca8b39c25f78c6214e1869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c2:e8:39:5b:29:c3:20:87:e6:8f:74:69:06:
df:a1:fe:a1:53:5d:e9:ca:b7:0d:e6:c1:85:63:2e:
6d:ee:cf:54:39:4f:55:49:78:f1:5d:0e:c9:3a:71:
a7:2f:14:89:f7:a8:9e:17:b5:9e:c4:8e:9e:4d:82:
d3:e6:a4:71:5d:54:92:2a:b7:f4:0d:fb:31:54:20:
66:1c:b8:49:06:ff:54:34:2d:83:bc:7b:76:43:9a:
c4:49:a4:67:45:fe:40:64:5f:35:b8:c9:9f:8c:4e:
5f:f1:94:6e:0a:ff:06:51:13:75:f0:c9:d7:00:2d:
d7:e8:7b:42:a4:6e:7b:9d:e4:ec:62:fc:cc:93:28:
1a:9c:7d:1d:46:fc:50:39:67:5f:e7:16:55:9f:56:
8a:1c:2c:c9:17:d9:51:de:35:97:55:72:b5:b8:13:
23:39:67:33:01:ff:f3:a2:d2:48:1c:ff:6e:65:49:
82:ef:da:91:ee:76:99:70:fd:2a:9f:eb:2e:ed:c3:
a4:86:e8:53:be:94:22:88:ec:f5:75:a4:fa:76:2c:
18:f2:88:33:da:6b:6a:62:0d:6a:18:f5:72:be:b2:
dd:f4:e5:6c:5f:f5:4e:0c:c8:6c:93:6b:d6:6e:a6:
4c:42:34:59:ea:46:e9:43:10:82:2e:71:81:97:63:
fc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B9:95:C4:35:EC:1F:C5:3F:CA:8B:39:C2:5F:78:C6:21:4E:18:69
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:25:f6:58:c6:96:26:36:75:73:0c:d3:fd:dd:ad:1d:b1:bc:
8d:7f:76:d9:bb:df:30:ed:69:d7:61:69:1c:ea:74:3d:52:d1:
22:5f:d8:65:f9:f0:ec:15:25:bd:12:84:4e:bf:e3:0e:ab:53:
11:49:a4:10:45:d5:8c:92:4f:b5:6c:6f:34:cc:02:e1:ce:f9:
7e:48:99:8b:73:cf:00:2f:85:79:11:6d:cf:e8:3d:3f:57:5f:
61:03:b8:b8:a8:2c:d3:41:6d:bc:f2:9f:35:fc:77:c5:2f:31:
6c:b4:ff:63:eb:07:6d:4b:4d:4d:ff:f3:67:28:0b:f4:0a:a6:
7a:1c:ee:15:ee:70:8e:c9:f2:42:9d:e6:35:b9:10:f0:99:35:
42:0a:8a:ae:3f:49:a3:dd:d7:3d:fa:b9:ae:dc:e3:e3:96:10:
1d:40:9d:73:85:4d:bb:02:5a:29:9d:36:c5:4f:40:23:28:1a:
96:4a:5a:7e:5e:c4:9e:bc:c0:1c:18:a2:2c:20:99:97:a7:47:
b1:99:b0:a7:c2:43:9b:6f:04:12:48:78:57:92:9c:c0:94:d5:
2a:bb:dc:cb:e2:7c:3e:6b:b1:b8:43:7c:42:ff:e3:bd:6b:35:
e6:c3:08:45:c8:c4:ba:83:e3:fc:d7:a8:7f:8f:83:b5:df:3a:
0d:8a:3f:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABARqpsYl25pjEIU8p5vWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZDBlODg4ODVlZjQ4YjIwYzg3Yjc2ZmQ4NWQ0MmU2ZWIz
ZDcxODMwHhcNMjYwODE0MTYwMDQ0WhcNMjYwODE1MTYwMDQ0WjAzMTEwLwYDVQQD
EygyMGI5OTVjNDM1ZWMxZmM1M2ZjYThiMzljMjVmNzhjNjIxNGUxODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcLoOVspwyCH5o90aQbfof6hU13p
yrcN5sGFYy5t7s9UOU9VSXjxXQ7JOnGnLxSJ96ieF7WexI6eTYLT5qRxXVSSKrf0
DfsxVCBmHLhJBv9UNC2DvHt2Q5rESaRnRf5AZF81uMmfjE5f8ZRuCv8GURN18MnX
AC3X6HtCpG57neTsYvzMkyganH0dRvxQOWdf5xZVn1aKHCzJF9lR3jWXVXK1uBMj
OWczAf/zotJIHP9uZUmC79qR7naZcP0qn+su7cOkhuhTvpQiiOz1daT6diwY8ogz
2mtqYg1qGPVyvrLd9OVsX/VODMhsk2vWbqZMQjRZ6kbpQxCCLnGBl2P8eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCC5lcQ17B/FP8qLOcJfeMYhThhpMB8GA1UdIwQY
MBaAFALQ6IiF70iyDIe3b9hdQubrPXGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDct
OTUzYzY4NTA2ZDVjLzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS81ZjRlYjYtNjAyNi00MDk4LTg4ZDctOTUzYzY4NTA2ZDVj
LzEvQXREb2lJWHZTTElNaDdkdjJGMUM1dXM5Y1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAryX2WMaW
JjZ1cwzT/d2tHbG8jX922bvfMO1p12FpHOp0PVLRIl/YZfnw7BUlvRKETr/jDqtT
EUmkEEXVjJJPtWxvNMwC4c75fkiZi3PPAC+FeRFtz+g9P1dfYQO4uKgs00FtvPKf
Nfx3xS8xbLT/Y+sHbUtNTf/zZygL9AqmehzuFe5wjsnyQp3mNbkQ8Jk1QgqKrj9J
o93XPfq5rtzj45YQHUCdc4VNuwJaKZ02xU9AIygalkpafl7EnrzAHBiiLCCZl6dH
sZmwp8JDm28EEkh4V5KcwJTVKrvcy+J8PmuxuEN8Qv/jvWs15sMIRcjEuoPj/Neo
f4+Dtd86DYo/PQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:12:47 2026 by rpki-client