Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: ChGpbNS7LUOURcphDHIH+/x6E6Ng0JCV4N//EgIRoK4=
Subject key identifier: CB:D5:2E:D7:B6:24:CB:05:C1:E0:99:8D:15:82:85:A7:B6:42:DB:46
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 01A13FA7267727BBB59DC9035A6914D05A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 17C1
Signing time: Thu 15 Oct 2026 13:01:21 +0000
Manifest this update: Thu 15 Oct 2026 13:01:21 +0000
Manifest next update: Fri 16 Oct 2026 13:01:21 +0000
Files and hashes: 1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: da6kPC4jnxAWqPbUQgI0JjrWG3l998crdlqmB+IajtY=)
2: MUqliOvEVeKb9JtEVUP0RYf4gIk.roa (hash: TMpOjL13MKdbstHzqTRKhkXl6TlyI0oj7OgB4SFPTCM=)
3: hmKoDxRn434vXEK-hPdsbe6_RKc.roa (hash: w7LrvFCs4q8tWPgfM7SEvaMXxSu+sAvyt4DZnLap2XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:26:77:27:bb:b5:9d:c9:03:5a:69:14:d0:5a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Oct 15 13:01:21 2026 GMT
Not After : Oct 16 13:01:21 2026 GMT
Subject: CN=cbd52ed7b624cb05c1e0998d158285a7b642db46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:81:de:b7:23:99:86:e6:ab:8f:c1:8a:04:76:
01:69:e3:65:b7:8c:c2:e7:d6:95:ac:61:3d:21:a6:
bd:a7:20:e1:a3:8a:af:69:25:26:4d:7e:e5:39:1e:
63:6e:30:e1:ff:2a:96:ac:be:ca:34:c4:d5:16:6c:
76:51:b9:e2:67:c0:92:c8:d2:a1:fc:9e:c8:f9:c8:
69:11:21:c0:30:64:13:b7:de:8e:6d:2d:ea:b2:41:
d2:33:c8:40:9f:de:f8:c8:c4:e0:3b:6c:2d:66:59:
56:01:16:c6:b9:91:db:11:71:c6:78:ca:74:5a:40:
06:52:ad:56:43:ac:c9:df:de:79:7a:19:88:03:92:
1e:aa:04:e8:17:38:5f:3f:6a:51:0b:08:10:57:19:
72:89:f5:53:5b:3a:a2:18:11:98:8e:ba:07:cd:4c:
fc:db:9e:5c:f4:bf:10:dd:bc:7b:62:48:5d:8c:93:
e3:21:ab:ab:15:3a:a2:12:d7:ff:2c:e2:ac:25:64:
7c:0a:37:de:6d:e1:2e:48:fc:75:e5:8e:db:80:db:
eb:68:89:66:9c:3a:b7:6a:34:25:5e:e2:5b:f3:6a:
5f:57:d3:89:0b:3f:69:f7:d8:cb:73:37:57:80:46:
d7:ce:89:23:30:c8:03:59:5b:ba:93:0b:64:99:44:
e0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D5:2E:D7:B6:24:CB:05:C1:E0:99:8D:15:82:85:A7:B6:42:DB:46
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:20:6f:d1:f2:72:90:b5:11:d0:e0:d1:8d:b4:4e:42:0e:aa:
03:9e:f3:50:40:0a:15:67:c9:8c:39:1b:e4:a0:52:1e:57:c6:
4c:74:ef:b9:1b:dd:16:4a:0d:d3:ce:14:03:f5:8c:90:0d:b4:
68:47:5c:b8:97:cb:2b:c4:30:14:7c:07:65:bc:b7:71:3c:cf:
18:39:60:b8:5f:9f:c9:bd:c2:a7:e6:48:29:83:1b:0d:ca:74:
11:e1:bd:bc:84:5c:34:45:19:2c:7b:cf:fb:51:f8:cb:01:77:
ce:83:67:37:fd:ab:3f:e3:89:3b:b7:95:20:c0:9f:33:7f:76:
02:68:e2:26:d8:42:f1:0a:d3:53:a3:65:54:b3:2a:eb:85:c8:
a1:e9:b3:dd:42:98:3b:fe:69:78:fc:6d:b6:8a:86:31:36:b1:
6b:e0:6f:bf:de:50:35:06:cc:f5:e4:34:fa:50:ef:71:3e:0d:
e2:52:83:58:08:25:4b:b3:b7:ea:dd:33:d3:29:80:06:dd:be:
c8:38:05:ce:5f:76:99:a1:4e:56:39:40:6c:7e:19:ed:8e:eb:
87:96:93:f1:0f:c3:45:e0:a2:94:cd:a7:e9:6d:bf:5e:ab:5f:
f5:86:fd:b5:42:95:03:ae:93:9f:37:be:35:ff:9a:1c:a2:10:
52:25:22:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:12 2026 by rpki-client