Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: tpZNlLEiGvatoXMZGTqvE7i0hk0X2kWymr8WFYJ9Y1g=
Subject key identifier: D3:55:55:6D:06:64:E5:C3:D0:00:0D:65:6F:C7:24:F7:C6:79:2C:0B
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 019D38662E1E2A90C7D778AA7779C00FB407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 15AB
Signing time: Sun 29 Mar 2026 07:01:53 +0000
Manifest this update: Sun 29 Mar 2026 07:01:53 +0000
Manifest next update: Mon 30 Mar 2026 07:01:53 +0000
Files and hashes: 1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: zaY3Pcn2SvQmaiBi2Y+f57qLIGRcGOiAf6wFjWEqN3o=)
2: MUqliOvEVeKb9JtEVUP0RYf4gIk.roa (hash: TMpOjL13MKdbstHzqTRKhkXl6TlyI0oj7OgB4SFPTCM=)
3: hmKoDxRn434vXEK-hPdsbe6_RKc.roa (hash: w7LrvFCs4q8tWPgfM7SEvaMXxSu+sAvyt4DZnLap2XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2e:1e:2a:90:c7:d7:78:aa:77:79:c0:0f:b4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Mar 29 07:01:53 2026 GMT
Not After : Mar 30 07:01:53 2026 GMT
Subject: CN=d355556d0664e5c3d0000d656fc724f7c6792c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:e6:72:b4:97:2d:44:b4:da:b2:df:5d:15:
c4:e9:aa:93:ac:c3:ff:a6:e8:8e:19:eb:c7:a9:b1:
3e:25:20:4a:32:53:17:16:15:7e:7e:8a:91:49:1e:
34:62:07:78:5f:03:83:7a:21:29:47:14:1a:b2:ab:
56:37:88:35:aa:f9:94:5a:69:a5:11:85:bf:8a:d9:
3d:09:9c:54:bd:4d:e0:14:87:79:a2:b0:7c:1f:18:
a6:1f:bd:5f:7d:51:06:52:3e:18:b7:70:73:20:61:
57:84:25:03:60:3c:5f:b2:10:aa:b6:b0:b0:36:a4:
a1:40:ed:d4:c3:6b:ee:50:5a:4c:2d:0b:85:d0:7c:
e4:cc:a2:06:39:4a:48:98:50:1b:23:16:f5:e2:e0:
72:32:fe:a3:1b:05:8b:e0:db:a0:65:b1:0e:20:29:
73:5e:ea:1a:76:9d:6c:e5:3b:f4:91:4e:21:10:ca:
b7:09:1b:44:9c:c8:05:6b:0b:fc:a8:95:7f:53:5f:
b0:8a:7c:f1:b8:8f:8b:3e:20:05:69:7f:dc:3e:77:
a3:0b:fc:bd:1e:cb:9b:76:6b:61:ef:67:c7:f8:ae:
76:27:07:e9:03:04:06:12:a4:68:43:51:82:f6:c5:
fa:6f:0a:55:6a:eb:68:0e:dd:ac:dc:51:62:ef:ef:
87:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:55:55:6D:06:64:E5:C3:D0:00:0D:65:6F:C7:24:F7:C6:79:2C:0B
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ef:97:cb:c0:6e:a6:9b:79:42:5f:c0:b5:5d:d9:c4:2f:bf:
e1:a9:c2:7b:d3:d3:0d:82:30:98:1d:a4:e8:ee:dc:41:a0:4c:
d0:6e:b6:79:12:80:79:d4:d3:4c:6c:46:e7:3d:b2:8d:8e:44:
76:0c:81:ba:0d:c1:0f:2a:9e:a1:b3:06:a9:22:f3:d0:87:92:
60:e3:b0:df:d7:56:59:08:80:9c:48:9b:8f:0e:6b:3e:85:fd:
c5:fb:c6:bf:69:1a:01:05:5b:3e:cb:2b:d1:dd:3d:37:f3:53:
6b:5f:eb:7a:09:1a:74:f1:d5:b8:4a:7c:de:f0:f0:59:18:37:
7f:53:b4:1a:2b:ec:06:9c:4e:62:52:02:ac:f8:74:98:29:cc:
31:71:c1:46:d9:39:cb:89:cb:6c:8f:bf:b9:19:12:d1:57:48:
64:ab:e8:05:5e:70:54:86:dc:35:51:76:5c:8b:6f:6c:6a:78:
c8:f2:af:46:c5:50:67:90:0b:ca:1b:4b:66:59:1f:b9:fc:02:
77:69:e4:41:9f:0d:7c:e5:5b:8d:a9:ea:b3:d7:e8:57:cb:98:
d1:d2:20:bc:a9:e0:20:b6:1a:10:e5:9e:e8:e9:d6:f1:64:64:
7f:29:7f:b8:f9:a7:9a:d4:cb:f4:46:53:99:2e:c4:fe:07:a1:
e9:ca:64:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:24:30 2026 by rpki-client