Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
File: AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft (raw, json)
Hash identifier: BPU0ffTl8SW2QSxhdJf4I1zXxyHAwJq76rLS/gXcUHM=
Subject key identifier: 2B:1D:31:EA:08:99:24:BF:CB:74:E6:08:51:11:26:C8:6E:AE:CC:01
Authority key identifier: 02:D4:F3:39:7E:72:66:FB:FA:82:02:90:B9:75:09:D4:DF:90:78:52
Certificate issuer: /CN=02d4f3397e7266fbfa820290b97509d4df907852
Certificate serial: 01A14D99FAA9C9A53A7CC596150DD1EA17A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
Manifest number: 0126
Signing time: Sun 18 Oct 2026 06:01:39 +0000
Manifest this update: Sun 18 Oct 2026 06:01:39 +0000
Manifest next update: Mon 19 Oct 2026 06:01:39 +0000
Files and hashes: 1: AtTzOX5yZvv6ggKQuXUJ1N-QeFI.crl (hash: Fj9T8OaUmUQuY+SG5nSCaH8JaEfvMAbly3fMJcnIymM=)
2: ttDMX4fafvORC1-lIX4OffPlWsQ.roa (hash: tfjapnp3EYhF6v8f6HxzD+g7Tygri7k5icFUzHa8604=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:99:fa:a9:c9:a5:3a:7c:c5:96:15:0d:d1:ea:17:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d4f3397e7266fbfa820290b97509d4df907852
Validity
Not Before: Oct 18 06:01:39 2026 GMT
Not After : Oct 19 06:01:39 2026 GMT
Subject: CN=2b1d31ea089924bfcb74e608511126c86eaecc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:44:82:74:b1:2a:98:83:7c:56:ba:92:85:
be:e9:be:a3:f4:ae:1a:97:6b:7c:b4:b2:e9:af:91:
4a:92:c7:35:e1:cb:a5:92:c1:77:51:01:19:1a:57:
e6:54:9c:a0:75:7d:24:ac:8d:38:72:c8:9c:42:18:
05:26:ac:4f:39:40:9b:80:82:5b:90:25:09:04:36:
94:00:1d:a1:bd:be:6b:07:a1:0d:58:f9:bf:b4:60:
26:5d:35:f7:f2:3d:84:52:1e:f1:b0:46:42:e3:fb:
ac:04:84:b5:81:52:aa:f4:f0:56:56:41:6a:74:49:
1a:fa:fa:7d:1a:bf:b6:89:9a:65:f2:53:0c:7d:84:
cc:e7:bb:88:7c:2e:90:df:38:b3:7d:88:41:a3:8b:
34:8a:28:df:1c:6a:3b:26:04:50:ff:95:c1:e1:76:
20:cf:e6:ce:d9:b2:a1:d8:31:bd:a7:cf:11:67:8c:
b2:44:ef:66:38:2c:d6:c7:e9:7d:dd:5f:de:34:70:
bc:a0:ca:4f:85:3f:cc:b1:76:24:e9:89:1f:36:5f:
82:ba:fd:9f:75:a9:1c:de:6c:57:ba:ff:e4:1f:dd:
03:a5:cf:c9:00:f0:1f:d1:e6:00:76:b7:0c:56:1d:
b4:4f:20:49:71:de:b4:94:39:61:3e:d9:f1:b8:c8:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1D:31:EA:08:99:24:BF:CB:74:E6:08:51:11:26:C8:6E:AE:CC:01
X509v3 Authority Key Identifier:
keyid:02:D4:F3:39:7E:72:66:FB:FA:82:02:90:B9:75:09:D4:DF:90:78:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:80:db:71:ca:dc:75:d1:51:2c:26:1b:5b:25:cc:46:d2:90:
67:94:34:f9:4c:7f:46:44:25:98:6f:0d:c0:75:44:1e:69:c5:
f9:1d:eb:4f:88:b9:78:7c:cb:e2:41:4e:d5:a1:17:9e:88:5b:
c0:f9:1d:fc:ad:f9:9f:46:cc:67:04:8c:a2:7b:16:67:64:1e:
cc:22:1a:ae:47:32:51:ab:d0:92:d0:19:87:3f:cb:1e:a6:38:
2e:30:52:cc:07:0f:4a:fd:4a:5b:e3:78:2d:95:3b:6f:66:1d:
6e:7a:d1:50:ee:7f:44:b1:23:14:7b:50:89:6c:f1:a3:6a:c7:
9b:49:a7:3b:ae:14:6c:21:31:77:9f:82:fb:93:3b:ec:29:44:
d0:17:ac:eb:07:1f:5b:19:14:59:fb:c5:31:8e:82:6e:71:f2:
98:34:1a:07:9c:22:a5:34:1f:73:c3:93:64:40:5f:cc:7e:b0:
ee:6e:cf:02:39:55:b3:71:77:cb:19:4f:2b:fd:91:22:67:1a:
aa:2b:56:cc:bf:2e:c5:a5:ad:63:a9:79:83:58:8b:3c:42:a2:
60:d9:58:08:bb:8f:c2:7f:31:21:e4:87:5e:33:cf:29:e4:23:
73:96:50:c8:d6:1d:2c:58:0d:00:b6:29:72:5c:97:73:37:3c:
11:a4:07:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 14:40:48 2026 by rpki-client