
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
File: AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft (raw, json)
Hash identifier: 3JrVyqgwvlnhcPLz3EQpdO9Ll+mbtP+g9UtZhjOkl+Y=
Subject key identifier: 78:E5:FC:B3:08:74:7E:99:73:D3:7A:96:58:1B:2B:07:D4:4A:32:9B
Authority key identifier: 02:D4:F3:39:7E:72:66:FB:FA:82:02:90:B9:75:09:D4:DF:90:78:52
Certificate issuer: /CN=02d4f3397e7266fbfa820290b97509d4df907852
Certificate serial: 01A0016F58E36C9B18D13BB4E7EE81812FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
Manifest number: 7A
Signing time: Fri 14 Aug 2026 18:01:09 +0000
Manifest this update: Fri 14 Aug 2026 18:01:09 +0000
Manifest next update: Sat 15 Aug 2026 18:01:09 +0000
Files and hashes: 1: AtTzOX5yZvv6ggKQuXUJ1N-QeFI.crl (hash: IhxMDof6r7vZFhOklcwEOkjWjGUGEv9zqO8oaw9mf/Q=)
2: ttDMX4fafvORC1-lIX4OffPlWsQ.roa (hash: tfjapnp3EYhF6v8f6HxzD+g7Tygri7k5icFUzHa8604=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:58:e3:6c:9b:18:d1:3b:b4:e7:ee:81:81:2f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d4f3397e7266fbfa820290b97509d4df907852
Validity
Not Before: Aug 14 18:01:09 2026 GMT
Not After : Aug 15 18:01:09 2026 GMT
Subject: CN=78e5fcb308747e9973d37a96581b2b07d44a329b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2f:a8:1a:2d:6f:e0:a2:8d:e3:bc:a5:2e:bb:
fc:19:1b:b4:a9:78:83:7a:0e:08:22:07:e6:65:14:
87:dc:b1:62:bc:ad:59:5b:c2:5e:eb:06:2a:0f:0f:
9b:2b:1e:b6:09:ff:f9:87:66:2f:b9:d4:31:88:5c:
9c:e5:3f:47:b6:10:b8:5f:9f:18:a6:a5:34:0a:e7:
9d:a0:f2:20:82:30:71:bf:39:df:9e:2b:42:99:9f:
9a:7f:eb:8a:2d:0e:e1:6c:28:be:be:d8:af:9f:08:
7d:ea:d6:f3:cb:1f:ad:09:db:8a:aa:2a:f8:32:88:
0a:59:b5:45:c0:95:1a:3b:98:4c:79:a4:26:cd:93:
fb:29:c5:53:3f:b5:70:88:6f:5d:61:4c:06:a9:f7:
59:28:29:ef:e3:c5:3d:3c:36:1c:f4:1e:40:68:2f:
79:9d:7a:e7:38:b5:79:36:e4:f9:4c:be:8e:04:b0:
93:0d:41:42:31:2b:df:b4:58:fb:2a:63:38:10:de:
12:f7:27:ee:c4:66:c1:53:ed:dd:98:8a:b0:8a:c2:
49:53:85:dd:00:7b:e4:9e:26:6d:dc:a6:90:1a:31:
95:0a:b5:1d:03:99:20:25:07:74:5a:7a:5a:71:11:
26:94:cf:95:05:f0:34:40:0a:6b:3e:ab:e3:92:c0:
22:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E5:FC:B3:08:74:7E:99:73:D3:7A:96:58:1B:2B:07:D4:4A:32:9B
X509v3 Authority Key Identifier:
keyid:02:D4:F3:39:7E:72:66:FB:FA:82:02:90:B9:75:09:D4:DF:90:78:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d0:84:ad:69:6e:19:9a:cb:c1:38:d6:58:4b:79:26:27:ab:
75:1d:65:34:e5:37:dc:3a:19:4f:77:57:1c:ad:74:7e:97:15:
9c:36:3d:7f:a5:76:57:2a:cf:80:f0:c7:d2:ac:f2:44:08:e9:
1c:00:ff:0e:9e:20:3c:b5:25:d5:63:84:4e:40:d1:ac:eb:24:
41:3f:c6:c5:a8:63:51:35:5d:e3:0f:d4:68:03:22:a5:0e:19:
f1:f9:a0:df:33:46:89:b2:cc:27:ae:40:13:de:8a:e3:d3:49:
9b:35:09:ed:05:b8:8b:a3:be:a1:aa:58:b0:d4:e4:d5:76:56:
0f:65:42:75:8a:bf:eb:3c:5d:69:81:5a:a1:b3:5a:27:1e:c6:
ec:e4:4b:0a:20:d6:bb:ed:16:69:10:bf:5d:8c:19:1d:1a:06:
6d:84:6f:c8:a4:fa:84:86:db:2f:79:42:23:f9:40:0b:cc:2f:
ac:e5:9d:91:a7:40:50:7b:68:7b:5b:d5:42:6d:d3:13:72:50:
32:6d:49:e9:1c:b9:d0:f4:61:96:c5:27:16:4f:00:e6:a2:48:
37:47:20:24:71:77:83:e5:57:d0:e5:d5:76:e7:d5:25:f7:c8:
1b:df:5e:6c:95:08:d3:3d:f0:dc:e5:51:c8:e7:d0:ad:f6:70:
81:ba:8f:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb1jjbJsY0Tu05+6BgS/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZDRmMzM5N2U3MjY2ZmJmYTgyMDI5MGI5NzUwOWQ0ZGY5
MDc4NTIwHhcNMjYwODE0MTgwMTA5WhcNMjYwODE1MTgwMTA5WjAzMTEwLwYDVQQD
Eyg3OGU1ZmNiMzA4NzQ3ZTk5NzNkMzdhOTY1ODFiMmIwN2Q0NGEzMjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC+oGi1v4KKN47ylLrv8GRu0qXiD
eg4IIgfmZRSH3LFivK1ZW8Je6wYqDw+bKx62Cf/5h2YvudQxiFyc5T9HthC4X58Y
pqU0CuedoPIggjBxvznfnitCmZ+af+uKLQ7hbCi+vtivnwh96tbzyx+tCduKqir4
MogKWbVFwJUaO5hMeaQmzZP7KcVTP7VwiG9dYUwGqfdZKCnv48U9PDYc9B5AaC95
nXrnOLV5NuT5TL6OBLCTDUFCMSvftFj7KmM4EN4S9yfuxGbBU+3dmIqwisJJU4Xd
AHvkniZt3KaQGjGVCrUdA5kgJQd0WnpacREmlM+VBfA0QAprPqvjksAilQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjl/LMIdH6Zc9N6llgbKwfUSjKbMB8GA1UdIwQY
MBaAFALU8zl+cmb7+oICkLl1CdTfkHhSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXRUek9YNXladnY2Z2dLUXVYVUoxTi1RZUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ODkzM2EtNzU4MS00OTc5LTkxMjEt
MGUxYTY4Yzc1NjNiLzEvQXRUek9YNXladnY2Z2dLUXVYVUoxTi1RZUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85ODkzM2EtNzU4MS00OTc5LTkxMjEtMGUxYTY4Yzc1NjNi
LzEvQXRUek9YNXladnY2Z2dLUXVYVUoxTi1RZUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj9CErWlu
GZrLwTjWWEt5JierdR1lNOU33DoZT3dXHK10fpcVnDY9f6V2VyrPgPDH0qzyRAjp
HAD/Dp4gPLUl1WOETkDRrOskQT/GxahjUTVd4w/UaAMipQ4Z8fmg3zNGibLMJ65A
E96K49NJmzUJ7QW4i6O+oapYsNTk1XZWD2VCdYq/6zxdaYFaobNaJx7G7ORLCiDW
u+0WaRC/XYwZHRoGbYRvyKT6hIbbL3lCI/lAC8wvrOWdkadAUHtoe1vVQm3TE3JQ
Mm1J6Ry50PRhlsUnFk8A5qJIN0cgJHF3g+VX0OXVdufVJffIG99ebJUI0z3w3OVR
yOfQrfZwgbqPrg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:20:41 2026 by rpki-client