Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
File: ATTJf7sEhrXGbRPKsaiymEYFIds.mft (raw, json)
Hash identifier: igqiwzlmedpUd0W79KKZqrzVypmCk6sXNDqjCABMMCo=
Subject key identifier: 8F:9A:A5:BD:92:4B:66:73:34:85:20:85:96:08:29:15:80:74:83:B2
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Certificate issuer: /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial: 019F189E6ECA329EE5ED1AE6451B084C88A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
Manifest number: 0ABC
Signing time: Tue 30 Jun 2026 13:01:03 +0000
Manifest this update: Tue 30 Jun 2026 13:01:03 +0000
Manifest next update: Wed 01 Jul 2026 13:01:03 +0000
Files and hashes: 1: 3De_e63suCP9ycJDJ_Ka1whD8Jw.roa (hash: ZUi0zvIhEAW3gS3GnJUwYhmDjTJ4T7kn28VhumIi1RA=)
2: ATTJf7sEhrXGbRPKsaiymEYFIds.crl (hash: yOeyJzlfVIZfB/5BM/2Taut9PK5BYiuMewJg3Ka5Smo=)
3: sdvnk99Tq3EIIIB_nAVJu6v2-eg.roa (hash: rrdg+q8HbhUAgKysFVF0heLuEhPWLu99pYl5fvdmoyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:6e:ca:32:9e:e5:ed:1a:e6:45:1b:08:4c:88:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Validity
Not Before: Jun 30 13:01:03 2026 GMT
Not After : Jul 1 13:01:03 2026 GMT
Subject: CN=8f9aa5bd924b66733485208596082915807483b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2d:69:f0:8b:b3:29:ce:17:5f:37:7c:41:8f:
72:6c:fb:06:3b:50:54:52:d7:21:74:df:02:4c:9d:
b0:f4:f5:7b:c9:84:8a:3d:2a:04:a6:95:5d:37:f8:
14:31:57:b1:94:17:e8:df:e5:70:40:39:46:08:4a:
42:32:fe:e3:73:5e:f1:f5:63:0c:ca:38:e9:4a:8b:
98:b7:fd:be:5e:e5:d9:7d:6d:7c:3b:08:5b:e5:1a:
33:19:19:14:84:83:fa:61:7c:09:9c:69:91:25:4c:
0b:a6:97:9d:2e:00:1c:d0:40:b5:cb:22:f6:eb:48:
10:8c:46:b8:b9:b5:c1:e6:30:24:0c:61:c4:b8:6b:
e2:d0:44:46:59:7c:fa:e8:d6:4f:d2:62:7e:56:96:
10:c9:bd:3e:d5:ad:e5:19:32:4f:60:f3:34:4f:97:
32:75:2b:1a:47:00:55:f4:21:98:4e:8b:7f:0a:9c:
04:d9:11:f1:41:3f:4c:57:89:7d:01:21:3d:be:cc:
be:60:12:26:3e:a6:68:7c:56:a9:52:a8:08:9d:d6:
27:df:4e:ff:1a:af:72:5a:02:f1:20:45:25:f4:f7:
35:9f:ab:0c:28:1d:73:7e:2b:14:8a:7e:a5:3e:60:
69:4d:f2:0a:9b:a8:fa:e1:16:35:f6:25:31:a0:eb:
c1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9A:A5:BD:92:4B:66:73:34:85:20:85:96:08:29:15:80:74:83:B2
X509v3 Authority Key Identifier:
keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:20:6f:b7:63:c1:53:22:e9:6f:36:fa:61:6e:0e:7e:4b:0b:
f1:07:c6:46:ad:8d:c8:b3:41:8f:af:2e:6e:ff:33:1b:1f:d2:
2a:92:3f:04:20:70:38:8a:6a:d5:fb:66:c0:de:8e:a2:e5:c5:
11:34:44:4a:11:e9:83:95:e9:8e:ee:f6:21:f0:9c:b6:3c:ef:
27:c7:42:e3:a5:ae:7b:b5:e4:1a:00:7d:b9:af:0b:04:78:9f:
ad:02:4d:36:32:09:69:82:dd:1c:3e:01:db:85:93:82:7f:9a:
b3:74:92:88:38:3e:e2:1b:98:71:d1:e9:34:c3:49:e8:dd:a8:
87:af:37:cc:be:a7:49:d1:ca:49:c6:ee:29:ef:0b:77:f4:12:
e9:57:cc:15:66:b9:61:56:b8:61:fc:c3:2f:53:7f:94:a3:db:
ce:2b:ff:02:58:2f:7e:47:0f:4f:be:46:f1:61:54:d5:90:43:
21:57:c9:f5:c5:ac:c0:5f:9c:d3:d5:da:06:3e:d7:a8:14:b5:
bc:b2:e7:17:e1:f9:8a:6c:47:26:59:b1:54:9f:7d:0e:ab:be:
b9:a6:51:c7:2b:43:ec:12:a1:d8:bc:db:25:4d:52:67:48:c2:
b9:3d:3c:17:4c:1d:2c:2f:01:6b:b3:24:a3:30:48:d3:a4:2b:
70:1b:25:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:10:51 2026 by rpki-client