Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: p4sOy4yJHnY7OH9EmU7//TH7QTHEUBy9SljcBE/cckQ=
Subject key identifier: 7E:27:A6:71:EC:98:83:6D:85:19:DF:0C:08:CA:45:56:59:FD:64:6E
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 019F90FF0E9AD3FDBFD30418542DAC5DE4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 16E2
Signing time: Thu 23 Jul 2026 22:01:02 +0000
Manifest this update: Thu 23 Jul 2026 22:01:02 +0000
Manifest next update: Fri 24 Jul 2026 22:01:02 +0000
Files and hashes: 1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: /Kia0wGvjW4z3KLbEMe+S0ov2CD4BNlPcgv6317acNc=)
2: MUqliOvEVeKb9JtEVUP0RYf4gIk.roa (hash: TMpOjL13MKdbstHzqTRKhkXl6TlyI0oj7OgB4SFPTCM=)
3: hmKoDxRn434vXEK-hPdsbe6_RKc.roa (hash: w7LrvFCs4q8tWPgfM7SEvaMXxSu+sAvyt4DZnLap2XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:0e:9a:d3:fd:bf:d3:04:18:54:2d:ac:5d:e4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Jul 23 22:01:02 2026 GMT
Not After : Jul 24 22:01:02 2026 GMT
Subject: CN=7e27a671ec98836d8519df0c08ca455659fd646e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:3f:d7:67:b7:56:7e:08:c5:02:d4:82:be:
b3:ab:60:98:63:3b:ac:b2:9a:c5:b3:87:e3:9e:1f:
32:a4:d5:96:e6:af:f9:e1:7e:df:4e:24:42:14:52:
55:7b:49:91:d0:30:55:67:05:d9:d8:d3:36:8a:9b:
e4:3d:70:66:94:69:85:bc:b9:5a:5b:26:2a:e2:09:
28:62:aa:6b:5a:a4:f3:51:2e:5f:b4:70:35:fa:3b:
25:a7:24:15:a8:81:9a:fa:e6:d5:45:fb:79:ea:8c:
6e:f0:c0:3d:89:06:75:39:ae:24:34:96:f3:22:48:
93:9c:b1:e5:00:57:28:7d:95:f4:0c:dc:3f:fa:b1:
c0:bf:8c:5c:0c:eb:ff:82:74:59:e1:8d:cd:68:1f:
f5:5d:c0:54:a4:31:8d:36:59:f3:2d:2a:ad:65:b3:
6d:10:79:3d:9b:f9:70:a6:c4:5d:7e:de:9b:bd:5e:
53:f7:2f:b5:92:db:6e:26:97:63:d2:67:92:86:82:
83:2e:a8:ce:9a:8c:77:21:94:58:81:dc:3e:7b:35:
33:7a:10:f8:81:51:96:89:f8:d0:78:26:8c:93:a3:
14:d9:af:8b:c8:2a:f7:0f:70:57:05:c1:57:94:1d:
61:ad:6c:19:b8:31:3b:4a:ff:27:9d:90:78:0e:c2:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:27:A6:71:EC:98:83:6D:85:19:DF:0C:08:CA:45:56:59:FD:64:6E
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d2:2e:b8:0b:e0:8f:ef:6f:ce:b1:f3:9b:0b:cf:c9:5e:6c:
9b:c6:b5:14:54:2e:0e:6e:6a:42:e5:94:8a:98:eb:5d:0c:c8:
be:42:db:02:0b:93:9d:31:b3:53:7f:cd:0a:e6:6c:63:bf:95:
c1:4c:17:47:96:22:ac:41:bd:fc:8c:22:c9:66:2f:7c:13:ef:
e4:a5:26:30:60:0c:9b:5c:28:66:3e:a4:8b:2c:7d:ec:d8:6f:
4c:a3:9e:0a:f0:00:ad:c3:d4:0b:23:1e:c9:cb:e0:27:b1:d2:
fc:45:74:4e:78:58:be:1e:0f:d5:23:03:b9:60:f3:01:a7:d0:
53:99:33:63:af:08:6a:fd:dc:c3:13:88:8a:d4:63:cc:e1:b7:
bf:cd:8c:e4:04:01:57:5b:0e:76:15:90:13:9a:d4:3a:8f:75:
85:a8:15:9d:0b:9d:35:97:df:fd:77:95:81:c0:2a:50:6e:d0:
d8:0f:1f:ea:50:82:2b:ce:3d:73:6d:ea:89:78:ac:ea:50:f3:
c2:35:18:ca:99:ce:ab:44:d1:03:f0:f3:e9:fd:51:5e:69:c1:
8a:65:92:f5:56:7e:0b:f6:b8:c0:47:f0:09:d6:1c:3e:ff:d3:
da:b1:aa:2a:0b:10:76:14:8f:d6:87:ff:0f:f7:1f:67:2f:e6:
f2:ad:2d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:21 2026 by rpki-client