Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: EmNCsBMjuZ6BQk6G9axv2mQmFpV2N1Teqftpc07QTYs=
Subject key identifier: 61:5B:FC:46:ED:0F:97:A4:4F:32:25:82:B6:0D:06:11:C2:34:54:83
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 019E1C474609F0C0E2A8B704D28AD3805553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 1621
Signing time: Tue 12 May 2026 13:01:33 +0000
Manifest this update: Tue 12 May 2026 13:01:33 +0000
Manifest next update: Wed 13 May 2026 13:01:33 +0000
Files and hashes: 1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: ZGbNM6e+GmDyYSWKKXEbPUVpXbv53HiCYZApofmCoKg=)
2: MUqliOvEVeKb9JtEVUP0RYf4gIk.roa (hash: TMpOjL13MKdbstHzqTRKhkXl6TlyI0oj7OgB4SFPTCM=)
3: hmKoDxRn434vXEK-hPdsbe6_RKc.roa (hash: w7LrvFCs4q8tWPgfM7SEvaMXxSu+sAvyt4DZnLap2XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:46:09:f0:c0:e2:a8:b7:04:d2:8a:d3:80:55:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: May 12 13:01:33 2026 GMT
Not After : May 13 13:01:33 2026 GMT
Subject: CN=615bfc46ed0f97a44f322582b60d0611c2345483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:23:d6:66:eb:30:74:f9:24:b4:be:65:b8:
91:d9:c3:e2:53:43:74:5a:46:cc:f9:21:2c:da:ed:
db:9c:eb:0c:dc:a0:a1:aa:2d:eb:9f:3a:b8:ba:a1:
bc:bd:13:4b:6d:ce:c7:95:a5:aa:23:e3:ee:e9:18:
a7:74:0d:a1:eb:7c:39:b3:d1:cb:18:eb:c5:aa:70:
ff:6a:ff:1c:00:84:52:d0:d8:0a:35:24:d5:a8:4d:
ee:b6:c8:77:69:ee:a0:09:1c:c1:f7:ef:05:a0:39:
87:b2:a2:b5:13:60:62:17:59:66:17:14:2b:d0:23:
7b:63:7b:28:ff:b3:ce:a0:f0:ac:f1:72:99:93:4c:
9c:ee:19:b0:8f:19:f1:8f:0e:7c:3e:64:8d:84:a9:
34:2b:1f:2d:d1:b6:23:dd:bc:a6:06:de:0e:47:24:
15:25:80:3a:6f:50:b6:17:fa:72:45:8b:6c:14:f8:
9b:b8:6b:82:e6:2a:b2:cd:8e:65:c9:3a:d2:35:bf:
e4:da:df:81:dc:fd:dc:25:6b:2e:4f:73:ea:0d:cc:
ba:57:2b:8d:44:3b:4a:26:21:23:eb:a9:d3:d9:39:
66:38:f6:a4:f1:e9:01:8f:03:a8:73:0a:ca:d6:96:
18:bd:81:bd:1d:b8:28:4d:2e:b7:9d:a0:f0:05:ac:
e2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5B:FC:46:ED:0F:97:A4:4F:32:25:82:B6:0D:06:11:C2:34:54:83
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1e:38:f5:c3:ed:de:ef:fc:e3:4e:4b:e6:5c:38:9f:3d:8a:
b9:f3:91:9b:74:48:b6:6e:c3:48:33:50:5f:b5:68:87:7c:e0:
d4:24:be:ec:72:2d:9e:66:d7:40:ff:23:3c:ad:95:c8:15:d4:
5c:0b:e1:a3:80:86:9d:2d:58:22:ce:40:2d:9f:4e:38:c3:5b:
7a:a8:42:4f:d2:b7:24:d8:6d:00:8c:3b:9b:9f:1f:ca:aa:b4:
8c:fd:b4:31:39:1e:95:63:12:16:b3:77:94:51:68:f5:16:50:
f4:b2:37:d4:ee:9d:c0:f6:5c:5a:02:53:f0:da:c8:73:38:27:
28:cb:06:64:d9:34:db:88:54:ba:0c:1c:d9:33:8a:45:58:91:
21:c5:d3:25:db:99:ab:05:7a:67:27:6e:1b:dc:08:de:e3:81:
51:9a:7b:fd:25:e0:4e:c0:13:a7:3d:38:af:5b:a3:cd:40:43:
30:dd:e1:11:f5:65:93:db:e1:db:b5:91:91:f1:54:a0:44:b2:
3d:e8:56:a5:51:9b:b0:0a:a9:03:1b:a9:f5:26:e6:7f:b2:d7:
28:ef:85:7c:67:de:59:66:cb:2b:dd:e4:f9:67:41:34:47:28:
fd:ba:f7:96:1b:f1:6e:f8:21:b1:c6:e8:7e:99:43:2e:e6:b4:
77:03:bf:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:02 2026 by rpki-client