Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: UJA/elMsWHbVFtMIdG9kTCzu9XCftOLuo3LQChxCNMo=
Subject key identifier: 69:53:B0:1A:59:96:40:A9:83:C6:70:06:88:E3:4D:37:C7:24:07:3E
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 019D28F28A599E6AC5F3F0C3084A8D470B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 15A3
Signing time: Thu 26 Mar 2026 07:01:16 +0000
Manifest this update: Thu 26 Mar 2026 07:01:16 +0000
Manifest next update: Fri 27 Mar 2026 07:01:16 +0000
Files and hashes: 1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: 4kGFhzcnAjT1qMmDPwLi+U0Ysg1IMDtngnbJh7kxhAo=)
2: MUqliOvEVeKb9JtEVUP0RYf4gIk.roa (hash: TMpOjL13MKdbstHzqTRKhkXl6TlyI0oj7OgB4SFPTCM=)
3: hmKoDxRn434vXEK-hPdsbe6_RKc.roa (hash: w7LrvFCs4q8tWPgfM7SEvaMXxSu+sAvyt4DZnLap2XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:8a:59:9e:6a:c5:f3:f0:c3:08:4a:8d:47:0b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Mar 26 07:01:16 2026 GMT
Not After : Mar 27 07:01:16 2026 GMT
Subject: CN=6953b01a599640a983c6700688e34d37c724073e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:00:11:c2:7b:64:cb:11:5c:bd:65:33:a8:c1:
0f:57:bf:f9:9c:5f:de:13:21:29:15:c1:35:02:92:
1c:42:25:f7:30:e8:86:40:9e:f6:75:e6:75:c7:f9:
42:c8:c9:2c:c9:b6:07:71:86:39:25:f0:f9:cc:72:
7d:9c:ce:83:fe:33:5e:9c:44:7e:15:fe:84:a1:96:
69:14:ac:9c:e9:36:d9:4a:c3:66:4a:41:7c:f6:c0:
7d:76:93:a4:dd:47:a7:ec:e3:4d:11:a1:1b:62:fd:
3c:c0:7c:a1:59:7f:a9:66:b5:0a:41:0f:3d:82:02:
52:74:63:98:a8:2b:bf:46:4b:d1:e8:3b:dc:f3:a5:
28:b5:b8:b6:d2:49:26:d9:a7:29:1c:34:34:4e:4e:
db:a4:11:df:ad:ef:fc:ae:d1:48:dd:c4:9c:b7:df:
fa:a7:ec:ff:9d:f9:b0:56:d8:e5:27:5b:7c:ea:dd:
53:90:6a:95:ba:ed:4d:4e:aa:2e:ea:b8:d2:ab:b2:
83:1e:a1:6b:f4:d5:96:2a:df:05:5e:6d:2d:b5:95:
8a:9d:ef:7f:06:62:bd:4a:42:c3:07:6b:64:60:ad:
1e:48:40:41:c0:6d:2a:dd:b5:a5:61:a7:98:d0:4e:
db:e0:44:7b:b7:30:d9:79:41:35:af:41:b2:9a:b1:
de:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:53:B0:1A:59:96:40:A9:83:C6:70:06:88:E3:4D:37:C7:24:07:3E
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:71:35:eb:38:bf:72:45:66:fd:3c:9d:28:83:dc:34:31:d8:
2c:b0:66:01:ce:b4:be:90:fa:b9:69:28:8a:85:ef:3e:99:54:
18:32:2d:e7:99:2e:3c:5f:d0:5f:d4:aa:10:7f:46:d3:01:6a:
21:a8:b4:e8:c0:f2:83:e3:12:68:20:5d:a7:c4:32:00:aa:af:
91:cb:27:a9:21:e2:cd:2d:7b:56:9c:62:1c:6c:3e:43:42:93:
9e:5d:5b:38:ba:0d:14:bf:d9:32:ab:79:15:ea:0c:eb:0c:7d:
f3:64:04:f8:fd:4b:73:bd:6d:b6:8b:f1:67:3c:9d:1a:62:9c:
a8:08:88:d8:0c:14:34:5e:b1:8e:ea:b5:97:e2:ab:ad:31:8c:
e4:04:4e:88:2c:6d:f5:d9:4f:96:4d:20:5e:76:98:fc:53:92:
ee:c9:6f:bb:4a:6d:dc:50:5e:42:b0:02:a5:32:f0:55:97:b4:
23:2c:68:da:91:1b:91:17:70:64:6a:02:af:04:e6:54:8f:b2:
21:c7:19:e3:e1:0c:cd:2d:36:32:78:6a:0d:1c:b7:c8:96:dd:
38:14:a8:01:36:ca:7d:e0:89:e1:14:cb:40:fa:f7:b1:7f:5c:
45:2f:e3:1a:8b:40:ab:60:82:39:00:d1:40:8b:79:d8:77:8d:
c7:cf:0c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:16:01 2026 by rpki-client