Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
File: AtDoiIXvSLIMh7dv2F1C5us9cYM.mft (raw, json)
Hash identifier: QdYPO0vWWASZSCgHQRqupzSq+3/LPPRlrbn7bu1TddE=
Subject key identifier: 97:12:B2:22:85:EF:7B:2A:02:E6:95:AC:83:4C:BE:39:F6:3D:0F:EC
Authority key identifier: 02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
Certificate issuer: /CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Certificate serial: 01A0CBC729C0BF8379D90BF47A4A07C126CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
Manifest number: 1785
Signing time: Wed 23 Sep 2026 01:00:22 +0000
Manifest this update: Wed 23 Sep 2026 01:00:22 +0000
Manifest next update: Thu 24 Sep 2026 01:00:22 +0000
Files and hashes: 1: AtDoiIXvSLIMh7dv2F1C5us9cYM.crl (hash: Kt4Kwb5D3Pn9MA/6PIoDQH/Ow/ed3+o2mXht8KD1MMI=)
2: MUqliOvEVeKb9JtEVUP0RYf4gIk.roa (hash: TMpOjL13MKdbstHzqTRKhkXl6TlyI0oj7OgB4SFPTCM=)
3: hmKoDxRn434vXEK-hPdsbe6_RKc.roa (hash: w7LrvFCs4q8tWPgfM7SEvaMXxSu+sAvyt4DZnLap2XQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:29:c0:bf:83:79:d9:0b:f4:7a:4a:07:c1:26:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d0e88885ef48b20c87b76fd85d42e6eb3d7183
Validity
Not Before: Sep 23 01:00:22 2026 GMT
Not After : Sep 24 01:00:22 2026 GMT
Subject: CN=9712b22285ef7b2a02e695ac834cbe39f63d0fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:fd:17:3e:9c:e1:11:59:48:7b:31:8b:8f:
89:13:93:82:fc:32:ad:15:dd:7a:bb:55:d3:97:43:
0b:de:20:60:de:98:33:90:f3:da:6b:fb:1e:f2:69:
63:dd:08:ea:b4:c6:5b:18:11:cc:0f:e3:e0:09:0c:
d2:1c:c4:32:da:c1:61:c8:de:9e:7f:b5:f8:d8:11:
e0:b5:b1:94:c9:4c:d8:d3:ef:40:9c:ee:67:09:b3:
9b:28:44:53:0b:ee:5b:f0:12:30:05:53:59:12:56:
07:1c:3c:30:6d:9b:3a:03:6a:f9:c0:83:32:f3:95:
65:df:be:ea:06:40:70:ca:93:04:7a:8b:99:f9:94:
0e:d3:8f:02:ba:9a:2d:d3:df:97:91:55:4b:46:5d:
20:d3:f4:f4:99:2a:6d:26:51:8a:b4:ab:15:14:c2:
c2:ae:92:2c:98:e9:a3:e1:9e:bf:b3:9d:6d:5e:2c:
83:50:45:b5:80:05:92:7d:4a:75:df:f4:b3:69:44:
6e:e5:eb:c1:ce:49:ea:f4:57:96:47:23:31:f7:97:
d4:84:bb:70:8a:0e:65:07:de:36:78:10:f6:00:91:
5b:1e:f5:a6:d6:85:a5:3a:47:73:84:41:58:56:ff:
0c:78:da:ee:67:d4:e0:e2:e1:03:98:bf:84:04:fa:
a1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:12:B2:22:85:EF:7B:2A:02:E6:95:AC:83:4C:BE:39:F6:3D:0F:EC
X509v3 Authority Key Identifier:
keyid:02:D0:E8:88:85:EF:48:B2:0C:87:B7:6F:D8:5D:42:E6:EB:3D:71:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtDoiIXvSLIMh7dv2F1C5us9cYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f4eb6-6026-4098-88d7-953c68506d5c/1/AtDoiIXvSLIMh7dv2F1C5us9cYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7f:17:e6:f1:79:6e:75:73:57:3e:b6:dc:ed:99:ee:fc:13:
98:66:c1:c8:bf:53:c2:58:f2:10:2c:b9:c2:97:6c:e7:e5:a7:
3e:c8:87:d4:fe:27:61:af:6f:c4:30:6e:d5:cc:90:cb:1c:07:
f4:61:0c:6b:25:4c:94:3b:02:b0:30:13:3e:0d:85:a2:e0:72:
a0:cf:1e:a6:1e:38:4d:6e:bb:96:ca:36:35:ab:48:60:97:75:
db:0b:52:0a:ae:19:55:71:02:5c:32:d0:e0:cd:a4:86:c9:4e:
1d:f3:a4:bd:f7:23:2a:3e:6f:88:3f:41:85:44:8f:cd:3b:29:
98:2c:2d:c2:25:b1:85:a0:88:d0:94:cc:90:42:59:a2:5e:42:
c4:c0:4b:8a:88:2f:1a:10:af:ff:fd:21:1b:f6:27:e5:e2:fb:
8f:cc:ba:bb:e4:06:5e:e3:97:07:a2:f7:92:9d:07:e1:75:b2:
69:a9:62:65:43:72:9c:0f:47:a7:50:6c:2e:75:79:5c:08:81:
7c:5c:35:cb:c5:e8:78:55:50:82:b3:53:fe:e3:99:61:39:40:
32:e8:8e:4c:05:42:59:53:8d:ba:b7:da:ad:f8:20:54:99:13:
d8:1d:b3:41:4e:c5:69:6f:2c:27:6e:14:9e:0c:7f:4d:fd:b2:
2d:3b:1c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:40:36 2026 by rpki-client