Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
File: AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft (raw, json)
Hash identifier: RuFfEAjpup+Es0pCBkth68V9NPZDk+w7u2WSfqPLwag=
Subject key identifier: 64:E4:FD:6E:93:A4:A8:0D:C6:67:FA:4C:CB:EB:5E:27:4A:FD:F7:F1
Authority key identifier: 02:D4:F3:39:7E:72:66:FB:FA:82:02:90:B9:75:09:D4:DF:90:78:52
Certificate issuer: /CN=02d4f3397e7266fbfa820290b97509d4df907852
Certificate serial: 019F916D09ED17CFF13D94BB33BBEE96FBEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:09 +0000
Manifest this update: Fri 24 Jul 2026 00:01:09 +0000
Manifest next update: Sat 25 Jul 2026 00:01:09 +0000
Files and hashes: 1: AtTzOX5yZvv6ggKQuXUJ1N-QeFI.crl (hash: sbXO+HTiOd6hOu6ddn97J+zzR4EXNas+OCZDLqqXZ/M=)
2: ttDMX4fafvORC1-lIX4OffPlWsQ.roa (hash: tfjapnp3EYhF6v8f6HxzD+g7Tygri7k5icFUzHa8604=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:09:ed:17:cf:f1:3d:94:bb:33:bb:ee:96:fb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d4f3397e7266fbfa820290b97509d4df907852
Validity
Not Before: Jul 24 00:01:09 2026 GMT
Not After : Jul 25 00:01:09 2026 GMT
Subject: CN=64e4fd6e93a4a80dc667fa4ccbeb5e274afdf7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:64:4e:f2:09:df:e2:07:6f:38:8a:34:da:5b:
25:2a:84:bb:f2:ca:f7:33:16:5b:be:eb:a4:3e:4f:
c8:ba:bd:b5:7c:cf:02:07:8a:bb:81:86:ce:e1:06:
a6:9b:3d:80:ec:0a:dc:6f:42:9d:b4:49:9a:45:0a:
84:a9:29:20:e5:9d:65:43:08:c5:61:f9:57:7b:b1:
a5:cb:6b:c5:26:f2:0f:99:7c:dd:b9:cf:4a:bf:cb:
5a:f2:58:7f:35:2a:b1:ca:37:20:76:ee:63:3a:08:
e2:ed:eb:d1:29:6f:26:ff:3c:df:50:b5:92:e2:a3:
f6:bd:84:96:6e:0e:2e:b8:78:4f:77:2b:5e:7f:b6:
52:b2:dc:01:b9:bc:af:20:68:c6:00:73:e2:cb:b7:
8c:0f:7b:61:06:3f:80:98:77:55:6a:8e:aa:4d:28:
05:0e:5e:95:4f:a5:a2:e5:3c:24:91:42:fd:bb:79:
49:a6:de:bd:f9:c9:3d:7d:bb:2f:3f:16:8a:16:d2:
da:dd:76:ac:7a:c8:35:2c:d4:bf:ae:ab:22:52:85:
7f:48:14:e2:ca:87:0a:20:fb:96:3d:b8:00:56:ac:
b1:3e:ed:06:9e:b8:bc:86:77:42:db:01:61:4d:d0:
19:81:7a:e4:2d:74:31:e5:6d:76:e9:f7:e2:db:7c:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E4:FD:6E:93:A4:A8:0D:C6:67:FA:4C:CB:EB:5E:27:4A:FD:F7:F1
X509v3 Authority Key Identifier:
keyid:02:D4:F3:39:7E:72:66:FB:FA:82:02:90:B9:75:09:D4:DF:90:78:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c4:b6:51:e3:ab:64:c3:b0:d1:5f:e3:a8:ea:50:36:44:cc:
72:a0:1d:21:42:f0:70:6c:d7:72:20:67:35:a3:df:cb:b9:5e:
d9:04:b0:e9:a0:30:29:7b:f8:45:42:28:cb:06:18:53:1b:7e:
82:b6:8a:5d:6f:4b:a0:1c:df:56:3a:26:7f:d8:7d:dd:0a:f5:
0c:e7:10:ba:1b:61:53:e8:7e:f6:f5:85:e3:90:ca:97:4d:eb:
92:0e:09:46:db:a4:bc:d0:f9:46:77:ee:ce:0a:50:08:b0:c2:
c0:e4:ff:9b:9a:e4:89:07:0d:da:a2:10:f8:41:0b:3b:1e:0c:
0e:ea:bd:73:31:8c:11:49:b0:56:3c:01:8e:fa:3b:ad:50:ac:
e1:6c:e3:76:d1:16:f3:6b:cb:71:cb:66:9f:6a:67:ce:95:7c:
dd:5e:15:48:b2:46:38:af:9e:e9:35:28:3e:4d:5b:d4:e0:84:
47:dd:7c:f4:df:ff:26:80:e8:c0:b1:d9:de:1e:ba:80:37:0d:
4d:01:e6:77:2b:eb:e6:5d:9b:6d:da:8f:07:4d:27:21:55:f5:
64:46:bb:af:02:d8:ed:de:54:8f:1d:79:f7:24:65:4c:bc:68:
6c:a3:02:d9:e4:a2:e2:31:d9:d1:3b:d7:40:37:5c:2f:cc:68:
38:7b:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:49 2026 by rpki-client