Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
File: AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft (raw, json)
Hash identifier: GVsbUurD5tAZxts9jO37PIpTGk3VD7dov4Eky+I8mrg=
Subject key identifier: DE:00:14:CF:B5:83:14:77:D3:38:C5:05:32:75:AF:9D:EB:E9:FB:95
Authority key identifier: 02:D4:F3:39:7E:72:66:FB:FA:82:02:90:B9:75:09:D4:DF:90:78:52
Certificate issuer: /CN=02d4f3397e7266fbfa820290b97509d4df907852
Certificate serial: 01A0CA47A816B86B2C444356B128CA3A8F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:01:28 +0000
Manifest this update: Tue 22 Sep 2026 18:01:28 +0000
Manifest next update: Wed 23 Sep 2026 18:01:28 +0000
Files and hashes: 1: AtTzOX5yZvv6ggKQuXUJ1N-QeFI.crl (hash: g18bk9IReMrisx8QZ9olMdy+CVR7sBsY14l23cAYG9c=)
2: ttDMX4fafvORC1-lIX4OffPlWsQ.roa (hash: tfjapnp3EYhF6v8f6HxzD+g7Tygri7k5icFUzHa8604=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:a8:16:b8:6b:2c:44:43:56:b1:28:ca:3a:8f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d4f3397e7266fbfa820290b97509d4df907852
Validity
Not Before: Sep 22 18:01:28 2026 GMT
Not After : Sep 23 18:01:28 2026 GMT
Subject: CN=de0014cfb5831477d338c5053275af9debe9fb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:b4:14:ae:75:e0:d3:cf:3d:4c:de:84:e2:
d4:c4:9e:92:5d:7d:b9:6d:b8:60:dc:3a:91:aa:35:
be:83:ad:a2:2c:04:06:bc:d5:75:34:1d:ec:dd:db:
2f:dd:73:1e:66:e9:8f:e3:3c:92:86:4b:39:93:83:
be:a9:5f:5a:b8:d9:43:03:53:e3:43:06:69:05:24:
6c:20:bd:17:72:70:c8:6b:a9:ce:a7:e3:09:45:38:
50:d3:e6:52:a5:fa:7a:7a:42:3f:a8:e6:8e:7e:da:
ee:00:b3:e9:71:0d:f4:cb:46:ce:1f:b3:2a:47:f3:
7b:8d:d7:7e:1e:e3:7e:a8:91:d4:59:ef:d9:e1:61:
e2:d5:7f:c7:03:e4:bd:fd:bf:59:b7:87:2b:52:7e:
62:00:f3:ce:9e:da:c2:19:ff:a7:58:79:14:fd:b5:
9a:b2:d4:83:a2:60:74:34:c7:c5:a3:7c:2d:9c:d7:
fa:14:e1:50:da:fc:6a:ce:57:74:f1:2d:4b:a8:7a:
09:7c:f7:7c:cc:c2:3b:21:a0:b6:57:80:a9:e8:cb:
ee:f2:0b:4d:40:11:22:4a:85:04:e9:ef:2b:5f:7c:
13:4e:5e:af:a8:99:dc:1c:bd:3d:b0:b5:f7:fe:39:
23:65:1d:76:02:41:42:c3:cd:70:84:2a:f8:02:85:
5b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:00:14:CF:B5:83:14:77:D3:38:C5:05:32:75:AF:9D:EB:E9:FB:95
X509v3 Authority Key Identifier:
keyid:02:D4:F3:39:7E:72:66:FB:FA:82:02:90:B9:75:09:D4:DF:90:78:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/AtTzOX5yZvv6ggKQuXUJ1N-QeFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:03:4c:fa:0e:d6:a4:51:03:72:26:13:b8:90:c6:20:c9:ae:
5e:bc:3f:6a:6b:90:1d:ea:bc:4e:8e:58:7f:5b:2f:28:63:18:
22:fb:69:91:a5:92:7e:3a:b1:b6:90:89:31:9d:85:91:15:37:
27:9d:b8:cf:a4:1d:a0:53:0d:b0:2d:a1:9c:82:1e:c3:32:e8:
55:58:95:fa:c9:74:aa:b4:98:37:63:c5:43:77:15:ac:34:3c:
6b:64:05:c2:06:cc:97:96:fb:3a:ea:a1:f1:c1:e6:c6:0f:97:
94:ee:3e:8f:72:8f:1b:41:2d:43:ce:ae:a9:0e:43:4c:df:a6:
01:d2:53:4c:9c:fd:94:ec:06:4f:79:9e:c3:dc:06:04:e4:20:
e0:6e:58:ae:71:3e:f1:8e:2f:29:4f:d7:76:cb:eb:c4:99:9e:
ec:49:5d:d1:ed:f8:aa:f8:d1:ca:ed:0e:21:d4:49:0e:00:38:
47:10:de:8d:56:dd:14:e2:80:b8:03:53:f9:42:55:ac:44:27:
39:9e:9a:ae:f4:73:49:61:3b:de:06:0f:a0:5e:65:fb:8a:0b:
3b:f3:67:e9:be:1c:55:14:22:81:2e:51:fa:4d:16:59:7a:3c:
dc:d1:f2:8f:d8:90:c7:a7:4f:bc:78:06:a5:af:35:51:04:5f:
21:bb:dc:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKR6gWuGssRENWsSjKOo8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZDRmMzM5N2U3MjY2ZmJmYTgyMDI5MGI5NzUwOWQ0ZGY5
MDc4NTIwHhcNMjYwOTIyMTgwMTI4WhcNMjYwOTIzMTgwMTI4WjAzMTEwLwYDVQQD
EyhkZTAwMTRjZmI1ODMxNDc3ZDMzOGM1MDUzMjc1YWY5ZGViZTlmYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArra0FK514NPPPUzehOLUxJ6SXX25
bbhg3DqRqjW+g62iLAQGvNV1NB3s3dsv3XMeZumP4zyShks5k4O+qV9auNlDA1Pj
QwZpBSRsIL0XcnDIa6nOp+MJRThQ0+ZSpfp6ekI/qOaOftruALPpcQ30y0bOH7Mq
R/N7jdd+HuN+qJHUWe/Z4WHi1X/HA+S9/b9Zt4crUn5iAPPOntrCGf+nWHkU/bWa
stSDomB0NMfFo3wtnNf6FOFQ2vxqzld08S1LqHoJfPd8zMI7IaC2V4Cp6Mvu8gtN
QBEiSoUE6e8rX3wTTl6vqJncHL09sLX3/jkjZR12AkFCw81whCr4AoVbJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN4AFM+1gxR30zjFBTJ1r53r6fuVMB8GA1UdIwQY
MBaAFALU8zl+cmb7+oICkLl1CdTfkHhSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXRUek9YNXladnY2Z2dLUXVYVUoxTi1RZUZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ODkzM2EtNzU4MS00OTc5LTkxMjEt
MGUxYTY4Yzc1NjNiLzEvQXRUek9YNXladnY2Z2dLUXVYVUoxTi1RZUZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85ODkzM2EtNzU4MS00OTc5LTkxMjEtMGUxYTY4Yzc1NjNi
LzEvQXRUek9YNXladnY2Z2dLUXVYVUoxTi1RZUZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwNM+g7W
pFEDciYTuJDGIMmuXrw/amuQHeq8To5Yf1svKGMYIvtpkaWSfjqxtpCJMZ2FkRU3
J524z6QdoFMNsC2hnIIewzLoVViV+sl0qrSYN2PFQ3cVrDQ8a2QFwgbMl5b7Ouqh
8cHmxg+XlO4+j3KPG0EtQ86uqQ5DTN+mAdJTTJz9lOwGT3mew9wGBOQg4G5YrnE+
8Y4vKU/XdsvrxJme7Eld0e34qvjRyu0OIdRJDgA4RxDejVbdFOKAuANT+UJVrEQn
OZ6arvRzSWE73gYPoF5l+4oLO/Nn6b4cVRQigS5R+k0WWXo83NHyj9iQx6dPvHgG
pa81UQRfIbvcyg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:48:56 2026 by rpki-client