Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
File: ATTJf7sEhrXGbRPKsaiymEYFIds.mft (raw, json)
Hash identifier: +Mfy1ti6xg25YcJyCrAftJs7Pui7rcRHJop1iaNy2R4=
Subject key identifier: 22:0D:BE:F4:B3:60:C2:F6:C7:47:38:48:B6:10:A8:8C:36:FB:4F:73
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Certificate issuer: /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial: 019E1D909E0FD12F1B7D835D05ADB794AA67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
Manifest number: 0A3A
Signing time: Tue 12 May 2026 19:01:17 +0000
Manifest this update: Tue 12 May 2026 19:01:17 +0000
Manifest next update: Wed 13 May 2026 19:01:17 +0000
Files and hashes: 1: 3De_e63suCP9ycJDJ_Ka1whD8Jw.roa (hash: ZUi0zvIhEAW3gS3GnJUwYhmDjTJ4T7kn28VhumIi1RA=)
2: ATTJf7sEhrXGbRPKsaiymEYFIds.crl (hash: Mi2B+7l0Qp/jBgGTHFvNWL2nePKTgRAsiKNPVjqxHF8=)
3: sdvnk99Tq3EIIIB_nAVJu6v2-eg.roa (hash: rrdg+q8HbhUAgKysFVF0heLuEhPWLu99pYl5fvdmoyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:9e:0f:d1:2f:1b:7d:83:5d:05:ad:b7:94:aa:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Validity
Not Before: May 12 19:01:17 2026 GMT
Not After : May 13 19:01:17 2026 GMT
Subject: CN=220dbef4b360c2f6c7473848b610a88c36fb4f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:5f:cb:7a:05:11:de:0f:9b:16:bd:b4:1b:
57:9c:22:de:08:95:30:76:fc:5c:46:3a:c7:0e:76:
82:e6:09:dc:ea:91:f5:b3:0f:09:42:77:5e:48:15:
de:b3:fc:62:75:47:7a:3c:68:38:93:04:35:39:b1:
ce:ad:ee:81:ae:70:bd:ab:29:2a:d8:6a:32:97:fc:
ae:26:bf:3f:b5:e8:1f:56:d6:1e:22:b1:ef:fe:6b:
21:e5:de:97:08:fc:a0:44:92:9b:6c:f7:dc:25:d2:
56:3a:4e:f4:90:19:8d:d3:c6:13:ce:6f:a2:ef:43:
53:7a:a3:09:e0:b5:c4:52:5c:61:c6:aa:d3:d1:8f:
a7:fd:68:03:24:c7:25:47:c7:81:8b:c6:d1:3a:b8:
9a:0b:ba:03:1d:8d:11:12:32:3e:4b:f5:3d:32:49:
61:c9:92:c3:27:05:50:a2:fb:69:b3:3f:47:ed:71:
81:cd:a5:02:04:fb:35:36:19:ee:91:41:78:09:46:
61:a8:12:bb:8e:2d:c7:21:41:52:49:f2:47:e5:cc:
a0:e9:b3:b6:63:31:d2:a7:ea:6f:c3:83:f0:39:cd:
36:48:08:8a:02:22:7c:2b:00:ee:f6:0c:8a:e9:5d:
51:4b:de:92:1a:81:88:57:33:5f:25:f9:b8:d6:b1:
35:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:0D:BE:F4:B3:60:C2:F6:C7:47:38:48:B6:10:A8:8C:36:FB:4F:73
X509v3 Authority Key Identifier:
keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ff:bf:f3:21:07:53:49:84:c6:8f:1b:80:5a:45:fd:0e:f5:
72:e4:50:6b:96:71:03:98:a2:8e:ac:7e:95:fc:37:10:b8:c8:
a6:89:9f:8c:84:13:0d:62:78:7c:01:dc:6b:25:8e:d7:ad:e1:
bb:4f:25:7f:3f:f3:0d:c6:a6:a3:a4:cc:ee:fb:22:99:33:b8:
66:ac:a8:75:3a:13:81:37:c7:1c:6e:02:b2:4e:24:f6:66:6e:
2c:18:f6:d0:95:cf:2e:cc:5f:c8:6c:da:f0:68:21:11:8b:79:
06:e2:cb:06:c6:bf:4b:47:1c:55:45:1a:46:26:15:2f:9f:f7:
05:78:aa:71:46:1a:d6:51:56:2c:ec:93:97:12:c6:b0:26:d6:
04:4f:70:f7:df:ad:3c:43:58:81:08:b1:56:74:fe:90:4c:3b:
ff:4d:fa:61:2b:db:4a:df:49:8c:f2:8b:09:bd:f3:70:0b:54:
ff:7d:cf:98:2d:f1:cc:d1:16:81:cb:4c:4a:82:7b:fe:54:84:
93:dc:55:35:23:66:36:7e:93:5d:b8:c3:6d:8c:19:98:2a:0f:
a5:56:6c:31:02:a2:a8:a4:17:49:d4:4b:61:c4:7b:0d:26:59:
0a:dc:ab:27:0e:9b:f0:ec:0e:ac:df:9c:6e:54:42:dd:4e:fa:
42:4f:3a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:13 2026 by rpki-client