Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
File: ATTJf7sEhrXGbRPKsaiymEYFIds.mft (raw, json)
Hash identifier: HWjIG7gHwfqBJwykzLIQ7uzfxz1fHnnbA2IOOg8rTkc=
Subject key identifier: CD:43:5E:0C:78:52:CA:B4:E1:EC:6D:C5:7C:D3:ED:36:9F:75:A9:4A
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Certificate issuer: /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial: 01A0CD10C7FC2575859D05E841CF9036B071
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
Manifest number: 0B9E
Signing time: Wed 23 Sep 2026 07:00:24 +0000
Manifest this update: Wed 23 Sep 2026 07:00:24 +0000
Manifest next update: Thu 24 Sep 2026 07:00:24 +0000
Files and hashes: 1: 3De_e63suCP9ycJDJ_Ka1whD8Jw.roa (hash: ZUi0zvIhEAW3gS3GnJUwYhmDjTJ4T7kn28VhumIi1RA=)
2: ATTJf7sEhrXGbRPKsaiymEYFIds.crl (hash: vHY9OGRWSlz57YjV2laxyjfNhatrvxI/wecs9SK7Xkc=)
3: sdvnk99Tq3EIIIB_nAVJu6v2-eg.roa (hash: rrdg+q8HbhUAgKysFVF0heLuEhPWLu99pYl5fvdmoyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:c7:fc:25:75:85:9d:05:e8:41:cf:90:36:b0:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Validity
Not Before: Sep 23 07:00:24 2026 GMT
Not After : Sep 24 07:00:24 2026 GMT
Subject: CN=cd435e0c7852cab4e1ec6dc57cd3ed369f75a94a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:5f:3e:43:83:d4:e0:38:c9:d4:2f:86:9e:
37:f7:e3:a7:12:62:ba:79:5e:ac:31:dc:c1:92:13:
23:ee:bd:21:63:d7:af:46:ee:8d:a2:81:45:d1:7c:
fd:12:97:5a:05:98:66:d4:39:95:40:1e:30:fc:05:
f2:1e:5a:34:74:a1:bd:e8:21:1e:96:ed:9c:65:e3:
4f:00:a8:d3:d8:70:8e:ac:62:45:00:42:ce:bb:08:
5a:8e:0b:21:34:7c:22:07:57:99:29:7a:e4:eb:6e:
99:41:ae:fa:18:d9:99:f1:c0:39:ed:47:3d:cf:6c:
5c:b7:6b:6c:39:d9:e3:98:f3:c0:68:0c:8d:73:d5:
88:25:bd:0b:15:91:8b:33:c5:85:c4:d1:4c:ab:e5:
27:fc:8a:7d:21:fb:22:78:e9:e5:1b:06:3c:7d:20:
7e:5b:3f:89:23:c0:72:01:46:f7:d1:53:3c:ac:82:
74:12:2a:91:88:13:3a:f4:56:d2:30:1f:25:10:9a:
60:44:2b:a2:b9:8c:49:32:3a:35:68:51:18:2a:11:
1f:89:4e:69:8b:ae:d7:29:be:a4:5a:0c:08:72:2b:
d8:94:b2:e3:62:f0:ba:db:99:48:b0:bf:30:73:f3:
4b:f7:6d:77:c1:e4:23:bc:fc:19:74:45:8b:28:91:
a8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:43:5E:0C:78:52:CA:B4:E1:EC:6D:C5:7C:D3:ED:36:9F:75:A9:4A
X509v3 Authority Key Identifier:
keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:49:8b:7d:86:05:4c:dc:26:a8:34:c8:66:a7:3e:b5:ab:ed:
6d:7e:5f:47:94:eb:2e:22:eb:96:61:94:aa:1e:fc:cb:a7:6c:
ae:3b:dd:ae:1c:0c:4d:0a:d9:51:4e:21:51:5e:8d:09:4a:ff:
5d:21:40:d7:72:f1:f5:78:39:14:bb:2f:25:e7:37:29:15:1c:
56:e5:d4:d8:81:bc:c1:7a:69:f5:35:f1:46:ee:00:f4:ab:ba:
ff:c0:87:a3:49:64:d3:87:7f:99:9b:2b:d9:a0:82:40:e2:75:
95:14:a1:a7:65:2b:8f:fb:e5:68:cf:82:d5:6d:6f:c6:b8:9b:
a3:48:ed:0f:d7:01:3b:c0:81:e7:8d:07:66:ae:20:7f:bf:d4:
b4:95:af:a1:1e:a7:33:be:00:90:18:90:a8:9c:a4:ad:66:04:
88:a5:28:bf:2b:35:b4:e8:cc:6d:11:bd:e8:51:ad:68:1b:72:
b2:4d:60:c4:14:40:5f:d7:39:05:7f:4c:a4:cd:71:05:6c:8f:
67:7f:32:e3:3d:c0:9d:55:4b:86:d3:d8:80:f3:5c:27:7f:14:
16:70:95:67:ae:63:09:b8:e5:c3:9f:6e:a4:f5:1e:e8:a6:63:
6a:c5:9e:76:db:b4:30:8b:e3:48:ee:80:11:48:f2:af:ff:3f:
d2:48:5b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:02:45 2026 by rpki-client