Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
File: ATTJf7sEhrXGbRPKsaiymEYFIds.mft (raw, json)
Hash identifier: R5lMZqMWc8ZtBcfG/xXfPZLIaW/JkSR1rIGcibFNrzY=
Subject key identifier: B9:66:A0:44:29:F6:34:21:44:E4:4F:78:9A:B8:D5:BE:91:D0:8F:BE
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Certificate issuer: /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial: 019F905A68663FCD5C8BB91DBEBD9DD72904
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
Manifest number: 0AFA
Signing time: Thu 23 Jul 2026 19:01:11 +0000
Manifest this update: Thu 23 Jul 2026 19:01:11 +0000
Manifest next update: Fri 24 Jul 2026 19:01:11 +0000
Files and hashes: 1: 3De_e63suCP9ycJDJ_Ka1whD8Jw.roa (hash: ZUi0zvIhEAW3gS3GnJUwYhmDjTJ4T7kn28VhumIi1RA=)
2: ATTJf7sEhrXGbRPKsaiymEYFIds.crl (hash: QTJedTd+YV4e3L2JC5Jn/4P6fGZKCnYcVG8aYm0p/rE=)
3: sdvnk99Tq3EIIIB_nAVJu6v2-eg.roa (hash: rrdg+q8HbhUAgKysFVF0heLuEhPWLu99pYl5fvdmoyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:68:66:3f:cd:5c:8b:b9:1d:be:bd:9d:d7:29:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Validity
Not Before: Jul 23 19:01:11 2026 GMT
Not After : Jul 24 19:01:11 2026 GMT
Subject: CN=b966a04429f6342144e44f789ab8d5be91d08fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:55:5f:b5:03:17:16:a2:a0:17:8f:55:7c:
5f:99:cf:7e:60:5e:7c:86:37:2c:bb:d5:3f:b6:ed:
24:45:68:46:22:86:61:77:cf:a8:bc:5c:c4:a2:03:
60:0b:56:7c:c2:83:a6:1f:46:3f:f8:08:8e:c3:df:
c6:f1:cb:31:b5:03:35:19:d2:1e:f9:d8:f4:23:2d:
14:da:da:94:82:65:cd:3b:0e:be:06:41:2d:eb:45:
ae:95:90:48:df:2e:2e:4f:4a:12:4f:5a:da:b6:9a:
f6:12:4f:51:cd:eb:99:8f:d3:44:45:71:bd:eb:40:
e8:21:2c:fe:b6:ae:92:65:04:57:1f:74:28:a5:18:
dc:75:a3:ee:ad:b1:ad:0c:ea:e9:be:a6:35:40:d9:
2a:6e:62:84:30:5c:04:e9:ff:a0:30:26:bd:ca:55:
99:cd:c9:48:b1:d2:c3:d7:e0:2f:93:ad:8d:f1:c7:
69:73:f3:88:e1:56:e1:5b:b2:eb:55:28:de:0d:6d:
47:12:1f:9a:ab:09:ad:a2:ca:10:7c:c7:1f:28:6a:
07:44:11:bc:0a:1c:ce:13:41:52:dd:12:05:3c:e5:
5b:c4:4b:94:ed:6f:10:21:7c:4c:f0:b8:cb:33:a1:
e9:3e:60:b3:b6:72:54:7b:34:5c:56:69:fa:5d:23:
4b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:66:A0:44:29:F6:34:21:44:E4:4F:78:9A:B8:D5:BE:91:D0:8F:BE
X509v3 Authority Key Identifier:
keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:9e:ea:69:fa:38:d9:b0:cb:a8:aa:4e:03:42:a9:b2:9a:ff:
d2:0d:0b:cb:71:aa:89:d8:90:20:88:20:19:b7:ff:d2:18:e8:
0e:9d:bf:da:2c:f0:2e:af:1a:85:09:31:2b:b7:7c:13:5d:f0:
45:c2:7e:74:dd:d3:c3:97:ab:a9:ed:50:16:56:80:61:6c:99:
0a:2b:44:85:33:3d:69:6c:c4:d0:45:56:a8:38:0d:2c:01:5e:
f4:ba:4e:4e:fd:05:8f:56:6d:56:fb:a6:f5:e3:45:dd:62:57:
fd:a4:2f:1a:32:30:bd:f1:d7:91:68:fd:7f:15:cd:a0:46:f7:
69:17:ff:ec:ab:d9:d3:74:1f:26:3f:8f:c6:ab:7f:a3:37:db:
0d:e5:6f:74:dc:f4:f9:cb:bb:f0:5c:b9:93:c7:17:b0:88:d9:
6a:d0:02:9f:13:7e:53:0a:e9:d4:cb:3d:1d:5d:a2:32:b5:dd:
89:93:03:06:7f:30:98:ad:5c:8b:be:91:ba:f7:03:3a:0a:19:
04:b3:88:ef:df:bb:d7:49:4d:b1:5c:f6:2d:1b:85:64:d4:47:
7f:36:03:2a:3b:ce:24:56:0f:2e:57:83:f5:58:76:08:50:03:
aa:b3:b4:cc:25:f3:73:0c:c6:79:a1:6f:70:4e:da:9a:bd:1f:
54:ba:45:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWmhmP81ci7kdvr2d1ykEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxMzRjOTdmYmIwNDg2YjVjNjZkMTNjYWIxYThiMjk4NDYw
NTIxZGIwHhcNMjYwNzIzMTkwMTExWhcNMjYwNzI0MTkwMTExWjAzMTEwLwYDVQQD
EyhiOTY2YTA0NDI5ZjYzNDIxNDRlNDRmNzg5YWI4ZDViZTkxZDA4ZmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu19VX7UDFxaioBePVXxfmc9+YF58
hjcsu9U/tu0kRWhGIoZhd8+ovFzEogNgC1Z8woOmH0Y/+AiOw9/G8csxtQM1GdIe
+dj0Iy0U2tqUgmXNOw6+BkEt60WulZBI3y4uT0oST1ratpr2Ek9RzeuZj9NERXG9
60DoISz+tq6SZQRXH3QopRjcdaPurbGtDOrpvqY1QNkqbmKEMFwE6f+gMCa9ylWZ
zclIsdLD1+Avk62N8cdpc/OI4VbhW7LrVSjeDW1HEh+aqwmtosoQfMcfKGoHRBG8
ChzOE0FS3RIFPOVbxEuU7W8QIXxM8LjLM6HpPmCztnJUezRcVmn6XSNL5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLlmoEQp9jQhRORPeJq41b6R0I++MB8GA1UdIwQY
MBaAFAE0yX+7BIa1xm0TyrGosphGBSHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8zMGUyYTktMDFmOC00MTI1LTlmZGIt
NThmMjg3NWNhMGJmLzEvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8zMGUyYTktMDFmOC00MTI1LTlmZGItNThmMjg3NWNhMGJm
LzEvQVRUSmY3c0VoclhHYlJQS3NhaXltRVlGSWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKp7qafo4
2bDLqKpOA0Kpspr/0g0Ly3GqidiQIIggGbf/0hjoDp2/2izwLq8ahQkxK7d8E13w
RcJ+dN3Tw5erqe1QFlaAYWyZCitEhTM9aWzE0EVWqDgNLAFe9LpOTv0Fj1ZtVvum
9eNF3WJX/aQvGjIwvfHXkWj9fxXNoEb3aRf/7KvZ03QfJj+Pxqt/ozfbDeVvdNz0
+cu78Fy5k8cXsIjZatACnxN+Uwrp1Ms9HV2iMrXdiZMDBn8wmK1ci76RuvcDOgoZ
BLOI79+710lNsVz2LRuFZNRHfzYDKjvOJFYPLleD9Vh2CFADqrO0zCXzcwzGeaFv
cE7amr0fVLpFfw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:08:42 2026 by rpki-client