
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File: AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier: BTjYax0owh1Fdw8oE7u03lzes28KdlN8sjiG2Ex3dJo=
Subject key identifier: 07:0F:32:DE:A6:F1:4C:4D:5B:EB:63:A0:6F:28:CF:F7:FB:0D:1F:4E
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 019F90909A0F26E1A7EAB573FCA02E7F1FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 20:00:23 +0000
Manifest this update: Thu 23 Jul 2026 20:00:23 +0000
Manifest next update: Fri 24 Jul 2026 20:00:23 +0000
Files and hashes: 1: 1gx51DcX_brbkgLU88J2iqha27o.roa (hash: UvLTx+yZ3enaGwB1TfAt+S7PHTMOfGgqytH9LAHVu28=)
2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: YsNZpHkQoOigu/y93qetyDHQu1xjF209SZj0UUTZleU=)
3: tq8QxlpAQ6tiPZgbTTQLf8KLz9U.roa (hash: 342PBC8TnFXSEefteNXsajXj7RC7MDpoicGyHn4km3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:9a:0f:26:e1:a7:ea:b5:73:fc:a0:2e:7f:1f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Jul 23 20:00:23 2026 GMT
Not After : Jul 24 20:00:23 2026 GMT
Subject: CN=070f32dea6f14c4d5beb63a06f28cff7fb0d1f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:64:6e:7f:a9:98:14:cd:b8:b0:87:90:69:
b9:1a:ce:f9:2d:e4:78:7a:92:43:3d:ff:ad:00:70:
5e:1c:05:07:7c:d7:b4:b7:47:5f:cd:b1:e7:a8:cb:
b7:02:47:30:77:80:ea:58:37:b6:c8:4c:59:c9:ea:
b7:77:fc:87:11:90:fc:10:2f:14:c7:64:d1:64:90:
a3:24:67:e9:59:eb:80:30:7e:7b:ce:1f:40:93:eb:
55:0f:3c:9e:f9:cf:3d:64:17:d1:ed:eb:7d:cd:26:
c2:f8:60:41:df:59:c8:c2:de:92:dd:f1:8d:15:c9:
30:82:7c:85:19:11:1c:c2:22:7e:56:7a:f3:cc:9a:
17:2b:dd:91:a9:4f:7d:20:3c:68:f1:87:7d:e4:a9:
0c:bf:6f:c5:d0:3f:0b:dc:8d:cd:a4:0f:b6:3a:8c:
a1:5b:59:fc:bb:01:3f:8c:b3:9e:c9:75:71:c5:e5:
a6:52:b6:21:cb:8a:6a:8e:db:60:c9:bb:78:67:77:
44:15:b1:37:d3:b4:3b:e6:44:99:62:90:8d:1f:a6:
58:70:de:0d:66:2c:ff:0c:f0:37:73:23:21:2d:34:
49:0c:77:ba:e7:00:b4:3d:92:aa:ed:a7:66:77:43:
ba:c6:67:91:8a:57:ed:13:3f:67:07:73:01:1d:46:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0F:32:DE:A6:F1:4C:4D:5B:EB:63:A0:6F:28:CF:F7:FB:0D:1F:4E
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b7:a1:48:3d:0a:bd:6e:2b:e6:da:71:5f:c3:fe:5b:82:2a:
99:99:3d:1d:f2:e0:72:73:31:a6:e8:c8:3a:74:71:ac:0a:26:
3b:a0:7f:26:c2:eb:c2:3f:b7:03:24:af:62:19:2d:80:a8:8a:
38:d6:07:2b:ed:94:8e:ff:8d:95:31:82:8e:7c:3b:98:b8:e6:
82:a6:1b:07:a4:ef:32:8a:2a:0f:45:ca:76:76:82:39:90:d7:
6c:58:10:78:e3:7d:47:f7:d2:5f:ea:42:87:d4:f1:14:92:09:
bf:b7:66:d5:b4:a9:3c:e6:19:b5:ec:cc:9b:77:05:e8:10:41:
61:f6:ff:8a:34:71:79:ee:c0:0e:53:0c:07:f0:18:63:38:2d:
49:e3:f8:18:ce:88:d9:6d:29:60:12:93:93:d2:4c:3b:20:3a:
23:af:4c:d3:e4:36:6c:fc:f1:91:9a:9b:8a:43:09:c4:f6:fa:
9e:66:e5:16:83:d9:97:9f:92:48:86:f5:02:e4:2c:14:07:1d:
59:98:4a:0b:21:a0:08:b4:9b:d9:3a:19:79:94:d3:ff:9f:89:
6b:9e:a3:c1:e2:4b:71:5a:a2:aa:e3:1a:61:6b:d3:1c:e1:5d:
8a:f2:90:ec:1d:63:20:61:fe:81:f6:2e:a6:a2:81:a1:75:0f:
47:c3:6d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:15 2026 by rpki-client