Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File: AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier: dcfgQ2FqAxNekLSErRus56V6CcModY9yef1P1acbGWA=
Subject key identifier: 57:AA:D9:A2:BC:8A:AA:0F:42:A3:5A:EC:29:4D:D6:A8:30:A0:DD:6C
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 019E1BD92C8BD4938823878CC73DC578C086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 11:01:17 +0000
Manifest this update: Tue 12 May 2026 11:01:17 +0000
Manifest next update: Wed 13 May 2026 11:01:17 +0000
Files and hashes: 1: 1gx51DcX_brbkgLU88J2iqha27o.roa (hash: UvLTx+yZ3enaGwB1TfAt+S7PHTMOfGgqytH9LAHVu28=)
2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: /cH2DSdgOw9kFtdF30ld2YxcW0aTdZew66lCuw3eapQ=)
3: tq8QxlpAQ6tiPZgbTTQLf8KLz9U.roa (hash: 342PBC8TnFXSEefteNXsajXj7RC7MDpoicGyHn4km3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d9:2c:8b:d4:93:88:23:87:8c:c7:3d:c5:78:c0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: May 12 11:01:17 2026 GMT
Not After : May 13 11:01:17 2026 GMT
Subject: CN=57aad9a2bc8aaa0f42a35aec294dd6a830a0dd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:20:a1:80:14:88:8b:53:51:d9:fc:97:f1:
2b:34:e9:31:f2:7f:8e:00:11:ad:3d:60:e2:6c:82:
f6:0a:1b:12:69:78:0d:31:9e:3f:25:bf:05:d2:3a:
9e:3e:a9:c9:d6:03:ab:33:0b:66:c5:31:fe:1a:89:
fd:aa:7e:7a:0c:29:54:e7:17:47:6a:f7:7e:f7:37:
1b:43:39:80:64:38:57:09:53:1d:2a:c1:18:4b:8e:
f3:ee:77:f8:23:e3:63:ff:bc:35:b3:37:3c:ad:35:
f6:58:0c:66:12:4c:8c:e0:33:17:8e:db:ed:a4:5b:
f3:b2:31:20:98:13:8c:70:2e:e2:65:c1:fd:41:67:
32:cc:ca:f9:7b:55:31:c4:56:4f:c5:12:51:ad:44:
df:3f:0a:2d:6d:92:7b:1d:e0:0a:89:5f:9b:87:f2:
c8:76:05:d0:37:be:9f:4d:a1:d0:54:25:c2:fa:ab:
9b:ba:b2:91:f6:d4:06:6c:aa:d8:46:ca:05:15:c6:
56:b1:13:ad:b1:7b:fc:9e:7c:30:eb:30:ce:92:79:
87:e1:8d:fb:fb:50:68:07:49:7c:92:24:ef:f6:8e:
52:ba:b9:25:3e:5e:37:04:c2:e0:dd:74:24:ec:bf:
4e:0d:25:d7:d1:71:a9:0f:af:95:7f:79:72:0f:19:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AA:D9:A2:BC:8A:AA:0F:42:A3:5A:EC:29:4D:D6:A8:30:A0:DD:6C
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:77:d0:95:21:14:08:ee:6f:08:e2:c9:4b:ec:18:3b:ad:a6:
94:3d:e8:33:19:d4:36:3c:c7:03:ed:7f:1f:57:a5:29:c9:69:
f7:16:21:98:d2:63:4b:9e:e9:16:bb:36:ff:d4:00:91:75:fb:
25:cb:dd:13:cc:03:6c:37:ee:f4:ca:db:a3:5d:37:a7:16:40:
b9:e6:af:fe:39:3d:75:9a:bf:24:ab:cd:2a:04:a0:8a:9a:8c:
ff:19:3e:5c:4b:40:6a:83:d8:c6:92:6d:8d:09:ea:66:79:38:
91:52:53:56:1d:20:eb:b9:0a:f6:b3:35:db:60:bd:1d:a0:58:
b4:17:5d:56:83:18:29:54:a4:03:7d:05:12:a1:c9:92:ec:af:
7a:11:24:65:86:53:8a:b3:cf:54:a7:42:f2:18:dd:d0:a3:32:
85:a5:89:83:1b:b1:17:e1:01:e4:29:71:bd:d5:cd:e7:11:f2:
94:97:be:46:11:27:be:fe:ea:0e:c2:12:06:42:cf:54:57:97:
b2:36:95:8e:5d:72:04:20:08:78:0b:03:85:09:02:56:17:c5:
0f:ab:8f:72:91:36:05:f7:b1:a6:0d:d2:dd:d6:79:57:4b:94:
41:36:ec:09:1e:a6:16:44:a5:12:4c:aa:51:8e:f5:a1:07:49:
04:9a:0b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:04 2026 by rpki-client