Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File: AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier: EGjJbYxwO9qH3tKOiO2ik4Iw+nqT/xJ0RUsAP0/Fs14=
Subject key identifier: B4:D2:28:22:E1:FC:8F:69:57:DC:F9:4E:C2:2A:C7:56:10:12:B6:98
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 01A0CB59B2D7C067E47AC510FFA9764ED99A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 23:00:48 +0000
Manifest this update: Tue 22 Sep 2026 23:00:48 +0000
Manifest next update: Wed 23 Sep 2026 23:00:48 +0000
Files and hashes: 1: 1gx51DcX_brbkgLU88J2iqha27o.roa (hash: UvLTx+yZ3enaGwB1TfAt+S7PHTMOfGgqytH9LAHVu28=)
2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: GkoKJOBVJmE9eYoYW9SysjuBMzh/w21XiXW9N99F6mE=)
3: tq8QxlpAQ6tiPZgbTTQLf8KLz9U.roa (hash: 342PBC8TnFXSEefteNXsajXj7RC7MDpoicGyHn4km3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:b2:d7:c0:67:e4:7a:c5:10:ff:a9:76:4e:d9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Sep 22 23:00:48 2026 GMT
Not After : Sep 23 23:00:48 2026 GMT
Subject: CN=b4d22822e1fc8f6957dcf94ec22ac7561012b698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:58:10:1e:a9:d7:aa:5b:d2:ec:b0:23:5f:4b:
58:dc:ec:43:b0:95:ac:e1:0e:13:d2:75:d0:3f:7d:
3e:c2:4a:cf:73:13:f5:2c:8b:bb:09:32:d0:6e:ec:
10:18:22:42:45:f7:26:6b:bd:20:24:8d:0f:13:cd:
5f:c3:4c:bb:cd:50:e3:6c:99:60:68:ef:f9:30:ef:
21:f3:b1:94:4b:c1:6d:79:3a:96:42:24:6c:84:55:
87:2e:f8:24:a5:95:40:04:cc:9f:69:7f:33:ff:2f:
10:2c:ef:bb:a7:54:06:c0:ab:01:08:e4:0d:7c:a1:
b7:f0:c3:1f:38:d6:5b:e8:d7:7b:84:f6:16:62:88:
1a:c9:de:f9:a4:c7:65:84:7e:56:6a:8c:82:04:fc:
50:29:73:8d:9a:95:50:0b:b5:fd:f2:81:ef:28:fb:
23:76:a8:e7:00:47:6d:ef:bd:bb:99:1c:bc:60:91:
b5:92:9f:c4:d8:37:19:fe:69:7c:25:88:9c:2f:25:
3b:60:7e:e7:df:74:6c:30:29:d9:93:c8:d9:24:f0:
72:72:4e:90:d6:c4:d3:5a:e9:a4:e9:54:e4:7e:23:
ce:73:0b:76:68:a2:9d:fc:e7:01:da:02:74:ac:b7:
7c:f1:26:30:8b:83:ea:45:77:c2:e1:a6:a6:27:91:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D2:28:22:E1:FC:8F:69:57:DC:F9:4E:C2:2A:C7:56:10:12:B6:98
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:96:10:f2:ee:25:e9:8f:b5:d6:ae:03:6f:d3:43:c6:11:d6:
ff:db:4c:4e:80:02:81:ba:36:ec:92:b0:08:f3:67:d2:ad:54:
44:70:24:ce:f4:b4:7d:bc:ab:41:e9:4f:f6:be:56:95:17:92:
c6:25:87:a0:e8:18:e9:74:22:d2:59:9b:50:61:7e:84:23:fa:
ac:91:5c:08:c0:fb:48:f0:96:90:04:39:83:ac:41:f3:fe:28:
52:10:76:7d:71:0f:a9:12:87:0d:0f:49:bc:16:3e:09:77:e6:
7f:d2:3c:63:4b:3a:00:6e:83:b2:24:41:c0:62:be:ba:07:17:
a8:dc:58:db:d3:d8:09:92:c3:46:28:56:e7:51:fb:58:7b:3d:
12:b2:70:87:5a:ae:01:e4:27:ce:d4:07:14:c1:19:c1:e1:25:
c3:53:da:d2:c8:82:03:b9:18:f6:05:ec:d5:2c:a8:7a:22:ea:
bb:9a:03:f0:98:2a:58:f6:33:4d:45:6b:4f:6c:80:a8:b7:3e:
62:1b:43:3b:3e:f5:4f:40:46:08:c5:de:b6:63:f0:fc:f4:3c:
64:d7:ef:8d:7f:23:c4:14:6a:1a:f9:47:54:6b:02:24:a2:50:
b7:8a:7a:ed:34:c7:9e:c8:35:df:e8:03:e6:ac:ba:e6:66:6f:
c2:62:a4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:34:16 2026 by rpki-client