Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File: AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier: QMZh6in65FYKF6JgD346Gu7yQOHk1yDB/6NQwHYTDnM=
Subject key identifier: CB:5E:67:AD:E5:03:97:A4:78:1A:5F:43:2B:BA:AD:F0:E6:85:15:23
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 019D2884542B4AC92337A2EBCE830E1C577E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 05:00:54 +0000
Manifest this update: Thu 26 Mar 2026 05:00:54 +0000
Manifest next update: Fri 27 Mar 2026 05:00:54 +0000
Files and hashes: 1: 1gx51DcX_brbkgLU88J2iqha27o.roa (hash: UvLTx+yZ3enaGwB1TfAt+S7PHTMOfGgqytH9LAHVu28=)
2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: d7JSHd5u8neZ2vY8dA6dNQAGDzPjDFkkXFm/nfAWdHs=)
3: tq8QxlpAQ6tiPZgbTTQLf8KLz9U.roa (hash: 342PBC8TnFXSEefteNXsajXj7RC7MDpoicGyHn4km3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:54:2b:4a:c9:23:37:a2:eb:ce:83:0e:1c:57:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Mar 26 05:00:54 2026 GMT
Not After : Mar 27 05:00:54 2026 GMT
Subject: CN=cb5e67ade50397a4781a5f432bbaadf0e6851523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a3:84:21:6c:f2:fc:33:42:fb:36:01:a7:28:
7a:31:15:c2:b0:6c:7a:3b:0a:d2:5c:67:7f:19:02:
14:57:06:e6:a9:43:6b:72:9d:86:58:54:da:e7:93:
5d:4e:e6:4b:d7:82:b0:a3:ff:18:1b:09:18:d5:16:
f4:ba:31:4a:f5:12:31:8e:d8:b9:86:bc:f1:61:de:
02:95:29:7c:d6:47:ce:90:c6:1c:48:f9:91:be:f8:
21:85:5a:21:92:17:4c:62:87:e4:af:a1:96:6e:c5:
7d:8b:77:07:3d:f5:99:9f:87:9d:bb:3b:e0:9a:7e:
3d:21:0c:bc:eb:7e:ac:d9:e4:0e:e3:1f:4a:5f:48:
98:ae:44:98:55:59:c2:26:99:73:de:b2:51:33:3c:
77:73:6b:4a:6a:2f:7f:30:9e:21:9c:26:64:8d:8c:
2c:aa:19:e3:01:43:6e:4c:10:aa:97:a9:a8:c2:85:
05:12:ca:c2:12:1b:9c:09:04:5c:34:5b:76:40:77:
81:d9:8b:3a:53:5a:c4:d0:00:db:60:49:63:87:d0:
54:d3:27:db:4f:d5:3d:4a:bc:82:11:78:35:30:46:
b1:d3:96:5e:ea:2d:b7:8d:c4:fc:40:2a:11:01:21:
66:34:34:66:49:8c:09:d9:6a:08:10:6c:43:7f:0e:
f6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5E:67:AD:E5:03:97:A4:78:1A:5F:43:2B:BA:AD:F0:E6:85:15:23
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:39:4a:9e:3d:49:ba:b6:e7:ab:74:3d:82:d8:04:5a:bc:56:
fe:bd:5e:5e:0b:1e:6a:e9:d8:54:8d:0e:ef:26:9e:52:c7:62:
fc:6a:af:e8:37:10:8c:16:31:8d:1c:c4:fc:8d:58:52:9c:bb:
34:57:92:ff:17:ea:1e:81:f8:af:0c:97:0f:fa:35:7e:d9:ca:
4c:41:b4:e0:a9:1d:44:0c:3c:cc:33:56:d7:cf:39:a7:36:4f:
b8:d7:51:da:27:9c:5e:58:bb:88:dc:6a:5a:60:31:3c:98:e1:
97:68:5a:cf:00:9d:6a:df:44:56:d2:d7:d9:e6:86:a2:d5:f8:
6c:0f:ff:d7:0f:e5:69:6a:07:f8:db:8e:b2:ca:85:b0:6f:f4:
94:58:16:6e:59:ed:e2:c8:50:6a:c4:69:d8:06:ad:22:ea:ef:
9c:7e:81:d1:80:bb:6f:4a:f4:20:44:e9:56:01:a6:ec:94:ee:
1b:6c:73:32:b7:1e:1d:17:eb:e9:e8:bd:ff:b5:9d:9a:2b:cc:
39:37:ad:54:01:7a:f9:fb:b5:39:d9:e8:a6:f0:03:49:6c:76:
b5:79:59:e5:0a:b6:8e:2e:5f:6f:6b:bd:6f:c2:75:1f:ab:35:
e1:9d:1d:af:88:e6:46:47:09:3c:1e:81:d7:0f:62:20:81:b5:
0a:83:c8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:07 2026 by rpki-client