Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
File: At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json)
Hash identifier: KMt21gEZj/Xvy7S9Xntwovxf4AJ6Na8F4qEyuvVCJlA=
Subject key identifier: 11:74:4C:95:07:F8:64:7B:E4:1D:85:A2:A4:8C:10:C7:E3:B0:22:C6
Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
Certificate issuer: /CN=02df81268829301f3d69eb96f8ac617fa25256a1
Certificate serial: 019D2704590112EDCF76274F3A8B1D5AA2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:29 +0000
Manifest this update: Wed 25 Mar 2026 22:01:29 +0000
Manifest next update: Thu 26 Mar 2026 22:01:29 +0000
Files and hashes: 1: 7iEg611J16f4IwtY1Bg8M_Iq9WY.roa (hash: FHpub4verjY1xRKEEG446sUVBziKt0oMgxlHwjNCz7E=)
2: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: Q2IbUvV5nB4uAbtO60HWnDxF0bIVwPGXysTKWVvdDfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:59:01:12:ed:cf:76:27:4f:3a:8b:1d:5a:a2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1
Validity
Not Before: Mar 25 22:01:29 2026 GMT
Not After : Mar 26 22:01:29 2026 GMT
Subject: CN=11744c9507f8647be41d85a2a48c10c7e3b022c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:06:a9:91:22:18:3c:e5:79:35:88:0a:62:
c4:06:43:29:29:91:e8:d2:69:f1:78:b6:2a:b5:8e:
b9:be:4e:9b:bd:af:0e:82:9f:5a:0b:e3:97:98:cf:
8c:66:e4:96:ab:48:2b:a7:ee:f5:ed:a0:93:85:67:
27:55:41:23:cd:8f:86:cc:9d:63:88:1d:20:4f:b3:
16:7b:e5:87:7e:f1:c4:6e:05:e5:67:56:69:68:f0:
15:f3:df:aa:9b:24:27:d1:1e:77:e9:36:35:ce:16:
32:d7:9e:f7:ef:82:ba:f5:3c:d1:42:72:e5:37:0d:
87:a9:7b:5c:c3:d4:4c:ae:c0:b6:eb:93:e9:b7:c9:
5b:83:6b:b9:93:09:68:14:8d:cb:95:76:1d:21:2f:
54:50:67:52:3d:3c:c0:3a:f8:53:cf:f0:b8:60:bc:
58:6c:88:35:8c:19:25:6b:14:6a:dc:e6:3c:ed:95:
b5:34:4e:59:09:43:72:e1:6c:19:e5:90:f6:ea:a0:
af:13:1d:f1:d3:3a:11:95:ec:c8:8b:82:cd:ed:0c:
aa:7f:53:e4:3f:e9:92:dd:3b:01:9a:f6:9b:f1:13:
90:14:80:c0:01:56:54:42:c6:a6:39:f0:6b:fe:fd:
eb:fd:c2:1a:57:1f:83:7d:ac:18:6f:cf:3f:06:08:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:74:4C:95:07:F8:64:7B:E4:1D:85:A2:A4:8C:10:C7:E3:B0:22:C6
X509v3 Authority Key Identifier:
keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:2e:e6:27:40:24:ac:e9:96:1f:d4:34:73:90:c2:b1:71:db:
21:9f:89:9c:4d:20:96:df:e1:2d:6c:20:e8:0d:eb:ae:78:65:
8b:38:f9:66:74:c7:1c:00:bc:ea:1c:de:8f:2f:d3:8e:22:dc:
0a:f3:64:07:2d:6a:c6:f1:30:d9:9d:34:88:54:7c:95:2c:55:
e8:70:53:e2:72:de:2e:bb:0c:f9:73:50:9a:be:a3:dd:ea:f4:
30:f1:1c:8f:ed:12:3c:5d:ec:98:c7:76:bd:8a:4f:87:32:07:
e8:4f:76:d6:3a:08:9d:57:bc:58:c1:84:67:34:7d:de:e9:9c:
a6:b5:b0:49:5f:a2:88:17:5e:0a:fd:f2:72:ee:6a:77:83:4f:
60:95:73:19:92:8f:87:c7:d4:af:de:a3:91:6a:87:d3:55:28:
d4:5a:ba:d1:d1:a5:64:ee:da:5a:f4:cf:e5:19:30:b6:73:69:
46:44:54:f3:1d:8c:de:f3:6e:73:0a:7c:a1:bb:1f:89:33:ff:
2a:ef:6d:d8:32:07:af:00:be:78:42:c7:18:b5:b2:f9:64:82:
a1:b4:7f:cc:d2:35:dd:a0:12:87:2c:ae:fa:1d:91:af:02:46:
d8:ea:d4:2d:3d:0e:7e:7e:8a:6f:b3:12:0e:9d:f5:30:9e:48:
44:2b:a2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:24 2026 by rpki-client