
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
File: At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json)
Hash identifier: xLmmk4vNNQRc0nARDcTO2k4hjmRAM4SZyLAb+KJFkyM=
Subject key identifier: B8:4C:54:43:B4:89:32:BB:88:0C:43:7D:74:54:A2:5A:66:E1:B0:7B
Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
Certificate issuer: /CN=02df81268829301f3d69eb96f8ac617fa25256a1
Certificate serial: 01A0CBC821D610E2D389DBA257F229BF5FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 01:01:25 +0000
Manifest this update: Wed 23 Sep 2026 01:01:25 +0000
Manifest next update: Thu 24 Sep 2026 01:01:25 +0000
Files and hashes: 1: 7iEg611J16f4IwtY1Bg8M_Iq9WY.roa (hash: FHpub4verjY1xRKEEG446sUVBziKt0oMgxlHwjNCz7E=)
2: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: KMyLxk7w5jCTbZRs9Ai80QoETZKEH+cFeRoNO5mGDoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c8:21:d6:10:e2:d3:89:db:a2:57:f2:29:bf:5f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1
Validity
Not Before: Sep 23 01:01:25 2026 GMT
Not After : Sep 24 01:01:25 2026 GMT
Subject: CN=b84c5443b48932bb880c437d7454a25a66e1b07b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:08:5c:9a:12:e1:e7:d1:5f:8d:5e:a7:61:d1:
22:82:b6:26:98:58:5f:27:c1:bb:a5:7f:9b:08:4b:
bf:d5:f3:4f:13:83:81:1b:e0:59:02:1d:65:18:5d:
8a:71:91:14:5e:a0:f0:6c:de:ab:f7:6a:e8:73:c0:
25:a4:b2:d5:55:dc:36:bc:66:a8:40:db:68:a4:4e:
b4:32:cc:41:a5:a4:27:9a:36:62:0b:d7:41:22:a5:
d6:36:81:10:f8:a4:50:35:e5:bf:96:2f:01:af:ee:
7d:e3:0e:9b:28:a7:f3:9d:a6:f8:8a:23:8e:aa:cd:
73:e4:bf:f3:6c:2f:7a:6a:fe:c8:c1:c3:9e:f3:7d:
00:4d:84:42:b0:bf:14:ba:22:4d:cc:a4:be:eb:ae:
56:51:75:67:b6:04:bf:9e:06:1a:9e:aa:c6:94:b0:
c3:b2:23:15:02:35:c1:c7:9c:c0:c1:4d:90:0c:ee:
e0:c2:22:0a:10:0f:17:0c:a3:2e:74:57:72:54:b9:
b6:76:aa:6a:32:0c:5e:4e:03:c0:c4:0d:c3:b7:ef:
b4:c1:e9:df:ea:73:25:bd:6a:de:e2:5d:aa:1a:6b:
fe:c1:90:6e:44:75:28:ce:b1:81:03:26:bd:cb:af:
24:9c:4a:f1:03:52:fa:10:12:65:cc:51:1e:76:a3:
45:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4C:54:43:B4:89:32:BB:88:0C:43:7D:74:54:A2:5A:66:E1:B0:7B
X509v3 Authority Key Identifier:
keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ab:16:7d:0e:1b:53:16:8d:f2:6b:9a:be:b8:39:b8:17:dc:
67:0e:44:45:8c:98:da:bd:84:80:68:6e:f0:44:02:1d:e9:17:
72:6d:4f:42:12:b0:38:4d:1d:be:22:69:94:b0:b8:03:bd:e3:
84:74:63:f9:09:8a:84:9e:62:37:b4:ab:39:d6:9c:aa:f5:7d:
d7:f3:f4:56:a1:3a:f9:15:dc:99:c5:4c:79:5a:70:29:79:2c:
9c:34:97:86:fa:3b:88:05:6f:a8:a8:ef:df:8f:ab:db:cf:76:
8e:d5:0a:1d:e3:02:c3:0d:19:d3:b3:ba:f2:41:0d:b2:24:a8:
d8:80:6f:c8:e7:cd:a1:d4:f8:b7:7a:17:2d:44:55:a8:6c:08:
d4:24:ca:f8:aa:e4:be:17:ba:8f:ad:da:6c:cb:c5:02:27:85:
da:96:5d:8f:eb:97:c1:81:8f:c6:27:89:07:3b:43:05:14:b3:
ff:16:8a:63:97:dc:91:53:2b:98:fc:4f:b8:d2:7f:1c:4e:82:
8f:27:eb:a7:f2:c3:04:ff:db:c4:f0:e0:fd:ba:83:e4:a7:74:
2f:62:5a:2e:35:bb:4a:30:6a:34:32:cc:fd:94:fd:b1:54:a5:
41:f3:0a:4b:6d:e5:5d:d6:3b:c2:7d:6f:51:83:20:0c:7a:88:
d1:6b:64:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:11:50 2026 by rpki-client