Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
File: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft (raw, json)
Hash identifier: 93LfZs7T3QmyV4meeToY00weUNo2Gz/h3jofmpRpsGA=
Subject key identifier: 65:20:20:45:4E:D3:8E:FF:3C:F4:0C:D6:F4:F8:28:81:17:0F:DB:56
Authority key identifier: C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
Certificate issuer: /CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Certificate serial: 019D27E011E644B6E088FFACAEA108F2821C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
Manifest number: 1357
Signing time: Thu 26 Mar 2026 02:01:29 +0000
Manifest this update: Thu 26 Mar 2026 02:01:29 +0000
Manifest next update: Fri 27 Mar 2026 02:01:29 +0000
Files and hashes: 1: 0JM0OkHh0gwC8g-OMNq47SiQARw.roa (hash: tiN6fCdudno0l7vL8FxOHOem0n3hQEZui0uSyje+5gI=)
2: BAkXhcFL-ayuGtyDGquU8AuGub0.roa (hash: wOdKatHwmd6Xvhry0fudAfFbKeYK4jBEL3fkkKbz56A=)
3: x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl (hash: ImqW8HczMT8VOmolZ/X7+oE+aER1YjYLpPprGhaytIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:11:e6:44:b6:e0:88:ff:ac:ae:a1:08:f2:82:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f6ad83f25c2886a25857fb515d4559527c46f7
Validity
Not Before: Mar 26 02:01:29 2026 GMT
Not After : Mar 27 02:01:29 2026 GMT
Subject: CN=652020454ed38eff3cf40cd6f4f82881170fdb56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:31:6b:92:44:4e:ed:62:3b:cb:e5:7b:ec:60:
b9:d5:6b:4d:4d:54:a6:32:8c:2e:3e:8a:62:05:23:
a4:c8:d5:17:57:8c:c4:a0:27:30:ab:42:5a:8d:9b:
e5:be:43:c2:b2:65:df:05:88:72:a1:3e:34:5f:0f:
67:ad:bc:47:ff:b5:22:5e:04:d8:f2:79:eb:2b:d0:
5b:fc:23:31:51:ef:26:08:30:9d:ef:0f:79:08:fc:
7e:71:09:7e:60:f6:f1:45:ef:74:3e:6d:d6:b7:70:
a0:ac:93:cf:72:fb:a7:49:d2:19:92:61:7f:7a:51:
40:17:50:3f:29:ec:23:ed:88:e0:eb:71:e6:82:73:
c8:dd:7d:69:bc:89:32:28:40:02:78:47:ae:ab:1d:
d0:79:74:6f:21:da:6e:bb:53:a4:f9:7e:56:bb:83:
ad:a9:2e:04:da:f4:c8:2a:7e:f4:8c:97:cd:b1:3e:
8b:c3:17:42:bf:71:a6:93:b7:bc:ba:28:a4:78:76:
36:57:5e:fd:27:ac:f3:61:d1:e7:04:fe:31:fb:28:
c5:10:d2:93:8d:ac:11:1b:f2:40:72:cb:49:ca:04:
a2:44:15:bb:08:e7:e7:94:df:33:dc:43:25:47:c3:
47:6e:d9:60:ff:ac:88:f2:ef:4c:9f:9f:c6:0f:75:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:20:20:45:4E:D3:8E:FF:3C:F4:0C:D6:F4:F8:28:81:17:0F:DB:56
X509v3 Authority Key Identifier:
keyid:C7:F6:AD:83:F2:5C:28:86:A2:58:57:FB:51:5D:45:59:52:7C:46:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/97e4e5-0247-46ba-83ca-3268ae9096dc/1/x_atg_JcKIaiWFf7UV1FWVJ8Rvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:cc:b6:4d:17:58:9f:0d:e6:0d:d5:e6:ff:58:e4:b5:35:7b:
6a:c7:18:ae:63:2d:49:ef:03:4d:77:7a:05:c3:8d:c0:cc:04:
e0:1a:8d:d4:ce:3d:c1:d2:fc:c2:6f:93:43:7f:96:96:f3:e6:
46:93:0e:18:e3:f9:63:0d:ee:66:0e:42:6d:2c:56:28:24:99:
31:05:7a:6c:08:86:10:11:db:09:d6:96:07:b6:75:df:82:fd:
d9:72:48:4d:ef:d8:7b:16:26:21:d8:bc:63:0f:7b:c9:c6:2f:
4f:43:7d:70:64:6c:05:50:49:06:51:1c:33:6f:4c:97:83:b3:
32:a2:a7:bb:3b:c6:4d:27:7f:e6:e5:e6:75:7f:10:21:94:c8:
ad:fc:ea:9d:95:a6:19:27:13:ad:a9:97:7c:e9:a6:be:5b:c6:
93:c4:cf:20:a5:5b:95:2b:a7:c3:94:b9:b7:a5:61:6b:47:c5:
6b:ba:6d:65:75:29:ee:b8:82:28:ce:74:8d:97:1b:31:47:53:
ea:3b:02:8b:f3:92:0a:99:ad:4f:11:85:c1:84:8a:0e:40:d1:
61:5e:fe:29:6f:a4:8e:81:5e:c0:d1:7b:77:ea:b3:9e:8e:ba:
44:30:f0:65:66:59:cc:0e:3e:a1:eb:11:47:1b:0c:85:ec:1c:
23:37:7a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:28 2026 by rpki-client