Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
File: AtboJz-QUawxy5V5LLUUANq3FKo.mft (raw, json)
Hash identifier: z/6FMwLWTT1qYWwIdysNkLdf1Df8Ge4RYIlBa2WxgK0=
Subject key identifier: 43:8C:FB:42:D4:18:C4:C1:9D:E0:FD:AF:F8:79:2B:A4:ED:EF:87:2C
Authority key identifier: 02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
Certificate issuer: /CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Certificate serial: 019D37F789EDC198F0AE72008309827B839F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 05:01:02 +0000
Manifest this update: Sun 29 Mar 2026 05:01:02 +0000
Manifest next update: Mon 30 Mar 2026 05:01:02 +0000
Files and hashes: 1: 1gx51DcX_brbkgLU88J2iqha27o.roa (hash: UvLTx+yZ3enaGwB1TfAt+S7PHTMOfGgqytH9LAHVu28=)
2: AtboJz-QUawxy5V5LLUUANq3FKo.crl (hash: /JyKoZTwo4qSy7FxvPFRLbISfktMGlItAagXLjUIyk0=)
3: tq8QxlpAQ6tiPZgbTTQLf8KLz9U.roa (hash: 342PBC8TnFXSEefteNXsajXj7RC7MDpoicGyHn4km3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:89:ed:c1:98:f0:ae:72:00:83:09:82:7b:83:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02d6e8273f9051ac31cb95792cb51400dab714aa
Validity
Not Before: Mar 29 05:01:02 2026 GMT
Not After : Mar 30 05:01:02 2026 GMT
Subject: CN=438cfb42d418c4c19de0fdaff8792ba4edef872c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b2:d2:ad:18:f0:ca:de:34:57:63:70:cf:50:
cf:39:0f:fa:ae:9c:29:d6:21:ef:17:4b:34:d8:e5:
25:03:b9:b1:b6:3d:5e:aa:32:d5:54:e9:3d:23:a4:
86:3f:c1:7d:6e:9f:7a:ae:3b:d0:42:09:96:13:e7:
9a:78:6b:f0:aa:22:2c:7f:a6:f4:33:89:b5:75:59:
a0:94:97:88:1c:b3:af:5b:3b:b7:1a:9d:68:8d:b4:
a4:93:fc:7c:79:bc:3d:74:01:37:b3:52:12:96:2c:
f6:dc:06:12:32:09:b1:03:57:25:bf:06:fc:f1:56:
c4:77:45:78:a3:9a:e6:68:c4:69:9e:8c:8c:79:f3:
0d:01:57:47:2d:0f:a7:83:ab:90:12:4c:80:bf:17:
a0:f8:b4:29:cd:47:7c:58:df:56:69:b4:fb:ed:fb:
50:b0:12:0a:cd:b0:b2:dd:57:58:68:65:e1:0a:e3:
c5:5f:d2:81:ad:6b:ef:b7:36:71:4e:f6:76:e0:88:
1e:7e:81:fb:c6:d1:ba:24:4f:f5:0d:b9:79:6c:03:
3e:f6:80:5e:1b:d3:a8:3d:9e:38:e3:17:9e:3c:80:
a6:b4:10:c7:63:c7:87:9e:02:42:ef:f1:9a:c8:cf:
ad:92:d8:3f:61:1c:cc:8a:33:24:ef:f5:05:6d:95:
31:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8C:FB:42:D4:18:C4:C1:9D:E0:FD:AF:F8:79:2B:A4:ED:EF:87:2C
X509v3 Authority Key Identifier:
keyid:02:D6:E8:27:3F:90:51:AC:31:CB:95:79:2C:B5:14:00:DA:B7:14:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AtboJz-QUawxy5V5LLUUANq3FKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/7ca3de-92c8-49fb-acae-9f1a5dbb41d6/1/AtboJz-QUawxy5V5LLUUANq3FKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:04:b7:7c:6d:c8:05:b0:f1:b0:da:b3:36:6b:df:04:a4:3f:
81:90:2e:dd:42:51:64:85:67:f2:8c:c5:4e:71:60:06:e4:f9:
47:0a:a2:60:5f:9e:4e:2f:91:aa:5b:24:80:f0:9c:3e:e4:6b:
9a:93:e8:89:32:70:ad:a9:57:38:36:86:4d:ed:40:53:ff:85:
70:f3:c4:91:bc:98:8b:89:29:a2:e1:2d:5e:43:66:a4:db:95:
18:ed:df:61:dd:96:0f:ac:6a:b0:52:f6:b1:31:06:1a:8f:5b:
2f:c5:e1:97:20:f1:49:42:a9:17:98:ad:83:55:73:aa:80:30:
0d:aa:28:82:d8:10:6a:cd:50:67:9e:27:0f:60:a0:33:62:65:
a4:c6:3d:6e:55:6d:99:89:df:0c:ab:b0:fc:d0:bb:6b:3d:9c:
8e:7c:a4:11:87:3c:e5:75:5f:66:94:01:51:cf:eb:a9:ff:ec:
a0:93:2e:6e:5a:92:6d:ee:36:48:35:fb:fa:65:40:b1:3f:f2:
a7:5f:cf:c4:9d:c9:ec:2e:4c:8b:79:02:1a:b3:80:95:6d:76:
27:41:04:a0:48:67:df:ef:87:5a:94:d6:ca:08:05:92:9f:8c:
ea:bd:26:92:b6:ce:b3:b8:39:ba:72:aa:6d:63:90:7c:96:95:
57:56:f3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:48 2026 by rpki-client