
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
File: At-BJogpMB89aeuW-Kxhf6JSVqE.mft (raw, json)
Hash identifier: DkR1ltacJ9wdeyy1VaMTuQGuTKvMDEVx4ze5L8vOKpg=
Subject key identifier: D1:D2:62:A8:B5:6F:42:F0:2D:31:A7:D1:50:FF:AF:FF:BD:9F:96:48
Authority key identifier: 02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
Certificate issuer: /CN=02df81268829301f3d69eb96f8ac617fa25256a1
Certificate serial: 01A0010129C4AFE4119812238F4C2536FA10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 16:00:48 +0000
Manifest this update: Fri 14 Aug 2026 16:00:48 +0000
Manifest next update: Sat 15 Aug 2026 16:00:48 +0000
Files and hashes: 1: 7iEg611J16f4IwtY1Bg8M_Iq9WY.roa (hash: FHpub4verjY1xRKEEG446sUVBziKt0oMgxlHwjNCz7E=)
2: At-BJogpMB89aeuW-Kxhf6JSVqE.crl (hash: LqDd16RBytdAoDuEz0r8s5yrp7xtMvYGeGI8jWmiDno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:29:c4:af:e4:11:98:12:23:8f:4c:25:36:fa:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02df81268829301f3d69eb96f8ac617fa25256a1
Validity
Not Before: Aug 14 16:00:48 2026 GMT
Not After : Aug 15 16:00:48 2026 GMT
Subject: CN=d1d262a8b56f42f02d31a7d150ffafffbd9f9648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:4a:91:f8:78:59:50:83:f4:80:ac:4e:cd:
69:8d:bf:d3:85:05:eb:9b:2a:98:08:49:00:d1:31:
16:d1:f9:3b:7a:70:de:a3:5c:c3:05:32:d0:8b:99:
eb:4b:88:ba:f8:9d:db:79:55:58:bc:76:fd:0f:17:
81:31:cb:bc:ec:61:24:1d:54:08:77:ec:90:79:d3:
71:82:81:22:ad:72:21:e1:28:9e:86:1b:84:4d:9f:
9a:6d:e6:46:14:6a:bc:27:96:a8:06:3e:92:7e:a6:
8c:eb:37:e6:7a:00:59:52:5b:94:04:4b:89:30:e6:
9c:25:ae:71:34:52:2a:0d:42:a4:5c:30:d6:0d:f1:
93:47:4f:86:a3:ce:54:c6:e6:68:6f:7f:a3:85:72:
8b:c8:ac:88:14:48:97:cd:45:15:1e:e0:d8:f1:2e:
74:c4:fa:9a:92:59:51:20:28:4a:0b:62:2c:03:66:
5a:07:d0:d5:18:82:0b:46:66:b2:03:75:9c:9a:44:
3b:2a:a1:8e:8d:f0:02:83:5a:4c:2a:30:bb:0a:e9:
30:68:72:64:0f:b3:38:60:f1:5e:0b:68:61:f4:9c:
22:2d:b2:cf:40:f5:ef:41:f7:d4:4f:e1:dd:74:b4:
83:25:9d:06:40:ed:70:54:de:f8:8c:e5:8d:04:cb:
ff:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D2:62:A8:B5:6F:42:F0:2D:31:A7:D1:50:FF:AF:FF:BD:9F:96:48
X509v3 Authority Key Identifier:
keyid:02:DF:81:26:88:29:30:1F:3D:69:EB:96:F8:AC:61:7F:A2:52:56:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/At-BJogpMB89aeuW-Kxhf6JSVqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/061716-09c6-4838-b1cb-3e86d2c29969/1/At-BJogpMB89aeuW-Kxhf6JSVqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:9a:a5:99:50:36:67:b6:e2:c3:a1:c6:f7:d3:68:22:46:87:
57:ed:8b:ac:f7:1d:f2:b0:33:b1:50:0d:30:5d:01:d6:69:81:
bc:b8:66:12:cb:2e:eb:35:0e:63:82:29:46:b5:bd:f0:7b:51:
93:f3:9e:71:8a:20:4b:98:9b:d3:08:0b:0e:4d:cd:cf:2a:ac:
65:b2:f5:23:9d:96:d2:da:1a:8a:be:a7:4f:39:48:15:94:22:
72:4e:ce:20:44:01:e8:ed:4e:34:7c:11:b4:43:c3:49:5d:6b:
4e:c9:af:5c:6d:b8:a3:22:b2:a4:0e:3d:b6:0e:0f:a9:4e:6b:
14:21:17:b5:4c:c3:9f:fc:4c:15:fd:1d:02:63:ed:48:d8:97:
9a:ac:b3:2e:d2:ec:c6:52:21:83:e1:d7:90:ad:0b:b9:6a:94:
da:b0:61:f0:db:60:11:e4:e6:91:3a:8e:5e:ed:20:22:56:cc:
45:f1:7e:85:fb:6d:1b:b2:ab:27:c2:1e:06:fe:9f:25:6c:cf:
6f:65:bf:09:b6:35:bc:9d:44:99:e5:43:52:9a:17:1a:20:5e:
b9:83:51:aa:b1:2c:6d:7d:38:2d:a4:30:b0:5f:f0:40:08:f1:
23:9e:7e:15:29:98:d8:50:a6:70:36:ed:85:5f:c3:19:b6:eb:
0a:49:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:02 2026 by rpki-client