
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File: 2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier: WHRxKTfcBCtn4/39evQS3g5MwctKyFpZ47Qr4vGgPs0=
Subject key identifier: 64:36:6C:55:B5:59:4F:57:2B:42:4D:4D:C2:C2:D6:79:5B:05:A4:3C
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer: /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial: 01A13DB7FAF3E2A09551FF28250C19B47137
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number: 0BB4
Signing time: Thu 15 Oct 2026 04:00:29 +0000
Manifest this update: Thu 15 Oct 2026 04:00:29 +0000
Manifest next update: Fri 16 Oct 2026 04:00:29 +0000
Files and hashes: 1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: NLOT65kFn1tjt2lmCESSGZb0ha89UU/GUEeRhYwA0pg=)
2: H2tuVkWgjp6XpzlorJ0CMh9rzOQ.roa (hash: has59eIOKa6q3uHYWVg7mO28StrkkiAgF2EF9c4ggME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:fa:f3:e2:a0:95:51:ff:28:25:0c:19:b4:71:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Validity
Not Before: Oct 15 04:00:29 2026 GMT
Not After : Oct 16 04:00:29 2026 GMT
Subject: CN=64366c55b5594f572b424d4dc2c2d6795b05a43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:65:e5:23:bb:04:6e:24:f1:1f:09:b2:7b:e0:
d4:7e:62:9e:61:a4:ce:1b:94:83:26:dc:2f:0f:99:
3e:01:6b:cf:4e:84:d9:f7:d8:20:39:ad:3f:d3:67:
6f:03:68:64:c6:8a:38:28:91:04:a3:65:05:a0:5a:
5a:03:39:db:e4:dd:24:3d:c4:43:32:0e:48:e1:f0:
79:5d:e4:6f:5e:37:51:d4:33:bd:96:02:e7:d3:45:
d7:2a:7e:1f:83:0c:0b:97:ba:4a:33:6e:c9:5f:ef:
4e:63:b3:69:d5:6c:04:7e:1b:5f:66:9d:1c:93:de:
03:82:26:50:8f:01:4c:6e:57:82:a2:4b:87:5d:5d:
fc:6c:60:d5:16:02:0c:b3:5d:ac:10:bd:85:98:83:
60:a8:82:80:c1:8b:4b:98:48:b3:15:17:97:f3:87:
ef:14:25:04:2f:b8:3f:12:c6:31:5c:02:ec:c0:87:
b6:1a:9c:8c:2c:4e:90:e0:5e:f4:24:df:f6:cf:5b:
70:a8:5d:c9:d2:82:22:ca:66:4e:a7:20:7e:60:3f:
46:eb:d3:4d:fc:38:46:f7:c2:30:75:69:11:f7:23:
92:0a:f3:b1:76:96:bd:e6:2d:f4:8d:3d:3d:eb:b8:
67:2b:9d:d3:29:f4:75:b3:41:51:51:c6:48:cd:dd:
94:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:36:6C:55:B5:59:4F:57:2B:42:4D:4D:C2:C2:D6:79:5B:05:A4:3C
X509v3 Authority Key Identifier:
keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:18:eb:07:21:37:09:d2:df:16:3e:b4:13:15:35:48:56:6e:
06:2e:08:99:d3:51:98:d6:9f:a5:ed:92:3f:75:4a:bd:b6:26:
b4:a7:bb:e4:a8:7a:d8:bf:36:6a:88:d0:0f:f2:43:5c:8d:26:
11:0a:2f:b9:bd:0a:32:94:34:26:06:78:da:80:3f:9d:55:6b:
6a:27:13:5a:9c:10:d9:4d:d7:89:65:95:fc:06:e1:70:ac:f7:
cd:f5:b7:c2:8f:ee:51:71:82:f5:3d:93:fd:d7:80:7e:bb:96:
26:50:b1:0f:69:e8:8a:26:1c:c6:81:4b:1e:6e:6c:f7:b9:fc:
a7:2d:cc:0c:f4:da:37:b7:e0:4e:7f:ed:be:d2:1f:b0:99:37:
25:1a:b6:67:49:fd:bc:6b:83:54:24:09:95:da:30:0f:eb:7c:
ff:5d:31:b6:80:b3:93:00:0d:1e:30:97:46:60:ea:95:ee:47:
2e:1c:77:70:ed:0a:be:3c:46:20:45:f3:bd:94:5c:30:ff:55:
42:42:af:41:d9:e4:cb:47:ff:b2:43:4a:64:02:53:1b:96:58:
70:9f:1d:29:b3:ba:17:33:f3:d4:51:e2:61:28:19:7b:68:53:
a9:f6:85:11:4a:fd:50:c9:bd:35:a2:40:5e:12:7c:f5:aa:41:
9d:98:1e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:27 2026 by rpki-client