Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File: 2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier: cHZbo9x5kEcmOloZ6wD2AQsuB+8W7LBuh9K3iXQXgho=
Subject key identifier: E5:8E:BD:1C:0E:22:DD:75:AB:32:48:F3:0A:7D:70:D1:25:CE:C3:5F
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer: /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial: 019F1943F0B49C2425AB85B55706734DFB64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number: 0A98
Signing time: Tue 30 Jun 2026 16:01:50 +0000
Manifest this update: Tue 30 Jun 2026 16:01:50 +0000
Manifest next update: Wed 01 Jul 2026 16:01:50 +0000
Files and hashes: 1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: S/niPx2mK9yo0krfvYupu2ClJQTBFgaFO+DVUpthrP8=)
2: H2tuVkWgjp6XpzlorJ0CMh9rzOQ.roa (hash: has59eIOKa6q3uHYWVg7mO28StrkkiAgF2EF9c4ggME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:f0:b4:9c:24:25:ab:85:b5:57:06:73:4d:fb:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Validity
Not Before: Jun 30 16:01:50 2026 GMT
Not After : Jul 1 16:01:50 2026 GMT
Subject: CN=e58ebd1c0e22dd75ab3248f30a7d70d125cec35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:32:97:70:9d:d0:7e:ad:21:fc:b8:52:5f:a5:
f8:75:b9:3d:2d:1b:ea:29:0d:33:46:c7:8a:5c:86:
99:e0:cb:d0:89:ee:cd:34:7e:96:90:a9:e0:37:09:
8d:ae:b0:94:4e:ac:58:d2:c7:76:d2:b2:be:eb:e6:
ea:2c:d1:5e:b5:14:de:08:c9:71:b6:d4:13:19:74:
a1:91:a1:61:fd:85:85:d4:d5:34:4c:71:a7:23:53:
e6:b3:01:37:68:d6:ac:58:18:70:e7:7f:f9:19:5a:
7f:55:c2:fc:38:9b:27:94:64:dc:8a:46:34:5a:7a:
5d:9e:9f:d2:fe:50:c5:b6:4c:47:43:90:f4:de:f9:
15:db:af:f1:07:86:2b:04:71:13:a2:17:84:f0:22:
32:69:5a:9c:c4:3c:f2:52:ad:67:47:d3:85:ac:f4:
29:e6:4b:ad:3c:9e:96:52:6f:9b:9c:ea:10:eb:a4:
5f:5e:b8:10:b8:83:4c:3e:23:14:d6:5e:f2:0a:ca:
ba:f5:85:07:7f:4f:15:ca:86:ff:5e:bf:92:15:eb:
d5:ec:8d:cf:60:ac:3d:f5:a0:e6:af:3a:b2:18:9f:
fe:be:1e:22:ac:98:b2:cc:ab:36:1f:dc:d0:92:23:
c0:1e:a2:21:0a:fc:57:63:e8:3f:85:c7:96:55:c4:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8E:BD:1C:0E:22:DD:75:AB:32:48:F3:0A:7D:70:D1:25:CE:C3:5F
X509v3 Authority Key Identifier:
keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:fa:79:70:bc:e0:1f:75:62:1b:c9:eb:d9:49:eb:90:c0:bd:
7d:ab:a2:2d:30:59:1b:e4:d3:8c:bb:90:f0:31:19:97:6e:7a:
d8:11:09:d0:cc:67:5d:77:9b:b0:9a:a2:c4:98:b9:a5:5a:aa:
fc:c0:d3:10:2e:1e:52:e3:1b:2f:94:13:dc:2c:83:05:d0:6c:
50:b9:6a:68:47:d7:c7:d4:c4:5e:3a:af:6b:c5:69:25:da:e9:
b7:51:76:ff:f2:d4:8e:e4:47:a7:ed:eb:9a:ef:7d:41:3f:13:
eb:ae:bf:8d:ea:ab:2a:c8:af:e8:19:a9:fa:f3:96:6c:13:93:
8b:fc:6b:85:36:19:40:db:be:3f:84:37:d4:ac:fc:ee:f2:3c:
d5:1b:ed:aa:7b:e0:24:59:0a:3a:ff:2f:9f:33:97:6d:9c:f9:
47:08:2a:2f:30:47:45:cc:1c:c5:22:2c:7f:b7:ec:75:73:c2:
6f:aa:bf:a8:ff:fd:b5:b3:96:7c:bc:8c:96:9c:55:53:0d:eb:
0c:53:ac:09:2e:9c:4f:97:46:1f:6c:2d:7a:e6:d7:71:73:8c:
1f:c3:32:17:3c:97:01:55:0a:55:86:bf:b0:37:84:e5:05:3e:
a6:8f:2c:5a:3c:88:5d:b6:a7:c6:42:4f:39:cb:2c:a8:f5:2f:
cc:c1:2f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:11:24 2026 by rpki-client