Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File: 2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier: VFYWOjQcdwAyGit7TqT2RjIg7NuXJP+S4fZwJ+ZMtsc=
Subject key identifier: CA:7B:48:7E:EC:FB:9F:C0:0A:AD:20:BD:45:53:58:08:94:66:F5:88
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer: /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial: 019D38665447440D7461307FEF3F61D0E102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number: 099F
Signing time: Sun 29 Mar 2026 07:02:03 +0000
Manifest this update: Sun 29 Mar 2026 07:02:03 +0000
Manifest next update: Mon 30 Mar 2026 07:02:03 +0000
Files and hashes: 1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: qFB9YrqcrX81ZPj7WLhhf1Jl2vHT6tqKsXBfh0EKsj8=)
2: H2tuVkWgjp6XpzlorJ0CMh9rzOQ.roa (hash: has59eIOKa6q3uHYWVg7mO28StrkkiAgF2EF9c4ggME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:54:47:44:0d:74:61:30:7f:ef:3f:61:d0:e1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Validity
Not Before: Mar 29 07:02:03 2026 GMT
Not After : Mar 30 07:02:03 2026 GMT
Subject: CN=ca7b487eecfb9fc00aad20bd455358089466f588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:c0:07:8b:0b:72:b2:f3:e8:98:28:33:22:
90:97:42:e9:22:dc:1a:49:c8:2b:9c:f9:79:c8:d8:
54:26:43:60:93:01:75:c1:19:f9:01:0c:78:f9:27:
7a:bd:6e:a3:cc:6c:83:35:95:20:5f:e3:41:d4:a7:
ac:f7:d7:1c:48:06:30:88:12:3a:4c:00:a7:4c:9c:
1c:14:f1:c3:30:f8:e6:76:c5:1c:c1:43:94:fa:4e:
55:df:82:63:33:23:ed:45:6d:96:88:6b:83:7b:1e:
4d:cd:cd:30:fb:b3:26:0a:8f:1e:f1:d1:f7:25:2f:
f5:b5:dd:04:27:49:82:c2:cd:5d:0f:f7:bf:12:3d:
67:fe:59:f0:57:d6:1a:cd:c1:7a:55:e4:6b:88:22:
cf:9a:f7:5d:bd:a9:a7:c1:ba:b9:bf:17:f7:dc:84:
4a:68:87:84:43:09:5a:c8:b3:89:82:15:79:60:a8:
7e:23:3b:7d:e7:e0:df:7c:dc:bc:c0:b3:67:f6:ee:
6e:67:b2:46:40:67:44:f7:1a:71:e3:58:48:04:32:
b7:1a:66:b8:79:52:d0:c8:76:54:cf:11:cf:da:77:
b8:5b:0e:05:54:76:57:17:c5:99:6b:e2:45:e1:f2:
1a:a7:1e:4f:3b:f6:99:7d:6f:dc:86:ab:b8:78:fa:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7B:48:7E:EC:FB:9F:C0:0A:AD:20:BD:45:53:58:08:94:66:F5:88
X509v3 Authority Key Identifier:
keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ae:3f:9d:cb:d6:9d:71:f0:2f:b9:57:a3:62:18:29:49:c0:
6a:86:9f:02:b7:ff:1a:c2:82:7f:3b:ff:cd:41:8e:74:d5:c7:
ae:44:4b:de:44:99:5f:ff:0c:dc:68:fd:9d:8a:1d:02:67:b5:
73:fe:1b:0a:26:37:9a:7b:c6:36:ae:b5:4a:cc:3f:9a:c9:68:
44:51:7b:6c:51:64:b6:d1:25:4e:a0:b0:03:56:ec:b9:62:ab:
09:fe:b0:e0:bd:87:b3:55:b8:dc:54:db:c2:45:2c:7a:23:7f:
af:0e:bf:ef:60:57:dc:0a:33:1a:62:87:22:56:59:5f:68:04:
02:64:7f:52:d1:71:52:99:16:c8:51:dc:da:de:36:5d:1c:e1:
d8:23:0b:a8:2d:1f:0f:e1:a7:14:0d:29:76:65:69:e2:5c:e5:
6f:37:cc:11:c6:2d:c2:c1:d6:ae:54:85:7d:b0:79:9e:69:01:
f7:b4:e6:0a:74:d1:5b:fc:eb:bd:c4:e3:a3:6e:59:86:26:7a:
43:87:87:94:61:75:53:85:9a:01:6a:ff:77:5c:ca:cb:e7:18:
13:ad:f5:6c:e7:f7:2d:d0:59:03:6b:d7:dc:7e:f8:3d:d3:cf:
a5:6c:6e:2c:95:17:63:34:fb:9d:3c:2a:a1:23:a2:e0:85:08:
91:01:2f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:45 2026 by rpki-client