Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json)
Hash identifier: Q9ZT9LYgu2lduM+v3RG56C2ZKfQpR+QZWLagioz3VVg=
Subject key identifier: 5A:3F:59:57:11:6D:67:2F:47:83:71:FF:54:29:9A:84:01:31:E0:AF
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Certificate issuer: /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial: 01A1859A454826FCF0C135DCEE13AF831033
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
Manifest number: 1425
Signing time: Thu 29 Oct 2026 03:00:42 +0000
Manifest this update: Thu 29 Oct 2026 03:00:42 +0000
Manifest next update: Fri 30 Oct 2026 03:00:42 +0000
Files and hashes: 1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: Sc6gjkMlw3HnBH3d4dzi9ae0QWm1wnPu5EmQrKfk/w0=)
2: 5XOq4BMraJ6-AegtlaIWTtUkqxo.roa (hash: hDvJTYUbzgM4Etq6PCbmzufkHK2RaHqzKqogboxsQ0c=)
3: iIJMhiXnC0TkNFq6MHPCGZcJKp4.roa (hash: 6M+PNBTs7Ydc22YxEOoAXWjHO6P/9d3SsLY8rQkfu3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:9a:45:48:26:fc:f0:c1:35:dc:ee:13:af:83:10:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Validity
Not Before: Oct 29 03:00:42 2026 GMT
Not After : Oct 30 03:00:42 2026 GMT
Subject: CN=5a3f5957116d672f478371ff54299a840131e0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9d:12:ad:2d:fe:d1:60:0d:b8:dc:3a:82:91:
ac:b6:54:8e:e5:41:cc:93:d5:c0:7e:75:ce:1d:54:
e8:e3:34:8d:a6:85:85:4c:47:41:e9:92:36:cd:5a:
50:c1:4d:16:f7:f9:33:cb:54:de:d6:e0:4f:c0:42:
e2:41:39:84:89:a0:0c:fa:e2:d0:74:e9:1d:d3:d7:
99:e1:ac:0a:e1:c4:f6:48:3a:73:a0:47:48:44:5a:
54:69:bd:9b:b0:92:b0:88:9b:f7:37:9c:fe:e3:83:
09:8d:9a:3d:82:cb:e7:82:83:56:a2:cc:4a:a8:c3:
0c:ee:1b:26:03:59:0b:47:e4:da:29:1c:c6:24:b9:
48:94:b5:1a:31:2c:47:d4:eb:fa:14:97:54:0e:8d:
45:75:13:2c:34:cc:d3:69:2b:60:fd:fe:84:3f:76:
60:0c:84:fc:90:18:be:c4:82:fb:5c:50:b4:89:43:
cc:f3:3e:82:40:b0:51:f2:09:21:a1:3b:f5:a7:31:
12:9a:b7:15:ce:ed:2e:62:24:d5:26:8a:eb:69:20:
a9:d7:6d:bd:a2:1a:a0:b2:df:15:64:90:4d:1a:8b:
fe:3d:5d:dc:49:0b:ff:62:0f:0c:31:0d:ec:06:21:
c1:ff:cf:71:37:ec:f3:2d:17:84:34:16:ca:0a:24:
24:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3F:59:57:11:6D:67:2F:47:83:71:FF:54:29:9A:84:01:31:E0:AF
X509v3 Authority Key Identifier:
keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c1:92:34:91:0c:4c:d1:e4:b0:b4:29:17:ae:32:67:ce:e2:
29:c9:f9:64:6f:ef:2a:31:c9:80:56:94:ac:46:38:87:c0:17:
ca:6e:c3:88:2e:24:c1:43:7d:32:82:af:ba:c4:1c:5c:6b:4c:
3a:34:c2:fe:63:fc:63:6c:85:53:b1:19:bb:70:06:31:5e:2b:
31:d6:95:e3:de:c4:df:03:5f:5a:35:70:fe:78:85:a8:19:8f:
ce:65:92:06:e3:0b:a5:55:d1:c4:8a:00:5c:cf:89:5c:4c:20:
a7:a0:b5:32:78:11:6a:b9:3c:e1:40:0b:33:18:fd:02:d9:a7:
c8:5a:6b:ec:40:af:8f:0b:4a:5e:d6:5e:0f:9f:95:ed:06:91:
d1:a5:80:9c:81:a2:fc:12:ff:d4:46:13:3f:63:6c:f6:c3:86:
24:04:7f:48:c7:40:be:64:73:43:a4:12:ba:d3:7a:ea:09:8c:
72:87:81:e1:a7:1b:95:fc:23:7c:35:d2:2d:ac:d9:9f:61:f3:
54:59:1d:88:e2:bd:f5:ac:3f:56:bc:91:df:06:50:b8:db:be:
1b:b6:56:40:49:14:13:08:ee:cf:98:bb:31:2f:6b:78:37:58:
95:f3:c9:7e:19:95:d9:da:e7:cc:98:76:c4:2a:e3:06:e6:fb:
cf:c6:02:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 09:37:54 2026 by rpki-client