Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json)
Hash identifier: 4xwammyscHjfl26pL0AcxqsuTM7K+I0s2+2xJRX1a0M=
Subject key identifier: DF:25:07:27:3A:7A:29:4F:26:F0:13:D4:2F:E2:9D:AA:6B:9E:2D:9D
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Certificate issuer: /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial: 01A06D94F7257158616EE7A3F54E5E13B657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
Manifest number: 1394
Signing time: Fri 04 Sep 2026 18:01:14 +0000
Manifest this update: Fri 04 Sep 2026 18:01:14 +0000
Manifest next update: Sat 05 Sep 2026 18:01:14 +0000
Files and hashes: 1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: BLq6W3yy/Ia/y73Vs3K6RLFXIiaRFM35kNgnR6JvxXM=)
2: 5XOq4BMraJ6-AegtlaIWTtUkqxo.roa (hash: hDvJTYUbzgM4Etq6PCbmzufkHK2RaHqzKqogboxsQ0c=)
3: iIJMhiXnC0TkNFq6MHPCGZcJKp4.roa (hash: 6M+PNBTs7Ydc22YxEOoAXWjHO6P/9d3SsLY8rQkfu3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:f7:25:71:58:61:6e:e7:a3:f5:4e:5e:13:b6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Validity
Not Before: Sep 4 18:01:14 2026 GMT
Not After : Sep 5 18:01:14 2026 GMT
Subject: CN=df2507273a7a294f26f013d42fe29daa6b9e2d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cf:ad:79:f9:07:b1:2a:fb:8b:43:36:37:d8:
ac:0a:6c:3b:ba:bc:6a:6d:82:7c:96:f3:1c:0e:0f:
ee:8f:78:a4:bf:f6:da:f3:f6:d0:68:01:f3:1e:3f:
45:d7:12:cb:88:e4:f4:6b:d4:36:41:d5:94:b0:99:
6d:cb:cc:77:7b:a4:19:b5:52:20:44:d2:7f:2a:2c:
54:0d:6d:3f:9e:76:d8:76:d8:34:29:20:e4:e5:44:
c5:01:52:34:58:4a:fc:35:3c:5e:f9:73:06:6f:2c:
b0:0c:e1:d5:a1:3e:72:dd:c3:5f:03:79:03:59:42:
18:d9:6b:23:e5:52:c5:33:ca:21:4f:e5:1c:3c:79:
9a:15:39:6d:32:33:b3:26:cd:22:14:7a:02:62:03:
30:fd:17:16:0c:41:b8:9f:7c:ac:ac:44:0c:62:89:
ef:7d:9d:15:4e:cd:77:52:4e:e0:ef:51:bb:6e:48:
0a:28:6e:78:16:a2:61:69:da:a1:fd:3e:15:36:8f:
d9:51:03:a0:97:26:e2:df:5c:f3:46:8c:a3:7b:45:
b6:21:3f:ed:22:2d:23:76:37:ce:b6:a0:39:c2:96:
4d:ec:f8:ba:d1:54:2b:ff:4d:02:34:4e:cf:3a:d8:
af:2a:6d:e1:6d:66:3e:f0:04:bc:b6:f9:56:21:71:
3d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:25:07:27:3A:7A:29:4F:26:F0:13:D4:2F:E2:9D:AA:6B:9E:2D:9D
X509v3 Authority Key Identifier:
keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d9:8d:e4:4d:73:b3:e8:7e:8d:de:0e:10:00:3c:e4:81:74:
ce:cd:fe:70:17:20:f1:d7:64:b0:f4:80:26:1e:bb:1a:a8:78:
d9:ea:e9:68:55:30:1d:f4:e1:81:04:8b:22:1d:33:8f:c6:22:
5b:b9:4c:75:73:1f:5a:09:a8:38:f8:76:0a:69:25:57:cc:c8:
3b:48:59:b3:b1:90:7d:2e:57:90:72:64:f1:02:f7:78:2d:34:
63:53:ff:0f:7a:31:1a:6f:53:12:1c:11:71:32:8a:b7:19:3c:
91:f0:42:cb:3f:d9:9b:29:20:03:9f:18:c5:91:d2:f5:37:26:
58:12:e6:b6:62:99:33:5e:07:ab:da:c6:2a:7a:1b:67:32:fd:
01:34:d1:0d:7c:cf:7d:a0:4a:e5:12:28:9b:30:3a:68:ee:90:
62:4a:6c:4c:12:1d:31:bc:f9:77:5e:7c:a9:06:b4:8b:6c:67:
66:56:05:2e:71:ff:87:9b:cf:13:d6:ed:95:70:cb:2f:3f:92:
f8:f5:ff:92:ad:ed:41:21:35:14:a1:f1:80:a8:b2:4f:08:4b:
06:37:60:91:af:30:ca:dc:a6:a3:e0:65:1f:c7:cf:4e:ff:87:
8b:fc:f0:61:b8:00:64:31:bb:c6:0d:89:73:dc:fa:e4:0c:ea:
85:e2:b7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:40:53 2026 by rpki-client