Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json)
Hash identifier: EHrrR/3C0wUZoF9QIecTf9NGF4NSTcxgHSAStCVOjiA=
Subject key identifier: EE:3E:2D:6A:E6:66:DD:85:4A:C4:2D:0C:7A:34:1E:E0:14:F0:87:D0
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Certificate issuer: /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial: 019F85D6F16934506F4277CBF4E3F24EC019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
Manifest number: 131C
Signing time: Tue 21 Jul 2026 18:01:23 +0000
Manifest this update: Tue 21 Jul 2026 18:01:23 +0000
Manifest next update: Wed 22 Jul 2026 18:01:23 +0000
Files and hashes: 1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: 5bY7HdOTuJBvJ9BA0UXBnko5UhrL7zw7Be3SOnEfiOg=)
2: 5XOq4BMraJ6-AegtlaIWTtUkqxo.roa (hash: hDvJTYUbzgM4Etq6PCbmzufkHK2RaHqzKqogboxsQ0c=)
3: iIJMhiXnC0TkNFq6MHPCGZcJKp4.roa (hash: 6M+PNBTs7Ydc22YxEOoAXWjHO6P/9d3SsLY8rQkfu3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:f1:69:34:50:6f:42:77:cb:f4:e3:f2:4e:c0:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Validity
Not Before: Jul 21 18:01:23 2026 GMT
Not After : Jul 22 18:01:23 2026 GMT
Subject: CN=ee3e2d6ae666dd854ac42d0c7a341ee014f087d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0d:1f:dd:d4:e9:91:c8:ca:94:d8:9c:31:57:
5b:82:f7:80:26:e7:6b:49:af:4a:6a:a3:d4:83:11:
4b:5e:d8:2f:d1:54:df:25:22:8b:96:e9:24:bf:00:
f4:9e:e8:b1:87:8e:8b:bc:c0:af:2e:a4:76:9b:de:
24:4a:cc:08:3a:a4:3d:99:a7:7f:2b:2b:7e:d2:7b:
82:b6:8a:c5:16:8e:61:e0:95:04:63:16:15:c7:58:
56:9f:b1:1e:24:45:1e:b0:1b:7c:5c:2f:86:03:ce:
4d:b0:67:0c:c9:27:f5:be:c6:d8:f5:ff:2b:58:d3:
2b:b6:8d:28:8c:57:4d:29:59:66:7f:74:bc:82:89:
d2:51:dc:f4:15:00:4f:b6:51:68:cd:a4:c4:47:24:
b0:18:3d:27:02:76:a8:7b:e0:b1:e0:0f:04:16:38:
e0:1e:07:0a:b3:c8:c5:d4:d1:30:75:53:ff:ee:cd:
f1:0c:a6:c6:b2:b4:7c:84:26:37:7f:0a:cd:2c:cf:
45:e5:21:eb:02:58:76:57:e8:a1:90:ce:ec:b3:8b:
63:17:e8:60:9f:e8:8f:10:9f:77:c7:c1:07:30:8d:
07:dc:8b:a5:c6:71:46:8b:67:19:1c:b3:fd:fb:05:
61:13:0d:ea:3a:5d:1a:0b:82:ef:06:c8:45:8c:bb:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3E:2D:6A:E6:66:DD:85:4A:C4:2D:0C:7A:34:1E:E0:14:F0:87:D0
X509v3 Authority Key Identifier:
keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:8b:14:df:4e:f5:84:58:73:59:07:23:1f:13:04:43:a1:47:
6c:be:72:3b:0d:08:3c:34:34:8b:12:df:cb:36:70:f9:6e:ac:
51:62:67:91:c0:95:91:ca:10:65:13:52:a2:5e:db:85:98:a7:
50:37:1f:d4:d3:5c:86:2c:71:af:fd:24:42:fd:e6:43:1d:a0:
7a:cc:f9:12:1f:75:bb:00:57:7e:d6:f4:d0:b2:0c:08:54:2c:
98:27:c1:0f:c3:4f:a5:ad:ce:a8:68:46:b0:53:55:8f:42:53:
67:18:8b:61:3b:d3:10:11:f0:fc:03:1d:90:0e:22:91:9b:c8:
6f:da:ae:97:a8:b4:31:be:ce:dc:7e:b7:86:cb:1a:9e:c2:3b:
8f:c1:bd:6b:50:e8:60:82:1a:a6:c7:3e:25:ca:7b:5a:16:06:
08:54:2f:48:f1:8a:6f:1e:f5:82:ea:70:08:06:1d:78:fe:49:
81:53:22:02:15:32:dd:fe:da:a3:27:4f:4c:20:18:5a:d2:bc:
3b:17:4a:ca:c9:35:b9:5e:3a:24:ca:a0:80:c4:21:9b:a7:e9:
a9:80:7a:31:8b:24:11:6d:44:45:26:b3:e2:c3:f3:34:2b:28:
61:7b:cd:fa:73:3a:68:96:dd:8c:8d:38:fc:61:3e:02:e0:ee:
0a:80:f1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:58 2026 by rpki-client