Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File: 2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier: puwWuUp7ukVB+qudpHP1X2TmEOVhTFKJpO+GL/uaS1U=
Subject key identifier: E3:31:9B:F7:7D:7D:1C:BE:49:BC:F1:D5:39:75:9B:B3:CD:31:AB:A6
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer: /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial: 019F90FF23ECD2D48AC053C47B16C177BAA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number: 0AD6
Signing time: Thu 23 Jul 2026 22:01:07 +0000
Manifest this update: Thu 23 Jul 2026 22:01:07 +0000
Manifest next update: Fri 24 Jul 2026 22:01:07 +0000
Files and hashes: 1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: QhyJsDJfWLHcm/HNv50zv7tKTfj4bTXRYHn95lMhGzs=)
2: H2tuVkWgjp6XpzlorJ0CMh9rzOQ.roa (hash: has59eIOKa6q3uHYWVg7mO28StrkkiAgF2EF9c4ggME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:23:ec:d2:d4:8a:c0:53:c4:7b:16:c1:77:ba:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Validity
Not Before: Jul 23 22:01:07 2026 GMT
Not After : Jul 24 22:01:07 2026 GMT
Subject: CN=e3319bf77d7d1cbe49bcf1d539759bb3cd31aba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1a:69:e2:18:62:91:38:27:50:1c:9e:a3:b8:
bc:65:51:9e:e5:72:c3:ce:ed:23:d2:a4:7d:b4:2c:
29:ec:2c:7e:ae:f8:30:4b:2d:61:12:85:a7:de:b4:
f6:e9:17:cb:c0:70:c0:af:d0:58:4b:5e:e2:71:f9:
37:e8:f2:39:35:97:1e:61:2f:97:2b:c6:b3:69:1a:
87:b6:e4:3b:b6:32:16:ea:29:e1:5d:ab:73:3d:12:
0b:b9:43:51:96:98:46:57:ff:7f:32:d2:91:93:d4:
95:4b:b4:c6:65:16:d6:3c:77:9a:97:a6:79:b2:27:
f5:a7:8b:0c:c2:e1:f0:d0:e2:9e:45:8f:00:86:e5:
b5:ef:82:8f:cf:77:0d:0f:8b:09:6e:6d:01:63:21:
ae:e3:ec:11:5c:47:ac:64:d6:23:0e:28:9b:b2:a8:
dc:ba:ff:a5:68:6e:86:36:7d:96:fe:c8:3f:a5:1c:
35:a4:e5:d9:f4:a9:00:d8:89:2e:a6:3d:5c:45:90:
be:bd:c2:41:3c:50:f6:4c:4b:8b:40:81:7d:6a:d9:
2d:bb:0f:e9:12:59:9b:db:d5:49:61:cb:39:01:81:
84:95:51:a4:7b:0a:4e:60:cd:e7:53:b2:9e:56:97:
1a:12:dd:d8:65:77:f5:cc:28:2c:b3:71:f4:06:75:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:31:9B:F7:7D:7D:1C:BE:49:BC:F1:D5:39:75:9B:B3:CD:31:AB:A6
X509v3 Authority Key Identifier:
keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:17:e9:c1:53:ce:20:c4:56:f4:36:a6:35:e2:56:20:8b:85:
08:3a:98:f8:ba:6a:af:1e:18:6a:5f:72:8a:21:a3:79:81:f6:
f0:76:53:5e:23:a5:13:ae:c3:03:b3:29:2c:c9:fb:dd:90:3e:
29:ee:e1:fe:ed:a0:c7:48:8f:5f:1a:f4:69:f9:ca:2d:d8:09:
a3:92:32:ad:b7:92:61:17:95:33:e2:44:30:99:e5:cd:ca:6f:
5b:ca:2d:e5:eb:3f:8f:8e:d2:7f:2f:12:ff:a0:4d:dc:7a:e1:
47:70:f8:54:1e:0c:81:84:80:ba:a6:b8:2a:93:d3:28:d7:88:
1c:10:b5:69:d3:8e:f6:64:cc:aa:e1:3a:01:14:99:5e:24:99:
93:ce:ee:7a:74:97:ed:96:46:ec:b9:ff:7a:f4:a0:e7:3e:3d:
0f:a2:00:fb:57:b0:b9:cd:dc:80:16:62:92:e6:9c:8e:a0:39:
2d:dc:8d:06:94:3a:81:4f:7a:ea:78:4c:eb:88:cd:d5:b5:1b:
65:0f:ea:17:69:11:89:15:f2:45:a2:28:b6:b9:15:fb:f6:2e:
4a:18:12:5e:bb:aa:d3:8b:09:9a:85:78:0a:4d:d5:9a:5b:75:
4f:b8:52:28:7c:71:61:b6:58:35:20:e2:df:99:eb:8c:4e:96:
3a:28:c0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:32:59 2026 by rpki-client