Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File: 2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier: BTXdLSaMid8qsRIWSKnlVRV7i4gdmtTKiRfliZeGZJ4=
Subject key identifier: CA:BE:7B:47:31:B2:B9:21:85:50:F3:FF:DB:3A:41:D7:17:1E:ED:6A
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer: /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial: 019E1C4745F9369D0229F5EC0624B8813AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number: 0A15
Signing time: Tue 12 May 2026 13:01:33 +0000
Manifest this update: Tue 12 May 2026 13:01:33 +0000
Manifest next update: Wed 13 May 2026 13:01:33 +0000
Files and hashes: 1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: gX7nMrRFGneoXNchn9w1NVhNrt3SJytjKZcVAeqHYag=)
2: H2tuVkWgjp6XpzlorJ0CMh9rzOQ.roa (hash: has59eIOKa6q3uHYWVg7mO28StrkkiAgF2EF9c4ggME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:45:f9:36:9d:02:29:f5:ec:06:24:b8:81:3a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Validity
Not Before: May 12 13:01:33 2026 GMT
Not After : May 13 13:01:33 2026 GMT
Subject: CN=cabe7b4731b2b9218550f3ffdb3a41d7171eed6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:ec:f1:1d:3b:83:4a:a4:fa:16:3f:e2:78:
d8:9e:e8:77:06:ce:b8:2b:1e:d8:f3:e6:56:17:c3:
5b:25:f2:14:12:c0:42:76:d0:29:1e:2d:02:28:7b:
5e:f7:bd:a4:60:7a:b8:52:e5:fb:36:90:ef:f2:53:
8e:f9:28:ff:25:72:7f:1f:af:52:2c:1a:17:4e:03:
46:9c:22:5c:bf:8e:4c:f0:2d:4d:64:ad:7a:73:f8:
fa:15:36:9d:26:e0:05:4d:75:5b:23:4b:c5:33:a9:
1a:11:9b:ba:fb:31:f1:bd:f7:aa:1a:b1:2c:e1:78:
af:a3:40:b1:12:0b:3d:8f:c8:54:26:b9:c3:ef:94:
9a:a6:ea:c8:3f:ec:77:54:7e:a4:93:8f:87:1d:3a:
a7:d4:3a:e7:95:18:09:8f:9c:27:2f:4f:5c:af:69:
49:53:8a:3b:b2:bc:cb:97:a7:36:ab:ed:a9:a0:48:
20:00:f9:77:21:e2:33:25:5d:aa:ca:7d:04:e1:d1:
1d:99:47:79:a7:eb:1d:7e:97:5b:78:0e:05:32:f1:
54:8e:5a:05:fa:4d:f4:e6:6f:12:c7:40:cf:c9:45:
9a:1c:c6:20:cd:24:de:8a:9d:64:bc:4a:b2:1c:e6:
19:01:f4:da:ad:a0:f5:46:26:e6:19:dd:8b:84:e8:
c6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BE:7B:47:31:B2:B9:21:85:50:F3:FF:DB:3A:41:D7:17:1E:ED:6A
X509v3 Authority Key Identifier:
keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e8:b3:48:d4:e5:b4:f3:0f:0a:89:4a:d0:1c:d1:f9:be:22:
b8:cd:8c:54:81:87:be:3f:e2:ee:5e:4b:c0:86:e4:0f:ea:8b:
f2:7c:99:46:8d:51:64:af:6d:9d:2f:4c:75:41:55:8b:03:8c:
34:9f:9b:5e:d4:30:fa:c0:a2:c0:2f:38:38:6c:57:d1:31:94:
53:f1:09:75:ad:5d:d1:48:1e:50:25:ad:3e:73:2a:38:99:6b:
1e:46:d4:50:1e:3b:db:ba:e0:68:d1:c5:db:1d:6a:c5:06:64:
2c:18:ad:00:5a:84:4d:04:95:5c:8c:e0:bf:40:bc:2c:b9:e9:
74:6e:d0:e3:45:f7:c1:ea:dd:2f:0c:83:e3:9f:bf:ff:ae:9b:
90:1f:90:b3:12:7f:40:49:3c:37:90:76:a9:35:08:bc:a8:7b:
33:fa:b2:86:59:c8:d9:bd:57:25:b0:da:b0:3e:5f:a5:a3:da:
e0:27:8f:ce:01:f2:a0:df:3a:be:b0:32:36:b4:28:a5:06:08:
0a:49:0e:87:f4:1f:bb:bf:9d:78:a7:c3:d9:73:3e:cb:80:c3:
3b:25:b3:33:ea:91:e4:1d:4d:81:4a:19:33:0f:db:db:3b:42:
ed:68:df:bd:34:69:2c:0a:30:dc:8c:48:ec:ba:a6:c6:82:f5:
3a:86:af:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:40:58 2026 by rpki-client