Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File: 2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier: QyroGqOoouOpMYvDhczz5hkwUW+u+Z+R8aCgapQ1voY=
Subject key identifier: 28:EA:63:80:45:EA:0C:E2:FF:41:5F:5C:06:19:26:95:5A:CD:5C:3F
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer: /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial: 019D28F2C44E06F96789D67C5FE8989BA575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number: 0997
Signing time: Thu 26 Mar 2026 07:01:31 +0000
Manifest this update: Thu 26 Mar 2026 07:01:31 +0000
Manifest next update: Fri 27 Mar 2026 07:01:31 +0000
Files and hashes: 1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: 8pF6Efrd9ODD5XsN/dj9+97tvdaN5sXm/XFHZvl0oBY=)
2: H2tuVkWgjp6XpzlorJ0CMh9rzOQ.roa (hash: has59eIOKa6q3uHYWVg7mO28StrkkiAgF2EF9c4ggME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:c4:4e:06:f9:67:89:d6:7c:5f:e8:98:9b:a5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Validity
Not Before: Mar 26 07:01:31 2026 GMT
Not After : Mar 27 07:01:31 2026 GMT
Subject: CN=28ea638045ea0ce2ff415f5c061926955acd5c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:aa:e8:f0:3c:a9:2e:5c:1c:fc:7e:3d:2c:bf:
af:2c:47:0c:ec:fa:91:f4:50:dd:29:c1:96:12:87:
4e:1d:23:3d:44:a8:6c:89:1e:0f:38:d7:8c:80:bd:
50:21:85:26:38:f1:d5:5f:55:98:35:99:58:93:be:
5d:eb:f1:b8:a8:61:35:fe:98:46:ca:9f:15:7e:84:
02:0c:21:42:9b:94:0f:9c:82:72:18:15:4b:b4:d9:
45:07:61:b9:78:d3:2f:88:3d:38:35:0e:b1:3f:e4:
11:47:f0:b4:56:4f:5b:54:70:7b:64:7b:a9:fc:21:
21:02:f8:84:ae:95:94:69:5f:f3:ba:a0:40:3f:20:
66:c4:a4:fb:ec:e7:d4:38:e7:6e:4b:64:71:52:ff:
1d:50:23:2a:33:39:95:53:3d:03:84:46:d0:74:ae:
59:c3:c9:0f:77:8f:23:ce:59:db:b2:16:5f:46:20:
3b:d5:3a:33:d5:ad:7f:1d:cc:3b:c3:c8:d5:84:5a:
06:d0:77:62:85:b0:5b:29:60:aa:d0:31:ff:97:87:
32:20:f5:6d:17:10:17:a0:e3:9a:1d:e7:81:a5:9c:
d5:a4:2e:28:7d:31:dd:fd:f5:c8:34:ac:e8:4e:57:
f5:d0:f3:6f:5f:bd:17:33:ba:6b:82:a9:cc:8e:46:
9b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:EA:63:80:45:EA:0C:E2:FF:41:5F:5C:06:19:26:95:5A:CD:5C:3F
X509v3 Authority Key Identifier:
keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:05:a7:ca:74:e6:93:52:d3:32:69:33:4d:ac:41:c0:78:7e:
ac:d2:9c:06:e7:d6:69:ec:c2:a8:fb:fa:fa:d9:3d:99:f7:b0:
c7:cc:ee:1f:24:dc:6d:53:15:40:04:fd:0a:ca:26:40:88:84:
4a:72:7c:a9:bf:00:78:f7:84:18:a7:4e:9b:49:71:9c:44:fd:
1a:f4:8a:f5:1f:a7:b7:61:31:c5:db:81:41:86:e2:ab:b5:99:
5c:cc:84:62:0a:85:1a:29:28:3b:6b:7d:a9:08:cf:a2:82:95:
bf:f3:d8:23:73:66:67:5b:2d:5c:01:d2:9b:a3:a9:e9:3c:fe:
c9:66:64:b8:76:f5:5c:a8:ea:d6:2e:44:9e:f6:6c:de:89:93:
7a:b9:4f:28:c9:a1:35:25:d9:89:ef:72:70:bc:d9:19:3c:30:
37:0a:07:9c:a4:90:7c:7d:ea:a3:e5:c0:3f:bc:48:1b:0a:96:
a8:a9:2f:7a:6d:e8:7f:c1:d2:67:36:6b:70:1a:08:a9:56:9d:
2d:16:12:32:40:f8:19:f7:f4:e1:1e:86:01:41:9f:ef:f5:b0:
30:3d:59:d7:1d:ed:1d:a9:37:df:fe:68:f3:e9:54:23:dd:fd:
71:e5:bc:dc:ff:4f:b6:2f:4d:f8:21:c1:67:48:38:90:41:2e:
a7:b5:12:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:39:39 2026 by rpki-client