Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File: 2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier: I4VA3XipI4vYHh40csW0BCKDKFHb6qCC81+5TqwhrWA=
Subject key identifier: 90:87:31:87:8B:3B:1F:A1:80:19:98:84:CA:E6:A5:A3:DA:41:4A:9B
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer: /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial: 01A0CBC7A25C39FCA5F19920773DC910A4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number: 0B79
Signing time: Wed 23 Sep 2026 01:00:53 +0000
Manifest this update: Wed 23 Sep 2026 01:00:53 +0000
Manifest next update: Thu 24 Sep 2026 01:00:53 +0000
Files and hashes: 1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: y9o6EYHjhHmVpY51ElEOoAa9yerAtXYB/JLTGUyBrdc=)
2: H2tuVkWgjp6XpzlorJ0CMh9rzOQ.roa (hash: has59eIOKa6q3uHYWVg7mO28StrkkiAgF2EF9c4ggME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:a2:5c:39:fc:a5:f1:99:20:77:3d:c9:10:a4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Validity
Not Before: Sep 23 01:00:53 2026 GMT
Not After : Sep 24 01:00:53 2026 GMT
Subject: CN=908731878b3b1fa180199884cae6a5a3da414a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:0c:4a:17:27:eb:91:52:0f:95:fc:27:53:
90:3c:89:60:6f:b3:4f:e1:99:4d:c9:5e:b5:4f:41:
58:8d:f6:50:bd:d6:7f:d3:f7:43:e8:e9:1d:79:62:
07:3e:76:76:e6:8e:70:a0:8c:96:a3:0a:fa:0b:4c:
3b:13:2e:32:3d:96:ad:91:ca:38:c6:ca:b7:cc:56:
89:da:fb:df:f3:51:9d:a8:78:29:dc:10:56:8d:ee:
c1:81:46:8c:72:58:c1:bf:52:fa:a6:96:e3:50:f3:
93:d1:a5:c2:9d:bc:a8:03:9e:be:4f:74:64:70:8d:
eb:e1:7b:e0:79:58:b7:12:29:4f:30:8c:a6:1b:9d:
9c:c8:40:c5:1d:26:40:3c:95:5f:6f:83:9b:f3:7a:
89:53:18:07:a4:f1:7b:9d:ad:94:36:a9:58:38:49:
60:d7:69:cc:66:95:54:88:b1:16:11:a1:39:dc:d1:
d5:66:6e:3c:ce:59:a9:32:d6:e7:61:e0:4b:cf:ee:
e2:c6:9a:4c:27:a8:6d:f9:56:79:0d:9c:55:6d:dd:
a9:6e:62:a6:9a:38:1a:d9:b0:33:bc:99:79:9d:a1:
30:6e:c9:d4:3e:90:a4:d5:5f:11:c1:85:0a:44:31:
5e:be:78:79:aa:ce:8a:a9:25:02:8b:6b:0e:8d:67:
5b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:87:31:87:8B:3B:1F:A1:80:19:98:84:CA:E6:A5:A3:DA:41:4A:9B
X509v3 Authority Key Identifier:
keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a2:ed:7e:d8:3a:5b:e8:f2:23:6b:24:5a:9a:2e:e8:d3:fc:
40:2b:46:0f:87:a9:a5:a5:e0:60:cc:ad:4d:97:57:2b:f8:a9:
34:a4:2f:41:96:2f:fe:1f:1d:86:8d:d1:20:38:5c:84:7a:e8:
1d:bf:14:c6:2e:83:42:c1:f9:cd:c8:72:93:ee:33:94:dc:45:
e8:59:64:2e:ef:04:2c:16:85:47:f9:70:7a:7b:05:0f:79:84:
97:b9:53:43:24:af:40:15:e7:54:64:f5:f2:4e:f6:9e:7e:4e:
58:62:e4:2c:a4:3c:c8:b1:59:d5:70:3b:b7:ba:19:6f:7a:7f:
c8:de:e9:15:b7:aa:b4:dc:fd:24:d0:ec:e5:6f:f0:7d:bc:0b:
78:29:08:45:c1:8f:0c:0e:e9:2d:14:80:84:8d:ec:ad:eb:26:
f6:9a:76:51:25:e8:df:1b:c0:43:98:05:29:16:41:b5:e0:3e:
36:f5:27:05:ec:00:dd:bb:6d:6e:60:f2:5d:e6:5a:7d:40:7e:
5a:a2:cf:35:26:3e:b8:51:4e:77:28:30:d3:3b:b6:dd:93:65:
b4:ec:4b:9a:63:12:b7:e9:59:c6:43:f6:8b:7f:14:09:d4:61:
6c:32:fc:a6:e7:6a:a0:ef:db:1f:8a:03:68:a2:dd:fb:08:07:
7d:3e:d6:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDLx6JcOfyl8Zkgdz3JEKTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MGI0OTdkNTFiZDlmNDdiODRmNjkzZDY4N2ZiZThjZjZj
ZmZiNzUwHhcNMjYwOTIzMDEwMDUzWhcNMjYwOTI0MDEwMDUzWjAzMTEwLwYDVQQD
Eyg5MDg3MzE4NzhiM2IxZmExODAxOTk4ODRjYWU2YTVhM2RhNDE0YTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPoMShcn65FSD5X8J1OQPIlgb7NP
4ZlNyV61T0FYjfZQvdZ/0/dD6OkdeWIHPnZ25o5woIyWowr6C0w7Ey4yPZatkco4
xsq3zFaJ2vvf81GdqHgp3BBWje7BgUaMcljBv1L6ppbjUPOT0aXCnbyoA56+T3Rk
cI3r4XvgeVi3EilPMIymG52cyEDFHSZAPJVfb4Ob83qJUxgHpPF7na2UNqlYOElg
12nMZpVUiLEWEaE53NHVZm48zlmpMtbnYeBLz+7ixppMJ6ht+VZ5DZxVbd2pbmKm
mjga2bAzvJl5naEwbsnUPpCk1V8RwYUKRDFevnh5qs6KqSUCi2sOjWdbQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCHMYeLOx+hgBmYhMrmpaPaQUqbMB8GA1UdIwQY
MBaAFNgLSX1RvZ9HuE9pPWh/voz2z/t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MjBkYzQtY2QzYy00Y2FjLWFjZmMt
NGM4NTQ0NWEwMzZhLzEvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy85MjBkYzQtY2QzYy00Y2FjLWFjZmMtNGM4NTQ0NWEwMzZh
LzEvMkF0SmZWRzluMGU0VDJrOWFILS1qUGJQLTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArKLtftg6
W+jyI2skWpou6NP8QCtGD4eppaXgYMytTZdXK/ipNKQvQZYv/h8dho3RIDhchHro
Hb8Uxi6DQsH5zchyk+4zlNxF6FlkLu8ELBaFR/lwensFD3mEl7lTQySvQBXnVGT1
8k72nn5OWGLkLKQ8yLFZ1XA7t7oZb3p/yN7pFbeqtNz9JNDs5W/wfbwLeCkIRcGP
DA7pLRSAhI3sresm9pp2USXo3xvAQ5gFKRZBteA+NvUnBewA3bttbmDyXeZafUB+
WqLPNSY+uFFOdygw0zu23ZNltOxLmmMSt+lZxkP2i38UCdRhbDL8pudqoO/bH4oD
aKLd+wgHfT7WkA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:18:19 2026 by rpki-client