Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json)
Hash identifier: FIZ2lJb5TlSbs/65UoTYbe/9seWcdm9X6Le7nz3aFVI=
Subject key identifier: 61:5B:8E:13:CD:A2:33:1E:3B:16:AD:43:E3:ED:F1:62:29:54:1C:D2
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Certificate issuer: /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial: 019E1CB4F4CDF40A40210E55DC31AFCC03D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
Manifest number: 1261
Signing time: Tue 12 May 2026 15:01:21 +0000
Manifest this update: Tue 12 May 2026 15:01:21 +0000
Manifest next update: Wed 13 May 2026 15:01:21 +0000
Files and hashes: 1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: /74KRiutNRJzCBtEIPCC1qzaZ+Zu2QqyldJ0ttfu4u0=)
2: 5XOq4BMraJ6-AegtlaIWTtUkqxo.roa (hash: hDvJTYUbzgM4Etq6PCbmzufkHK2RaHqzKqogboxsQ0c=)
3: iIJMhiXnC0TkNFq6MHPCGZcJKp4.roa (hash: 6M+PNBTs7Ydc22YxEOoAXWjHO6P/9d3SsLY8rQkfu3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:f4:cd:f4:0a:40:21:0e:55:dc:31:af:cc:03:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Validity
Not Before: May 12 15:01:21 2026 GMT
Not After : May 13 15:01:21 2026 GMT
Subject: CN=615b8e13cda2331e3b16ad43e3edf16229541cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6d:6f:47:6c:19:81:ec:e0:f5:af:ed:4b:68:
34:2f:62:1d:26:b4:0e:3d:5c:53:2e:f5:bf:b9:1f:
a2:97:d4:d3:ba:7a:d0:4a:60:79:d1:95:b5:d3:7b:
47:c6:4f:90:d4:24:16:37:00:e9:5e:df:44:9d:40:
b9:45:20:ab:4b:ef:d9:ff:e7:06:cb:8d:6a:61:90:
5e:37:06:92:c4:46:4e:0f:ac:b4:cc:a1:53:9f:50:
99:6a:fb:bf:0f:80:19:26:6c:e1:89:7e:ff:7f:02:
5e:f0:43:c8:9e:be:83:30:32:39:5c:3b:54:b7:0f:
5a:d2:7c:f7:7a:aa:43:2a:39:7c:9f:35:63:d5:b3:
ac:5a:96:7d:22:cf:84:d3:db:23:3b:50:29:e3:ed:
00:41:16:c4:88:7f:cd:fc:40:87:d2:0c:d2:f7:ee:
05:2d:06:d9:da:67:6f:33:41:24:cf:49:1f:b3:72:
2f:e9:eb:6c:fa:7f:f1:da:ff:0c:2d:07:d0:59:bb:
56:df:b8:64:e1:b2:20:0a:33:82:62:fd:a9:ad:d0:
34:5b:e9:f6:75:33:c2:93:16:16:96:0b:73:b7:b9:
6c:4a:a5:87:65:ad:2f:2d:4e:13:ee:ea:df:0e:b4:
a8:29:d0:92:ae:97:c5:4f:9c:fe:bf:29:9f:49:35:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5B:8E:13:CD:A2:33:1E:3B:16:AD:43:E3:ED:F1:62:29:54:1C:D2
X509v3 Authority Key Identifier:
keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f0:16:7e:82:df:b1:ab:47:67:ef:57:14:24:7f:5c:2a:e4:
8c:76:d2:2d:06:1c:c2:91:12:51:9b:a1:e4:2b:ff:b9:61:a1:
1c:07:21:ed:65:e0:1d:4e:ec:3f:59:53:80:4b:2c:be:46:b6:
ec:64:cb:02:9c:de:a2:39:72:49:53:e5:7b:ac:4c:2b:65:60:
59:8f:3a:4f:d0:90:3e:c5:55:ba:2e:54:dd:56:fb:1c:73:17:
8f:b4:39:5a:8e:73:14:0b:98:54:59:f2:8c:59:66:eb:93:34:
8c:a9:2b:b4:2f:1e:3a:b2:50:6f:03:55:a3:67:95:39:50:5e:
3a:c7:c0:19:86:06:bc:ea:70:56:32:6e:13:f7:4e:d2:86:d4:
e1:b5:73:45:82:9b:32:b9:50:51:b0:ce:07:f7:9c:b5:76:1f:
bc:4f:eb:af:90:f5:54:23:e7:5c:c4:08:25:74:d3:40:9d:9f:
36:ac:06:37:64:1d:fc:0b:50:50:f1:26:92:2b:78:ee:c3:27:
82:41:26:93:91:39:a1:e3:47:d1:95:d5:af:e0:e7:ae:92:0a:
08:51:dd:ee:f4:dc:4f:99:ae:17:24:ed:df:ec:15:e1:e8:d1:
5f:7e:33:28:12:17:a0:88:67:c8:fd:3e:f7:88:69:20:11:1a:
33:ab:c4:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:52 2026 by rpki-client