Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json)
Hash identifier: R+jYan3f/+jUoS3dUv3Fp/9+gLB8gPr/W6UaQq4rQBA=
Subject key identifier: 82:45:85:CA:7E:42:5F:23:0E:05:67:FD:76:8D:7C:54:FE:3B:72:06
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Certificate issuer: /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial: 019D29613394EAC2391B6825D360E6F8AF33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
Manifest number: 11E3
Signing time: Thu 26 Mar 2026 09:02:09 +0000
Manifest this update: Thu 26 Mar 2026 09:02:09 +0000
Manifest next update: Fri 27 Mar 2026 09:02:09 +0000
Files and hashes: 1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: lIMGsad/hyMrnEQC7l3C9iJzjGETrWAhZur9Yp1jd7c=)
2: 5XOq4BMraJ6-AegtlaIWTtUkqxo.roa (hash: hDvJTYUbzgM4Etq6PCbmzufkHK2RaHqzKqogboxsQ0c=)
3: iIJMhiXnC0TkNFq6MHPCGZcJKp4.roa (hash: 6M+PNBTs7Ydc22YxEOoAXWjHO6P/9d3SsLY8rQkfu3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:33:94:ea:c2:39:1b:68:25:d3:60:e6:f8:af:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Validity
Not Before: Mar 26 09:02:09 2026 GMT
Not After : Mar 27 09:02:09 2026 GMT
Subject: CN=824585ca7e425f230e0567fd768d7c54fe3b7206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8a:76:3b:29:0a:79:a6:be:89:f5:a3:7f:10:
8a:af:ab:7f:16:2c:f9:bb:e4:f1:b1:0f:24:a3:96:
2f:9f:1b:07:48:59:08:00:d0:1b:f9:0b:79:79:c0:
81:c8:45:04:db:1a:26:d1:3f:ee:fe:ae:07:21:1c:
dc:92:16:d2:da:ca:27:bb:95:55:91:db:7d:6c:84:
49:ba:a5:7d:66:3c:01:cb:69:15:0a:6f:15:70:a0:
21:2d:6b:8b:4c:36:60:64:8c:47:28:5c:c1:08:06:
b3:9c:81:2b:57:c7:6b:d2:89:1e:44:05:b9:0f:aa:
b6:8c:73:63:88:ea:74:b5:b9:2b:7a:f3:e8:8b:61:
b4:3c:45:2a:ff:cc:bf:0e:1b:1c:34:3f:23:32:61:
ef:59:6b:b0:f0:c6:a5:13:f9:68:52:28:01:4b:9a:
97:f0:12:ab:ed:a6:49:a0:a4:1d:75:d7:e0:31:68:
20:08:d6:88:4a:b9:b7:11:87:63:ba:f2:43:90:1e:
3b:15:57:03:1f:4c:20:02:9c:dc:28:5e:d0:d2:8f:
00:10:9d:1b:03:a6:7a:1c:1e:5b:6c:a0:d5:21:f3:
24:d2:1a:87:74:01:79:4b:02:25:f3:b1:61:e7:fd:
ee:8d:52:7f:d8:a1:9f:1b:e6:c3:a0:36:f4:d8:ef:
98:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:45:85:CA:7E:42:5F:23:0E:05:67:FD:76:8D:7C:54:FE:3B:72:06
X509v3 Authority Key Identifier:
keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d2:ba:9f:79:f5:ff:26:5e:43:e5:c5:e4:63:80:59:17:0a:
a2:a4:1c:6b:0a:c6:65:98:76:b5:cb:d9:66:d9:e1:83:49:29:
70:f8:4e:01:7f:ce:3a:ef:b7:1e:ca:b0:8d:b2:75:aa:04:69:
1e:e9:0a:ff:44:15:c6:4e:ec:15:d5:16:9d:f0:ec:ad:98:10:
55:1a:48:e0:3f:be:32:84:f3:6b:c4:89:a1:14:7b:d2:ee:6b:
ab:c4:f5:62:83:bc:de:0b:b5:a7:55:bb:71:65:50:3a:28:02:
72:78:12:f5:0e:bd:cd:03:7b:df:ef:b8:9a:ce:1c:9d:96:89:
3d:c9:55:ec:14:b0:2d:f9:0a:06:bb:4a:37:07:a0:b4:87:30:
a8:3a:fd:5f:a0:37:43:e2:40:64:4e:41:a5:43:6b:72:3a:13:
c6:ea:36:e1:40:1b:85:7f:3c:f5:7f:a7:bd:d1:72:1b:8f:cf:
fa:b5:c5:25:00:bc:01:8d:7c:91:ca:9a:3c:af:ed:db:c7:e4:
2d:be:09:1e:a8:d5:43:25:3c:03:82:9d:e8:67:20:1e:8a:af:
62:07:1c:c5:d8:4d:1d:35:ed:b5:a3:f6:7d:d5:5e:20:cb:41:
9f:96:9e:30:d0:b9:35:ac:44:de:dc:0a:83:b1:cd:8a:87:f3:
02:91:4a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:51:57 2026 by rpki-client