Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File: 2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier: feZDx6BUhBKdNVTlo+ndHugyaKMSqFpMl+Nfwpkji1s=
Subject key identifier: C3:B5:29:36:C9:58:AE:6E:42:E9:4E:B3:76:FA:BE:12:10:C0:10:41
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer: /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial: 01A1C10AADB5F39E7E1D21A106559E7EC7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number: 0BF8
Signing time: Mon 09 Nov 2026 16:01:04 +0000
Manifest this update: Mon 09 Nov 2026 16:01:04 +0000
Manifest next update: Tue 10 Nov 2026 16:01:04 +0000
Files and hashes: 1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: 9rsRa+4IPdUlJCr+cIhSTzM4RrLUxJVTyIxzzhtVRmo=)
2: H2tuVkWgjp6XpzlorJ0CMh9rzOQ.roa (hash: has59eIOKa6q3uHYWVg7mO28StrkkiAgF2EF9c4ggME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:0a:ad:b5:f3:9e:7e:1d:21:a1:06:55:9e:7e:c7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Validity
Not Before: Nov 9 16:01:04 2026 GMT
Not After : Nov 10 16:01:04 2026 GMT
Subject: CN=c3b52936c958ae6e42e94eb376fabe1210c01041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:e0:6b:e5:05:b8:fe:27:b3:ac:5e:03:83:
6a:d5:89:5c:b6:7c:92:07:c8:07:9d:91:7f:04:d9:
f7:7c:6d:13:c2:cc:7a:34:71:84:1c:26:13:80:bc:
ce:7b:d5:a6:e5:73:c7:f9:60:7d:73:e2:90:8c:47:
d2:d6:0e:47:c0:95:f8:85:b2:3c:21:fd:f0:93:ba:
56:a7:0d:72:53:0e:6a:80:aa:8c:36:ed:c2:11:35:
04:be:46:2f:1a:d6:b4:9c:4c:df:4f:44:07:28:0a:
f2:05:55:65:47:e9:a3:11:ff:80:51:f9:8d:55:28:
1f:a3:62:02:c1:d4:41:60:77:88:1b:d2:9f:5f:54:
62:8d:5d:9b:03:5b:ee:a4:26:d4:45:cc:31:b8:d3:
b4:b0:49:f0:93:ff:d4:6f:5e:d7:00:4c:c5:46:dc:
75:0c:b4:ad:c3:74:f5:79:db:59:4f:69:ae:aa:12:
70:5f:fa:c0:ed:9c:16:b7:60:2a:85:39:46:2c:99:
26:3c:7c:77:63:1c:e2:38:67:5c:7b:d0:7b:88:0d:
0d:52:36:44:87:2a:45:8a:a7:05:c8:c1:45:a8:12:
c4:23:34:05:15:15:d5:71:00:2b:da:4b:33:e1:8a:
a6:7f:25:63:9c:b6:46:7d:e4:63:63:38:9b:cc:5a:
f1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B5:29:36:C9:58:AE:6E:42:E9:4E:B3:76:FA:BE:12:10:C0:10:41
X509v3 Authority Key Identifier:
keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:24:c2:55:f3:e9:c1:79:5e:f3:c5:83:05:d4:8a:0c:6c:2a:
89:b7:c6:23:7b:29:80:0d:71:bc:51:cf:5b:c8:d8:5c:52:99:
1e:89:70:5d:29:31:2a:b1:e1:93:2a:96:c9:60:ae:2d:a3:62:
dd:c2:cd:53:5e:fe:cd:b4:fc:66:c0:f7:12:b6:4e:7c:46:66:
c3:fa:55:5a:b8:5b:8c:b7:99:80:1a:9e:f5:1d:59:46:39:a4:
02:87:9e:fe:aa:0e:b9:60:d1:7f:72:04:94:2e:97:c9:8b:c8:
bb:ad:87:1f:33:17:e4:21:1e:28:73:ef:fb:e8:99:41:fe:ec:
6b:0a:c0:06:72:b7:95:23:9a:b8:9a:95:20:a3:80:70:d5:d0:
41:69:13:54:88:24:9d:5d:6b:be:58:2f:34:c5:d7:15:ee:37:
a7:48:4f:d5:31:52:03:9c:f5:0d:f8:e2:84:5a:0f:79:e0:f4:
1a:d1:a7:d0:a1:b2:0f:b0:6e:46:58:f7:9a:18:c3:e8:6c:d4:
10:1c:6f:c5:fb:c8:c5:cb:f0:c4:de:40:5c:35:95:9e:25:45:
4e:31:7a:7e:65:d3:f2:d6:73:40:b2:14:84:58:40:21:fb:07:
40:4b:c3:fa:4e:f7:6b:8b:26:c0:67:8d:04:0a:36:fa:b5:7c:
aa:6b:2d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 01:42:26 2026 by rpki-client