Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
File: 2AtJfVG9n0e4T2k9aH--jPbP-3U.mft (raw, json)
Hash identifier: ws5nmYqow+R+Mqpp5O23OwofiP1dKrgseHkpnOGv9jA=
Subject key identifier: B0:40:F1:AD:33:B9:1A:82:E3:D4:56:7C:37:F8:D6:B1:5E:4F:66:F6
Authority key identifier: D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
Certificate issuer: /CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Certificate serial: 019FAA19ECD364847D3E4EB5CFEC6950038F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
Manifest number: 0AE3
Signing time: Tue 28 Jul 2026 19:00:53 +0000
Manifest this update: Tue 28 Jul 2026 19:00:53 +0000
Manifest next update: Wed 29 Jul 2026 19:00:53 +0000
Files and hashes: 1: 2AtJfVG9n0e4T2k9aH--jPbP-3U.crl (hash: 9yFly9iTvTiOZF2H5D3itLRYIcxKaxzyB2WkhFhtbYg=)
2: H2tuVkWgjp6XpzlorJ0CMh9rzOQ.roa (hash: has59eIOKa6q3uHYWVg7mO28StrkkiAgF2EF9c4ggME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:19:ec:d3:64:84:7d:3e:4e:b5:cf:ec:69:50:03:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b497d51bd9f47b84f693d687fbe8cf6cffb75
Validity
Not Before: Jul 28 19:00:53 2026 GMT
Not After : Jul 29 19:00:53 2026 GMT
Subject: CN=b040f1ad33b91a82e3d4567c37f8d6b15e4f66f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:3a:59:28:4b:6d:09:54:f2:41:9d:fe:ae:
88:49:e8:47:92:e6:ff:8e:af:9b:cc:79:6c:ba:78:
fd:4e:01:9c:1f:e2:51:98:d6:df:80:69:ac:ea:4d:
01:87:76:fb:64:ea:10:77:4f:b3:18:57:8d:2e:58:
03:a6:53:1d:d7:1f:f9:eb:00:91:21:e6:31:56:93:
ff:3f:44:a8:24:6d:dd:2a:75:47:70:65:f7:49:b0:
eb:12:2f:0b:56:be:7e:d7:83:ed:a3:3f:fb:e2:00:
4a:75:84:90:2e:49:0e:6f:33:a5:8a:3d:f2:bc:b4:
76:a9:2e:99:61:5d:98:e4:2b:ef:39:d1:15:ce:a6:
48:02:58:73:32:47:08:d1:5a:2f:4f:85:af:c8:48:
5f:3e:75:0a:5d:67:3e:b4:c1:5c:44:68:9e:63:c0:
df:78:cc:8c:69:94:4b:51:6e:dc:f1:c6:85:2d:43:
bf:5a:73:d3:39:11:08:9c:b5:a4:28:dc:b0:bc:cd:
34:8c:8f:22:2b:20:65:e5:e6:61:58:df:15:6e:b3:
6b:d5:ba:2c:12:4d:9d:52:0a:d2:36:15:6e:6d:fa:
06:67:a2:6a:56:fe:2d:59:0b:d0:f6:f7:65:62:59:
1f:08:23:ac:6c:48:55:80:8c:bc:3a:53:85:34:a6:
87:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:40:F1:AD:33:B9:1A:82:E3:D4:56:7C:37:F8:D6:B1:5E:4F:66:F6
X509v3 Authority Key Identifier:
keyid:D8:0B:49:7D:51:BD:9F:47:B8:4F:69:3D:68:7F:BE:8C:F6:CF:FB:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtJfVG9n0e4T2k9aH--jPbP-3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/920dc4-cd3c-4cac-acfc-4c85445a036a/1/2AtJfVG9n0e4T2k9aH--jPbP-3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:5b:14:8e:f5:b0:38:58:7a:de:02:40:8c:29:d3:67:1e:55:
f6:ad:96:85:f2:c1:16:23:bd:14:6f:ec:da:f3:c0:58:cc:9a:
6f:21:33:cf:4a:47:50:77:2e:5e:80:d0:94:65:70:86:d1:2f:
31:15:9f:d8:e6:ac:61:54:42:13:69:be:9d:80:ee:2c:71:85:
0c:ca:bd:27:2e:b7:30:b3:c3:a6:9a:7a:37:b8:97:43:4a:82:
f1:9a:0b:f8:e9:1b:9c:8c:42:4b:ef:4d:78:19:80:c2:7b:2e:
74:8b:0a:ac:f2:03:7a:27:b8:b3:db:be:00:47:e5:59:e0:43:
6d:a9:e8:bc:22:e8:88:10:e8:44:ef:6d:c6:57:ca:16:60:a9:
20:eb:f1:f8:45:c0:b3:db:4b:a4:5e:fa:4e:6c:67:11:19:fa:
ca:ec:d7:45:e3:d2:c0:08:2e:4d:3a:09:98:ee:bb:b0:88:72:
1a:6c:64:4d:8e:68:76:f2:ea:c7:ac:de:90:59:04:e1:9c:bc:
0c:10:33:51:1a:b2:0e:2a:67:d5:03:29:5b:8e:a8:03:4e:32:
75:b6:96:1c:23:ec:60:dc:92:a6:0b:08:81:83:ab:00:f4:95:
6d:92:07:78:2e:fd:da:e8:ad:75:50:ea:38:1a:20:9b:b8:bd:
62:28:a6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:25:36 2026 by rpki-client