Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json)
Hash identifier: SW32txGje5vHtky7XGvJzA9/sX0VFneTfKujNs7JLTM=
Subject key identifier: E4:74:9E:53:4B:95:15:91:FB:86:83:35:B7:7B:13:2E:39:90:97:34
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Certificate issuer: /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial: 019CABD9E19DFE441F59C9809582CF2FE12F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
Manifest number: 11A2
Signing time: Mon 02 Mar 2026 00:01:48 +0000
Manifest this update: Mon 02 Mar 2026 00:01:48 +0000
Manifest next update: Tue 03 Mar 2026 00:01:48 +0000
Files and hashes: 1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: kapDQWG/OetuRdWXdCJSMAoHA9cTlLHB2thVvI8s0Uo=)
2: 5XOq4BMraJ6-AegtlaIWTtUkqxo.roa (hash: hDvJTYUbzgM4Etq6PCbmzufkHK2RaHqzKqogboxsQ0c=)
3: iIJMhiXnC0TkNFq6MHPCGZcJKp4.roa (hash: 6M+PNBTs7Ydc22YxEOoAXWjHO6P/9d3SsLY8rQkfu3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e1:9d:fe:44:1f:59:c9:80:95:82:cf:2f:e1:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Validity
Not Before: Mar 2 00:01:48 2026 GMT
Not After : Mar 3 00:01:48 2026 GMT
Subject: CN=e4749e534b951591fb868335b77b132e39909734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5e:96:6b:f2:76:c1:c5:90:0d:51:74:a2:36:
83:2d:84:e7:19:b4:e1:c3:fb:1d:c4:2b:26:95:56:
75:c4:5e:77:be:c1:42:16:e3:e7:22:8e:e9:fa:51:
a0:6e:50:14:6a:7d:1e:da:cf:3b:ed:6c:1e:10:3d:
35:dd:eb:4f:0a:d4:78:32:d4:a8:29:42:5a:a7:e5:
93:bd:24:56:dc:8c:8e:f7:ae:d7:fc:bf:84:4f:5f:
e4:3c:d2:aa:b7:f5:ce:b5:5b:7c:74:3c:82:f6:b1:
73:68:38:d8:57:0a:09:6d:18:23:93:41:ed:80:a5:
3f:73:ee:93:57:ea:c1:f0:b1:27:55:e9:20:85:92:
95:b1:12:28:7e:9a:78:51:88:aa:30:9b:a1:6f:47:
01:0e:5a:e7:90:d5:8a:00:ef:53:50:3b:c8:06:1d:
06:3b:48:05:d7:03:ce:16:a3:8d:90:f8:a9:08:57:
aa:d2:28:a4:af:3f:b5:d4:a7:1f:a9:2c:6d:63:7c:
e6:82:66:a0:ea:5b:fc:79:e1:e1:d0:75:37:b0:94:
4e:07:7e:b7:b7:9a:78:fd:7d:2f:8d:38:5f:7c:c6:
03:99:49:8e:7f:b1:37:d1:d9:55:1e:0b:45:de:33:
e7:e6:95:05:c0:e2:4c:28:43:d3:81:a1:7d:ae:35:
b9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:74:9E:53:4B:95:15:91:FB:86:83:35:B7:7B:13:2E:39:90:97:34
X509v3 Authority Key Identifier:
keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:aa:27:49:cf:fb:33:7e:f8:9d:c1:0f:6c:07:de:da:dd:40:
55:b0:84:53:6b:36:ae:44:f8:d9:9e:07:f1:93:a4:f2:87:05:
8a:c7:24:3b:1b:b1:82:69:de:5b:8a:03:79:4c:2d:e8:6c:82:
42:e7:07:de:ee:81:59:1b:c1:5c:d7:af:f8:4e:01:21:4b:20:
90:c4:2c:0d:de:da:1b:76:20:41:d2:db:7c:3f:9b:e1:e7:6b:
a3:71:a4:2c:f2:74:f2:36:43:e5:44:25:87:05:7e:f7:1f:ea:
ca:48:e9:f8:3f:de:21:f1:27:63:4b:a3:95:b0:94:bd:f6:1b:
38:84:99:00:51:34:a3:d6:e7:2b:02:66:9b:6b:90:a9:5e:e8:
da:1e:4e:bc:0d:6d:1f:bc:ed:13:56:ca:c8:1f:df:32:f5:6b:
bb:e1:7b:34:22:62:e7:48:04:89:71:9e:26:37:6b:d1:98:66:
09:ac:36:a4:35:c7:2c:d8:01:2b:92:a6:79:7d:7b:0c:d5:1b:
ca:5d:bd:ce:18:14:2d:70:51:d5:22:31:20:fb:e8:78:36:f0:
8b:84:93:47:84:fd:b1:a1:22:8a:3f:36:43:bb:d3:3e:f0:0c:
a6:29:50:7c:2d:4d:b4:92:89:f1:93:ed:b5:1c:30:5e:d5:ff:
4a:b0:8a:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2eGd/kQfWcmAlYLPL+EvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MGI1NjVkNzczNjc1M2RiZTdmNjYyNGJkZjFkMmJjMTg5
NmY3YzAwHhcNMjYwMzAyMDAwMTQ4WhcNMjYwMzAzMDAwMTQ4WjAzMTEwLwYDVQQD
EyhlNDc0OWU1MzRiOTUxNTkxZmI4NjgzMzViNzdiMTMyZTM5OTA5NzM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l6Wa/J2wcWQDVF0ojaDLYTnGbTh
w/sdxCsmlVZ1xF53vsFCFuPnIo7p+lGgblAUan0e2s877WweED013etPCtR4MtSo
KUJap+WTvSRW3IyO967X/L+ET1/kPNKqt/XOtVt8dDyC9rFzaDjYVwoJbRgjk0Ht
gKU/c+6TV+rB8LEnVekghZKVsRIofpp4UYiqMJuhb0cBDlrnkNWKAO9TUDvIBh0G
O0gF1wPOFqONkPipCFeq0iikrz+11KcfqSxtY3zmgmag6lv8eeHh0HU3sJROB363
t5p4/X0vjThffMYDmUmOf7E30dlVHgtF3jPn5pUFwOJMKEPTgaF9rjW5jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOR0nlNLlRWR+4aDNbd7Ey45kJc0MB8GA1UdIwQY
MBaAFNgLVl13NnU9vn9mJL3x0rwYlvfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkF0V1hYYzJkVDItZjJZa3ZmSFN2QmlXOThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mNzYzMzktMTcxNC00MDNiLTk5Mjct
MjMyNzc4MjJmZWZhLzEvMkF0V1hYYzJkVDItZjJZa3ZmSFN2QmlXOThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mNzYzMzktMTcxNC00MDNiLTk5MjctMjMyNzc4MjJmZWZh
LzEvMkF0V1hYYzJkVDItZjJZa3ZmSFN2QmlXOThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKonSc/7
M374ncEPbAfe2t1AVbCEU2s2rkT42Z4H8ZOk8ocFisckOxuxgmneW4oDeUwt6GyC
QucH3u6BWRvBXNev+E4BIUsgkMQsDd7aG3YgQdLbfD+b4edro3GkLPJ08jZD5UQl
hwV+9x/qykjp+D/eIfEnY0ujlbCUvfYbOISZAFE0o9bnKwJmm2uQqV7o2h5OvA1t
H7ztE1bKyB/fMvVru+F7NCJi50gEiXGeJjdr0ZhmCaw2pDXHLNgBK5KmeX17DNUb
yl29zhgULXBR1SIxIPvoeDbwi4STR4T9saEiij82Q7vTPvAMpilQfC1NtJKJ8ZPt
tRwwXtX/SrCKXw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:47 2026 by rpki-client