Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json)
Hash identifier: V8sE/GBfvG9jN2qObVWMoqvuJRzq2otek2p4FssoLBU=
Subject key identifier: 38:6D:F0:D1:2E:42:65:0F:AF:8C:D8:89:67:FD:C2:38:8D:3A:A6:63
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Certificate issuer: /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial: 019D99625A6912BDB95157B69128EAFC74B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
Manifest number: 121D
Signing time: Fri 17 Apr 2026 03:00:52 +0000
Manifest this update: Fri 17 Apr 2026 03:00:52 +0000
Manifest next update: Sat 18 Apr 2026 03:00:52 +0000
Files and hashes: 1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: zX76ZHgC1lGzIUZEgVIttThqvumyxja9V0jDw9TNRC4=)
2: 5XOq4BMraJ6-AegtlaIWTtUkqxo.roa (hash: hDvJTYUbzgM4Etq6PCbmzufkHK2RaHqzKqogboxsQ0c=)
3: iIJMhiXnC0TkNFq6MHPCGZcJKp4.roa (hash: 6M+PNBTs7Ydc22YxEOoAXWjHO6P/9d3SsLY8rQkfu3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:5a:69:12:bd:b9:51:57:b6:91:28:ea:fc:74:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Validity
Not Before: Apr 17 03:00:52 2026 GMT
Not After : Apr 18 03:00:52 2026 GMT
Subject: CN=386df0d12e42650faf8cd88967fdc2388d3aa663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a4:51:b4:1a:2f:bf:95:b6:9d:48:dd:5e:53:
f4:06:6b:6d:f5:1b:1c:ab:2d:90:1d:8a:95:db:1b:
e7:38:96:94:61:59:3c:60:24:de:e0:9f:f3:fc:47:
29:7c:44:d6:25:e5:0c:df:64:7b:c0:a5:f1:34:3b:
98:77:16:e0:f9:1e:65:25:b7:10:1a:db:72:51:68:
55:da:d1:94:f0:ee:ea:9b:27:02:9a:1f:20:ce:e8:
37:1a:85:c9:6f:a9:55:f8:52:11:e0:be:8f:84:95:
74:4b:b9:eb:b9:2c:27:98:2e:d3:2e:e8:c5:2b:5a:
c1:fa:b9:98:cd:2f:1c:8e:94:35:e1:82:47:32:f8:
36:ee:ba:f8:76:ca:1b:2e:70:37:08:74:cb:31:70:
f1:da:ba:42:bb:33:32:ad:d7:2f:e0:41:fb:7e:bc:
e5:23:f7:7a:22:89:67:7b:93:6f:40:3b:92:57:cf:
de:77:1a:79:11:5b:a4:6e:7c:06:36:8e:e4:64:98:
1d:e9:30:3a:2d:70:8e:28:dc:7e:0a:bb:f1:6e:5d:
5b:df:af:7a:ae:3d:ef:c6:cc:06:e4:6a:1e:b2:44:
9a:4e:c2:64:13:d8:a4:94:80:ac:84:95:be:2d:9e:
f5:73:c8:3a:4f:4b:55:e2:c0:49:86:9b:d6:4f:dc:
ab:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6D:F0:D1:2E:42:65:0F:AF:8C:D8:89:67:FD:C2:38:8D:3A:A6:63
X509v3 Authority Key Identifier:
keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c6:a6:c6:bb:dd:a4:7c:58:13:58:fe:6d:c8:a3:d1:10:f7:
d3:90:f6:d9:8f:ac:43:3c:7b:9d:cf:1b:e7:a9:99:1b:ff:a4:
3b:14:b9:4f:ae:98:47:8e:7d:0b:34:47:46:41:89:32:34:c7:
43:ba:61:ef:c9:74:b9:b7:74:18:75:ff:a6:46:83:ad:d0:88:
be:0a:d0:91:22:43:6b:cf:16:81:c0:42:3a:86:04:f9:83:5e:
00:43:2a:48:ef:b1:86:8f:85:16:58:bb:9e:fd:47:64:dd:cb:
21:8c:17:b5:2b:e7:d3:97:7a:52:3b:d9:e7:0c:b9:26:1d:ec:
0a:f9:c6:25:7c:b5:6f:9c:91:d7:84:7a:8a:44:3f:81:93:5b:
23:3e:28:6f:89:c6:ee:50:94:a4:de:d9:e2:f3:81:fb:b0:41:
68:64:78:30:62:35:8c:a9:6f:bb:44:85:a7:68:87:da:6e:08:
a9:ea:15:88:14:12:ca:70:bc:9c:c7:10:8d:c2:0e:06:a2:0e:
0a:17:28:53:4e:24:05:2b:9d:05:ad:6c:4f:e0:f0:f9:ca:38:
5a:91:0a:2f:36:a5:2c:aa:cf:59:c5:82:e8:39:0e:e6:09:c9:
b2:c2:0c:61:ca:41:fa:83:04:5c:74:5b:d8:ae:7e:fd:14:d7:
09:ab:e5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:26 2026 by rpki-client