Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json)
Hash identifier: QMWznPIbRoM+i2XT39uiSmfeT+mcRJm8d2u2Q1MTZ10=
Subject key identifier: 5F:20:F5:93:09:CE:DF:45:20:C0:5B:F7:8C:CD:F0:4A:5D:1E:44:AC
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Certificate issuer: /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial: 01A1E05EDDDA363A41218DA12E9FF7332B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
Manifest number: 1454
Signing time: Sun 15 Nov 2026 18:01:15 +0000
Manifest this update: Sun 15 Nov 2026 18:01:15 +0000
Manifest next update: Mon 16 Nov 2026 18:01:15 +0000
Files and hashes: 1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: IZL/O2znhunWFxcaLMy3qFj6vaU9SNJJUqUIQ/eIe0I=)
2: 5XOq4BMraJ6-AegtlaIWTtUkqxo.roa (hash: hDvJTYUbzgM4Etq6PCbmzufkHK2RaHqzKqogboxsQ0c=)
3: iIJMhiXnC0TkNFq6MHPCGZcJKp4.roa (hash: 6M+PNBTs7Ydc22YxEOoAXWjHO6P/9d3SsLY8rQkfu3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5e:dd:da:36:3a:41:21:8d:a1:2e:9f:f7:33:2b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Validity
Not Before: Nov 15 18:01:15 2026 GMT
Not After : Nov 16 18:01:15 2026 GMT
Subject: CN=5f20f59309cedf4520c05bf78ccdf04a5d1e44ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:1c:3d:d2:7e:cb:c7:a8:c1:03:76:3d:3f:
cf:a0:02:ea:23:3f:e0:a9:9e:ee:58:ac:73:3b:69:
56:b1:b9:98:96:fb:1a:6e:d2:2f:d2:e5:bf:1a:8f:
ca:0d:cb:9d:c3:a4:65:34:25:00:b8:77:8f:1e:7b:
5b:37:a0:af:d4:39:86:31:57:b8:f8:8d:fc:02:40:
3f:c1:e4:ad:25:fc:76:cd:9d:b9:62:df:5a:1d:07:
68:77:e8:f1:49:66:bc:fa:05:be:f6:28:90:ae:5d:
80:d6:f5:82:79:31:de:8a:b7:e5:8a:3c:3f:83:dc:
6d:07:66:0b:75:13:af:b3:80:2c:74:74:eb:ab:a3:
bb:93:9e:6e:64:e0:a3:54:a2:eb:e8:10:c4:a7:c3:
ee:62:be:9b:80:0e:24:68:ca:9c:86:8b:72:1e:f9:
88:5f:a8:1d:d6:62:8a:d2:57:38:ca:de:d0:03:17:
7d:ba:4f:09:6c:34:78:fd:51:87:53:13:60:f1:97:
0f:46:ae:f8:a5:b6:db:a0:2f:55:bd:53:56:93:82:
2d:98:94:97:dd:ef:c6:b2:6a:30:20:2f:00:9c:db:
2d:f2:10:32:a4:e2:87:99:04:0c:0b:89:da:71:ab:
c1:42:88:b1:e9:a2:db:b2:1d:7a:67:2a:86:dc:d2:
31:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:20:F5:93:09:CE:DF:45:20:C0:5B:F7:8C:CD:F0:4A:5D:1E:44:AC
X509v3 Authority Key Identifier:
keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:df:81:e0:a0:31:45:c4:80:c1:72:79:ca:cd:a0:00:bb:7b:
34:ed:b9:6b:d0:62:af:76:e3:b7:c2:1b:34:0d:1d:ac:d8:f2:
3f:35:9b:95:4f:26:ff:8d:80:b5:2b:14:84:e2:4d:2d:ed:23:
97:50:72:8d:61:dd:7c:38:b2:8c:7c:34:18:f1:61:8d:d1:6a:
56:ef:f7:c4:be:1b:c1:36:bb:6e:a3:df:a6:cf:16:b0:53:f7:
0f:c2:2e:4d:78:fd:0e:2d:68:cd:d2:2f:85:af:a6:ce:1c:d6:
e2:2e:73:a0:bf:4f:f3:29:23:1e:d5:fa:6a:e9:b8:15:82:a7:
82:d6:9f:8e:73:61:4a:d0:9a:19:25:37:38:3d:8d:5b:dc:0c:
9c:2b:b9:78:0e:f5:d2:65:96:48:8f:02:7f:b3:d0:5a:88:aa:
a8:21:2a:40:2e:bd:41:9f:e3:ce:f3:ba:85:37:c7:7c:41:7c:
9c:4e:e3:20:f4:cb:cc:8e:9c:60:45:49:bf:1a:35:72:97:ec:
43:da:eb:cb:b3:62:c0:6a:95:fa:5a:11:3e:08:a2:c8:30:f2:
99:57:42:ce:30:e6:c2:a5:b4:5e:d2:a4:24:c3:1f:2c:5a:37:
c7:ea:64:bf:1b:ce:de:15:0a:bc:08:b5:f4:a9:96:3b:14:f0:
7f:e7:6b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:53:44 2026 by rpki-client