Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
File: 2AtWXXc2dT2-f2YkvfHSvBiW98A.mft (raw, json)
Hash identifier: Ot9DK8Q6w+WYKTy8eBQxERlGGlojfljsP11OIWke41A=
Subject key identifier: 17:9E:C4:CB:3A:F3:67:07:7C:F8:0D:2E:FB:10:80:A5:05:16:A8:BE
Authority key identifier: D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
Certificate issuer: /CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Certificate serial: 019EBEED20B1C7E5A550EED8F9167B0D0134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
Manifest number: 12B5
Signing time: Sat 13 Jun 2026 03:01:11 +0000
Manifest this update: Sat 13 Jun 2026 03:01:11 +0000
Manifest next update: Sun 14 Jun 2026 03:01:11 +0000
Files and hashes: 1: 2AtWXXc2dT2-f2YkvfHSvBiW98A.crl (hash: tBnl81mgIwm5UhqqiH4GI42hWxMrOERqn+L6jRNb4mg=)
2: 5XOq4BMraJ6-AegtlaIWTtUkqxo.roa (hash: hDvJTYUbzgM4Etq6PCbmzufkHK2RaHqzKqogboxsQ0c=)
3: iIJMhiXnC0TkNFq6MHPCGZcJKp4.roa (hash: 6M+PNBTs7Ydc22YxEOoAXWjHO6P/9d3SsLY8rQkfu3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:20:b1:c7:e5:a5:50:ee:d8:f9:16:7b:0d:01:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d80b565d7736753dbe7f6624bdf1d2bc1896f7c0
Validity
Not Before: Jun 13 03:01:11 2026 GMT
Not After : Jun 14 03:01:11 2026 GMT
Subject: CN=179ec4cb3af367077cf80d2efb1080a50516a8be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3a:0a:c8:4a:52:3f:d7:6a:3c:0e:35:2d:d5:
17:b9:65:04:a2:5e:77:b7:42:21:a0:c0:8f:bd:f4:
d8:bf:7e:02:aa:2b:5d:a2:56:69:fd:ec:1e:e4:55:
8d:b5:ed:e5:af:17:8f:2e:d0:83:fb:84:ec:25:2a:
3e:99:c2:fe:87:c3:d5:a2:0f:b9:43:01:0b:e1:a4:
76:98:6a:16:a5:7c:52:bb:d3:80:ba:6c:eb:e6:c1:
e8:cc:8a:4b:6d:5a:c3:32:a0:16:cd:87:4a:8d:69:
e3:7a:54:f0:5c:7a:44:97:8d:e5:a8:d8:b2:3c:15:
b5:76:a7:16:1c:6d:d7:ed:f0:c2:59:c4:87:64:07:
e4:e7:fb:70:bd:67:95:a5:4c:81:a1:d4:88:c5:8a:
c2:f3:a7:d3:db:e9:fd:bd:87:af:cc:ca:3f:b7:67:
60:f8:64:7f:76:0a:41:50:af:99:99:b8:fa:56:7e:
ea:1a:54:00:23:ac:a0:47:2e:3d:c6:7d:f2:92:f3:
cb:6d:6a:04:d2:d2:a8:fe:29:40:92:9d:e2:5e:e0:
58:a5:e9:40:4f:1c:59:83:26:d7:c4:e6:63:95:d0:
c6:5c:8f:9e:e0:97:3f:c3:86:5b:ef:8d:85:ad:41:
80:70:5c:cc:be:c1:d2:b9:71:92:54:4c:c1:62:27:
27:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9E:C4:CB:3A:F3:67:07:7C:F8:0D:2E:FB:10:80:A5:05:16:A8:BE
X509v3 Authority Key Identifier:
keyid:D8:0B:56:5D:77:36:75:3D:BE:7F:66:24:BD:F1:D2:BC:18:96:F7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2AtWXXc2dT2-f2YkvfHSvBiW98A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f76339-1714-403b-9927-23277822fefa/1/2AtWXXc2dT2-f2YkvfHSvBiW98A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a2:81:fa:28:a0:9b:99:a2:cf:51:35:4c:63:ba:4e:58:14:
aa:00:db:a4:1d:b8:05:d0:c9:df:42:a7:4e:64:f3:18:80:2f:
21:44:4b:ef:89:3b:da:a9:d1:55:61:c2:ef:23:b3:f4:e3:d2:
35:3c:09:a5:f3:ff:8d:6a:73:76:77:5f:62:4a:10:33:77:47:
9a:26:8f:53:14:ab:d5:bf:f4:ce:cc:99:a4:cf:3a:2e:9c:e1:
06:ad:48:ff:c3:d1:95:64:05:82:1a:eb:94:49:73:96:4a:6b:
3d:b1:ee:d5:d3:b7:9e:73:e2:da:40:28:c6:ce:81:c3:a9:87:
f1:1e:30:36:4b:73:d4:89:b7:7b:38:99:fa:7a:2e:e4:89:f4:
f0:ac:95:fa:19:44:d0:4a:d0:97:28:85:7a:d2:f5:43:84:c0:
0b:95:ec:24:43:96:08:66:c9:f3:09:0f:14:85:9d:df:00:dc:
2a:20:cc:81:95:65:7d:18:0c:bc:8e:c9:06:7c:3e:3a:75:a1:
ed:49:43:b0:1c:ec:88:62:ac:66:32:7f:64:33:a1:bb:84:b3:
6d:a2:4e:83:f1:5b:0e:60:30:b7:88:d2:97:ea:73:91:ce:b3:
43:ca:20:e3:9f:f6:16:ce:ce:e7:fd:41:43:62:8e:ce:fd:64:
af:bc:4f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:10:16 2026 by rpki-client