Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
File: 2pa1va-ygzLa_oR87RT3pfrUXmk.mft (raw, json)
Hash identifier: 7NDnWyhbcWpfw/Q7M6h1zWIfYCOypFvnZJRgXm+oM74=
Subject key identifier: 0F:1F:BD:97:12:D4:8F:E1:BA:71:34:53:8D:6F:5F:BB:86:87:12:34
Authority key identifier: DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69
Certificate issuer: /CN=da96b5bdafb28332dafe847ced14f7a5fad45e69
Certificate serial: 019F927F0C06408EA5CE19659811BEF862D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 05:00:27 +0000
Manifest this update: Fri 24 Jul 2026 05:00:27 +0000
Manifest next update: Sat 25 Jul 2026 05:00:27 +0000
Files and hashes: 1: 2pa1va-ygzLa_oR87RT3pfrUXmk.crl (hash: 4iDJdwOfW7NKJ0aCTha0EpXyXlxuqC+BhINOf/8TFCA=)
2: IBEMSBQMUEmyoGfT9mnmlgVNZhU.roa (hash: SbS7D44DDA57I288AbbBNyIpLwW/oby6dFq63a7XwRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:0c:06:40:8e:a5:ce:19:65:98:11:be:f8:62:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da96b5bdafb28332dafe847ced14f7a5fad45e69
Validity
Not Before: Jul 24 05:00:27 2026 GMT
Not After : Jul 25 05:00:27 2026 GMT
Subject: CN=0f1fbd9712d48fe1ba7134538d6f5fbb86871234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:c7:80:ad:33:ef:da:00:f1:78:9e:a6:54:
59:65:b1:f4:2c:bb:14:7a:12:8d:91:2b:e4:76:6a:
3d:61:c3:70:a9:fe:3e:01:b4:29:ec:05:d9:a7:03:
72:39:a0:ae:5a:c9:9f:a6:d4:d3:8f:b3:40:0c:4a:
ec:f8:c8:74:fc:f8:b6:50:73:47:48:6c:e7:5d:32:
79:a6:51:1e:19:01:b3:47:59:b6:27:e3:0d:34:65:
48:10:99:f8:89:c8:d1:06:5f:cd:2d:47:c8:ca:75:
c1:17:da:10:19:3e:e7:fe:0a:0a:b7:80:11:95:f7:
db:e0:25:33:99:e5:dd:9a:e7:88:b9:23:02:d0:a6:
46:15:ae:16:61:c8:78:fb:cd:12:18:0f:78:e4:3a:
22:5d:d6:e5:e6:9e:27:e0:68:f9:26:45:e8:0c:12:
75:70:5e:5e:19:b4:82:56:93:d7:5f:d2:52:30:26:
0a:30:8a:d7:f7:22:28:1e:01:7c:1d:7d:6f:66:1c:
4a:6b:e1:1f:d7:0a:80:60:f8:4f:db:18:e7:c7:50:
40:0c:08:ae:b3:ab:25:f0:5e:81:24:30:15:86:cd:
d7:b9:4c:49:47:34:a7:f7:2b:79:16:28:48:d8:87:
00:c9:72:4b:ac:5b:15:6a:31:af:5d:d7:91:74:1b:
b4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1F:BD:97:12:D4:8F:E1:BA:71:34:53:8D:6F:5F:BB:86:87:12:34
X509v3 Authority Key Identifier:
keyid:DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:29:0d:a6:4c:cc:e8:5b:b7:b7:9b:e5:e5:4e:58:0a:9a:1e:
39:ca:b2:25:c5:47:6d:e2:5d:f4:5a:29:c8:63:fb:9c:09:5c:
4b:cb:09:ad:62:1c:19:e6:6e:ea:bb:23:6f:01:17:2d:f6:8c:
28:3a:e5:c2:a2:f4:37:9f:16:18:55:ee:d7:84:d2:80:bf:ff:
71:e5:b3:33:b4:01:99:48:87:17:17:c2:4c:af:06:39:5a:bd:
69:b4:16:8a:e8:f7:16:f2:12:f0:cb:8a:ab:91:33:32:00:22:
a7:42:d2:b0:19:1d:2e:b8:6a:f8:d8:88:c0:93:53:79:a9:e3:
ca:f7:5b:ae:9b:e5:6a:2f:e0:d1:ab:38:ab:4d:12:79:a4:21:
03:06:3e:1d:78:05:88:04:e7:b7:93:86:64:57:3b:e7:36:1b:
05:4b:3e:7f:7a:16:c1:2f:f5:a9:76:a5:d9:99:59:70:7b:52:
6a:b5:18:0f:37:6e:da:aa:1b:e6:ce:51:1c:c2:0d:b0:ae:c1:
a5:9c:c8:a9:c5:9e:48:92:15:72:e7:38:9b:ea:11:d1:68:6e:
3d:32:f3:8c:c7:f5:22:d5:24:ec:cb:d9:f2:ef:d7:c6:69:96:
67:32:66:84:c5:eb:c4:61:d5:23:15:2c:ef:9a:25:4c:fe:9e:
6e:ae:fc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:33:09 2026 by rpki-client