Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
File: 2pa1va-ygzLa_oR87RT3pfrUXmk.mft (raw, json)
Hash identifier: NzlfULdVXWL8wBYHeyOd0LPDSHoiz2FEXt0aprGsTdE=
Subject key identifier: C4:CC:D8:69:5F:3F:82:08:99:61:A1:66:89:3C:77:ED:C6:85:44:37
Authority key identifier: DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69
Certificate issuer: /CN=da96b5bdafb28332dafe847ced14f7a5fad45e69
Certificate serial: 019D341AD7A19C7AFF2956BC5EBB536733D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
Manifest number: 188E
Signing time: Sat 28 Mar 2026 11:01:07 +0000
Manifest this update: Sat 28 Mar 2026 11:01:07 +0000
Manifest next update: Sun 29 Mar 2026 11:01:07 +0000
Files and hashes: 1: 2pa1va-ygzLa_oR87RT3pfrUXmk.crl (hash: lDhbpm/MdXBSmQt2bybBYp2zG0DYLCSHrofJFJ+7Z6k=)
2: IBEMSBQMUEmyoGfT9mnmlgVNZhU.roa (hash: SbS7D44DDA57I288AbbBNyIpLwW/oby6dFq63a7XwRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:1a:d7:a1:9c:7a:ff:29:56:bc:5e:bb:53:67:33:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da96b5bdafb28332dafe847ced14f7a5fad45e69
Validity
Not Before: Mar 28 11:01:07 2026 GMT
Not After : Mar 29 11:01:07 2026 GMT
Subject: CN=c4ccd8695f3f82089961a166893c77edc6854437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:a8:54:09:df:ea:d8:e5:71:86:6c:99:85:
9e:bf:c7:2e:69:d4:b7:50:ed:b2:42:0d:7d:cb:1b:
0a:cd:39:b2:9a:84:05:6b:5b:65:83:50:da:d6:91:
45:72:50:fd:86:6c:f4:b8:6b:3a:77:ae:e9:44:45:
42:5b:c3:e3:68:a1:32:a3:76:ff:6f:c6:35:f4:70:
af:85:15:3b:f5:a2:6b:0d:2a:ee:17:0c:7c:4c:a8:
c2:1d:b4:56:dd:da:4e:52:3b:62:2f:57:a7:16:fa:
9b:06:28:7c:42:4c:7f:7d:d5:0a:04:e8:60:4f:ac:
80:c2:22:64:b3:d0:42:60:16:cc:c1:9a:0c:d1:cd:
60:f4:0e:50:c1:17:07:48:14:82:e8:39:46:0e:23:
de:35:8c:cc:4c:1c:ca:9f:1a:c1:d3:ce:d8:a5:ae:
27:2c:0f:30:cf:f7:c0:3a:c5:6f:d3:b2:e1:5d:49:
b9:28:ee:5e:3e:99:39:bf:95:03:b2:37:c1:03:31:
cc:d5:aa:ba:81:3d:0c:e9:4f:11:b4:2d:4c:39:3c:
b5:51:4f:0f:39:ef:19:e6:52:95:9d:64:4a:7b:d2:
01:b5:3a:d5:8b:27:75:df:6c:9a:5b:ea:49:1d:96:
95:50:16:cd:ee:e1:30:18:a5:97:6d:06:d1:28:dc:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:CC:D8:69:5F:3F:82:08:99:61:A1:66:89:3C:77:ED:C6:85:44:37
X509v3 Authority Key Identifier:
keyid:DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1e:00:e8:b7:40:18:9a:ef:83:b6:b8:37:38:77:a0:61:bf:
65:94:85:c0:97:7b:c8:94:66:c8:f0:b0:5c:8b:c4:39:61:ad:
88:bb:20:cb:21:cd:76:63:d4:f8:a5:e8:e8:c0:10:38:52:22:
c6:f7:a9:33:da:cd:91:19:f8:e9:73:0d:c9:59:c2:8b:b5:cc:
bd:1b:c0:c4:a6:af:9d:56:f6:27:af:42:6a:01:bd:21:2a:f1:
f2:eb:13:1f:1d:e0:96:ef:5c:31:99:8a:f4:21:8d:36:3f:a9:
97:1c:70:c1:40:b1:39:07:d7:51:65:e0:b9:40:14:93:f4:d4:
c9:d6:37:3f:9c:c6:8a:0e:57:a4:93:21:32:12:1f:3e:e5:05:
df:5a:66:12:5b:de:65:f5:66:26:76:c9:33:bf:e3:60:d3:f5:
91:de:38:b2:d9:08:50:b4:b5:6c:d1:2c:cb:e8:eb:88:17:d4:
44:34:ad:0c:48:ab:eb:73:7b:36:2e:87:6e:b9:c9:08:48:f8:
a7:42:6c:6d:a3:57:4f:f6:62:3a:6c:b3:c9:08:0d:d0:72:f3:
c6:dd:a5:88:27:fa:9f:fc:79:4a:76:28:0b:3c:17:d6:41:36:
03:78:4c:5b:bd:b2:97:67:d5:17:b1:16:0f:58:32:92:d2:c0:
11:bc:11:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:23:13 2026 by rpki-client