Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
File: 2pa1va-ygzLa_oR87RT3pfrUXmk.mft (raw, json)
Hash identifier: zf0WzYB4jngtl//rPKdeo1FKA586lO2G/O78tfPxEsE=
Subject key identifier: BB:E3:D5:48:29:1D:82:A9:D7:8B:DD:02:EF:45:9C:02:BE:2B:CA:CA
Authority key identifier: DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69
Certificate issuer: /CN=da96b5bdafb28332dafe847ced14f7a5fad45e69
Certificate serial: 019E1FB60613847A28A442118CA6751AE552
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 05:01:23 +0000
Manifest this update: Wed 13 May 2026 05:01:23 +0000
Manifest next update: Thu 14 May 2026 05:01:23 +0000
Files and hashes: 1: 2pa1va-ygzLa_oR87RT3pfrUXmk.crl (hash: CLCL4XkUt1cZmdFHZTZukgi2AZqydDtEq3FnfEQ1zi8=)
2: IBEMSBQMUEmyoGfT9mnmlgVNZhU.roa (hash: SbS7D44DDA57I288AbbBNyIpLwW/oby6dFq63a7XwRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b6:06:13:84:7a:28:a4:42:11:8c:a6:75:1a:e5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da96b5bdafb28332dafe847ced14f7a5fad45e69
Validity
Not Before: May 13 05:01:23 2026 GMT
Not After : May 14 05:01:23 2026 GMT
Subject: CN=bbe3d548291d82a9d78bdd02ef459c02be2bcaca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:34:0c:d0:60:88:3d:77:a1:1c:37:52:31:
2d:cf:f5:b1:a2:94:5d:cd:60:d9:2b:54:ec:67:bb:
95:ca:8d:51:66:d8:9b:03:ed:fa:69:bb:00:2d:10:
98:ef:8d:90:59:42:31:d8:7d:4f:e0:47:34:20:22:
7b:55:9c:1d:7d:da:0f:b5:2a:72:df:18:d3:9f:38:
87:3f:4a:ca:e8:d7:50:ef:12:a9:cf:ad:a9:4c:e4:
f5:a9:a4:82:49:a4:7f:ee:d3:85:2b:1a:e1:2a:bd:
79:c6:96:9a:5d:0c:60:9c:5f:da:41:c2:82:5d:0a:
52:1e:15:20:6d:a4:53:d3:05:f2:11:19:18:e7:36:
4a:ae:3b:0c:1d:69:a3:6a:4e:fa:64:79:a1:bc:49:
73:48:b7:9b:7e:aa:0a:5b:4b:a8:b2:e4:3f:36:21:
95:f1:83:a8:3f:6f:85:b5:28:93:f0:05:4b:4b:34:
8f:84:d7:55:df:f3:a7:95:ee:18:78:97:22:81:a1:
e3:0b:f1:f9:33:75:49:f6:cf:2f:af:42:f7:0a:48:
85:e0:70:cf:1d:0d:88:29:c2:48:03:78:5e:9f:ce:
b2:db:ab:1e:93:e7:20:55:46:d8:cf:4b:4d:50:22:
60:23:cc:23:a0:41:ae:92:d1:70:60:7f:74:d8:a7:
28:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E3:D5:48:29:1D:82:A9:D7:8B:DD:02:EF:45:9C:02:BE:2B:CA:CA
X509v3 Authority Key Identifier:
keyid:DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f3:df:4d:5d:b8:c3:e3:4b:83:f7:f5:e6:82:8a:09:6d:52:
3e:b6:99:9d:5b:1b:a1:e3:c0:1f:c6:c5:7b:9a:c7:e5:04:4c:
5b:f5:ab:a2:be:e7:67:37:f7:65:8f:83:bf:d1:d0:87:ad:08:
50:01:22:f5:dc:f2:56:f3:40:b3:66:a1:0d:75:61:d2:bf:eb:
72:bc:ef:71:32:46:53:07:e9:c8:d6:1a:c7:75:88:51:0b:45:
8f:62:ad:e2:96:6b:5b:f6:2b:b7:d7:96:d3:f8:e9:6c:2a:18:
9f:ae:0b:c1:c6:b4:69:d2:f0:18:e4:f5:98:a4:dd:ec:21:43:
9b:b0:a5:94:2a:3f:13:28:39:58:91:2a:96:f9:c0:cd:cc:df:
87:36:bc:af:fa:26:61:a6:8d:5e:9c:57:8b:a9:d1:f1:81:f6:
9e:89:78:81:b9:e4:df:b0:61:e7:6d:38:37:70:3d:31:8d:74:
56:ce:97:7c:32:bb:39:18:52:54:8f:bc:87:f2:91:d0:4e:c1:
32:41:ca:27:76:28:3b:01:af:92:1d:8f:a9:3c:14:db:bd:9b:
30:7b:9d:ad:3c:1e:7b:62:40:f7:60:e8:5e:00:66:a7:6c:c5:
a6:c5:6a:de:69:1d:2b:9e:1a:d8:b7:89:a4:3a:82:f2:62:83:
ea:35:7e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:38:10 2026 by rpki-client