Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
File: 2pa1va-ygzLa_oR87RT3pfrUXmk.mft (raw, json)
Hash identifier: XiDVigtGtyBnXfsF+ajgI3rq4s+HZbTrYuLXrip5vEM=
Subject key identifier: E3:FE:D8:6B:DB:F4:9F:2B:50:B8:C8:BB:2E:57:60:F6:41:E9:8C:CB
Authority key identifier: DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69
Certificate issuer: /CN=da96b5bdafb28332dafe847ced14f7a5fad45e69
Certificate serial: 01A0DEAA501D3C132868B3747300D0FB94E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 17:01:38 +0000
Manifest this update: Sat 26 Sep 2026 17:01:38 +0000
Manifest next update: Sun 27 Sep 2026 17:01:38 +0000
Files and hashes: 1: 2pa1va-ygzLa_oR87RT3pfrUXmk.crl (hash: 5/7rswzaHSb72FMQlM/BYMAlzDAvjDO/ayZ1W5Nj6Ag=)
2: IBEMSBQMUEmyoGfT9mnmlgVNZhU.roa (hash: SbS7D44DDA57I288AbbBNyIpLwW/oby6dFq63a7XwRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:aa:50:1d:3c:13:28:68:b3:74:73:00:d0:fb:94:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da96b5bdafb28332dafe847ced14f7a5fad45e69
Validity
Not Before: Sep 26 17:01:38 2026 GMT
Not After : Sep 27 17:01:38 2026 GMT
Subject: CN=e3fed86bdbf49f2b50b8c8bb2e5760f641e98ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:08:b6:a3:cd:a5:88:80:16:51:0a:9f:c7:16:
dd:2b:d3:23:10:67:ce:15:09:63:c4:1f:1f:6b:f9:
21:9f:0e:41:6a:a3:f4:b6:c3:0c:51:24:be:06:80:
53:df:19:22:24:15:f8:51:d4:3a:59:6b:1f:2a:47:
62:68:cd:50:c8:c0:8d:5b:64:37:61:6e:d7:4a:09:
13:ba:e6:64:03:1a:6e:df:2f:d4:a2:56:c6:76:4e:
05:e6:e2:a3:5e:5b:ad:71:31:51:2f:83:de:45:ad:
d0:b7:bc:7c:38:5b:f7:23:66:85:e7:89:1d:52:6f:
ba:40:91:db:0e:04:10:2a:a7:b6:34:06:6c:0d:a3:
53:e0:ff:f3:f9:06:aa:41:33:17:3e:3e:9a:27:e2:
07:a7:f0:1b:82:e1:eb:e3:fe:92:be:3a:13:ae:94:
83:36:24:ee:a7:af:34:52:89:59:53:5e:c9:15:55:
90:9c:c7:57:a4:81:06:8a:ea:0b:c1:ba:ed:df:7c:
6b:9f:03:cf:59:2d:d7:eb:17:52:19:72:86:91:d6:
01:93:da:3e:ad:15:87:20:7a:2e:c1:db:14:3b:76:
5a:b6:b0:4b:29:ba:3f:1e:33:14:e3:ab:1a:2a:c3:
fb:b8:31:d5:f9:d0:93:c4:f7:cc:57:8a:e2:39:b7:
68:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FE:D8:6B:DB:F4:9F:2B:50:B8:C8:BB:2E:57:60:F6:41:E9:8C:CB
X509v3 Authority Key Identifier:
keyid:DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:be:1c:78:e1:f4:ca:1b:8b:73:8b:a3:21:8c:4d:ec:34:3d:
26:ea:97:7b:8b:48:5b:b0:29:a6:68:14:d5:5b:d3:9d:51:25:
b2:53:10:1c:87:30:49:55:52:c9:2f:56:d5:62:93:49:b1:84:
51:4a:b2:f6:95:52:fa:c7:b2:1c:17:a9:45:94:3f:19:ef:0f:
bb:15:ab:7e:34:d8:85:aa:f1:98:0a:8f:8f:70:99:21:ed:2f:
41:b4:20:4e:f2:ea:de:60:33:98:68:38:e8:5a:37:69:db:f2:
45:b3:19:6f:12:1f:64:4a:ba:21:f8:bf:75:bd:4d:b6:ae:09:
6e:c5:30:e3:24:60:44:eb:5c:fc:a6:20:8d:ed:6d:9c:c8:82:
44:2e:3a:88:78:f3:55:9a:59:85:86:b2:12:0a:f6:78:f6:20:
e9:0c:7a:b4:06:de:7c:8a:9d:cd:10:5d:4f:0a:6d:8e:33:0e:
90:aa:fe:12:a9:7e:e0:bb:3e:97:66:22:94:d6:98:a2:b7:73:
c3:c6:c7:c9:97:af:6b:57:f0:fa:d8:3d:b4:e3:bf:2a:b1:18:
18:cf:7c:0d:86:5f:4c:18:76:7c:4c:8c:b3:d4:f9:d6:0f:bf:
b4:76:1e:ff:b1:af:eb:05:b5:2b:01:01:2d:66:26:fb:d6:99:
4e:01:79:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:18:38 2026 by rpki-client