Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
File: 2ilr0AMdba2mxzBzYI89EeRFzkQ.mft (raw, json)
Hash identifier: 837348u3cjUe6BldSOnC6AbeM1HxUOq7NpSRqc4eV/0=
Subject key identifier: 8E:95:90:93:F5:F0:7E:CA:6A:BF:9A:24:60:2B:D8:05:AE:B1:E2:E2
Authority key identifier: DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44
Certificate issuer: /CN=da296bd0031d6dada6c73073608f3d11e445ce44
Certificate serial: 01A0D15B73CA57FEEC121196AB70B3246ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
Manifest number: 08AE
Signing time: Thu 24 Sep 2026 03:00:26 +0000
Manifest this update: Thu 24 Sep 2026 03:00:26 +0000
Manifest next update: Fri 25 Sep 2026 03:00:26 +0000
Files and hashes: 1: 2ilr0AMdba2mxzBzYI89EeRFzkQ.crl (hash: oU+QkKDd28IJhFhrlG14RpxJ0cFF5CbxPw+EDN2ZpDM=)
2: CUoKG5KBfZLY81B9VMINCtlfS6U.roa (hash: LS0KYy/ZBd62NqsUCQ3fjoY3u1OJXGmBPSRbAnObypM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:73:ca:57:fe:ec:12:11:96:ab:70:b3:24:6a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da296bd0031d6dada6c73073608f3d11e445ce44
Validity
Not Before: Sep 24 03:00:26 2026 GMT
Not After : Sep 25 03:00:26 2026 GMT
Subject: CN=8e959093f5f07eca6abf9a24602bd805aeb1e2e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:87:21:0d:ce:16:5f:49:d0:24:63:e9:f0:a9:
c8:54:6a:e9:95:7a:03:15:c6:58:be:e5:f4:9d:df:
1c:08:cc:d7:53:fc:17:5b:17:cf:ab:92:72:f0:08:
cd:f3:1e:04:ed:69:5c:d2:85:87:18:81:67:ac:63:
2a:02:13:a0:1e:8b:60:5d:ab:12:71:93:6f:04:31:
53:35:fe:07:f4:53:e3:25:4d:0e:4b:b6:29:0c:a1:
ed:1c:2d:29:4a:49:ee:45:97:30:b8:b8:9a:3c:1e:
69:43:d5:36:36:b9:1d:36:e3:d0:b6:11:11:f9:13:
51:eb:58:d2:ea:8d:86:f0:cf:f0:90:4e:0f:05:f7:
60:eb:83:2f:48:ea:ed:57:51:ce:00:a2:21:92:81:
41:47:fd:75:ca:ae:cf:8d:84:4a:d0:02:ab:b0:9d:
cd:86:5c:32:d1:c7:8f:c2:85:9d:42:bb:31:f9:70:
2b:4e:8a:07:01:4d:9f:8f:8b:14:c6:b1:9c:93:d7:
1b:c9:7f:d7:87:fb:6d:22:07:27:7b:12:7e:f3:ce:
f9:26:5b:33:5e:74:a8:56:72:75:71:b9:6f:9e:98:
1f:b9:c3:ea:4c:10:c1:d7:7d:77:16:9b:ae:7c:25:
dd:9d:57:58:93:29:3d:5c:36:61:93:81:f1:af:a4:
a9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:95:90:93:F5:F0:7E:CA:6A:BF:9A:24:60:2B:D8:05:AE:B1:E2:E2
X509v3 Authority Key Identifier:
keyid:DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:84:4b:f8:d3:22:a2:2d:9f:2b:c4:68:f7:8d:f2:85:56:7b:
46:81:13:71:b1:58:55:68:d6:71:db:47:9c:ca:b9:3b:fc:ea:
56:76:0c:a3:26:28:0a:a4:e2:81:e1:e8:78:35:e1:41:98:e3:
05:3d:bb:d6:47:fa:03:f1:80:fa:82:e2:7a:b2:9a:ce:3f:9b:
4b:bb:58:d2:be:be:26:02:e5:52:30:43:46:3d:49:76:11:c5:
e9:30:4a:35:85:b7:fd:88:0d:ff:42:99:00:b0:cb:c4:2a:b4:
af:6e:e2:e0:7c:2b:4f:27:ad:18:84:5e:09:b9:cc:e7:90:95:
fa:6c:f0:6e:40:67:74:24:d3:3e:f2:ef:0b:93:22:c9:92:3c:
46:63:bb:3c:30:77:f1:86:d9:90:03:47:5b:d3:4f:fe:d2:94:
f6:a9:22:8e:f4:39:e5:17:64:25:3a:0d:9e:2d:4c:9d:3a:54:
94:e8:a0:d9:c1:19:89:7c:f6:52:b5:c9:ca:1f:89:47:ee:6c:
90:14:e0:8d:8c:58:c2:37:c4:ec:9c:20:44:f5:b2:68:78:78:
df:e3:a4:ae:42:55:b7:f1:cd:4b:7d:95:16:bd:91:90:2e:dc:
ee:fd:50:f4:bf:09:18:21:bb:10:1f:a0:00:9e:2a:6b:91:ee:
08:f9:71:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:48:26 2026 by rpki-client