Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
File: 2pa1va-ygzLa_oR87RT3pfrUXmk.mft (raw, json)
Hash identifier: A5oTOqUYEeK500ATZ+TY7wGhwmVGyz/Qa+ZhTuP+TDo=
Subject key identifier: F6:23:4B:B8:F7:0F:81:BD:4E:F5:07:05:23:BA:CD:5D:ED:A9:41:A2
Authority key identifier: DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69
Certificate issuer: /CN=da96b5bdafb28332dafe847ced14f7a5fad45e69
Certificate serial: 01A13D49E7AE8BF08BF39AB687CCB34D8681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 02:00:15 +0000
Manifest this update: Thu 15 Oct 2026 02:00:15 +0000
Manifest next update: Fri 16 Oct 2026 02:00:15 +0000
Files and hashes: 1: 2pa1va-ygzLa_oR87RT3pfrUXmk.crl (hash: mDv0vWcN0cYNJerS+eN2iGKx8sGmol7Ju1eoINyS2Pg=)
2: IBEMSBQMUEmyoGfT9mnmlgVNZhU.roa (hash: SbS7D44DDA57I288AbbBNyIpLwW/oby6dFq63a7XwRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 02:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:49:e7:ae:8b:f0:8b:f3:9a:b6:87:cc:b3:4d:86:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da96b5bdafb28332dafe847ced14f7a5fad45e69
Validity
Not Before: Oct 15 02:00:15 2026 GMT
Not After : Oct 16 02:00:15 2026 GMT
Subject: CN=f6234bb8f70f81bd4ef5070523bacd5deda941a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:88:6d:2b:75:42:7e:1a:d7:f1:15:dd:23:
8a:8c:e3:b6:01:93:fd:62:ca:13:88:59:55:ae:5b:
e4:88:5e:36:59:e5:0b:95:00:2c:e1:e7:41:37:0c:
79:02:68:08:5c:69:da:c7:c0:cc:8a:28:92:ae:53:
21:5c:80:63:e6:af:60:da:c0:6d:66:f0:60:dd:75:
de:2b:34:a6:fb:99:4d:db:b8:3f:9e:76:4b:a2:61:
43:b5:9d:e1:36:af:c5:c1:c3:38:49:b3:44:4a:59:
a1:e6:8e:ad:d0:31:bd:67:1b:2f:3a:11:d7:95:9d:
69:ea:c9:a1:57:fd:94:2c:94:9c:62:45:06:db:76:
b2:66:99:4f:be:ea:6a:1d:07:b6:fe:fe:0b:6c:4e:
5f:d4:e7:93:96:53:9e:96:72:f9:00:14:49:e3:2c:
ab:2e:c7:86:93:b5:fe:26:84:c4:d8:83:e6:6e:d8:
eb:26:d4:eb:47:3d:dc:3a:54:29:27:63:dd:f7:dd:
99:9b:92:91:36:d8:40:38:c9:37:1c:ad:37:cf:02:
18:02:6e:4e:73:88:2a:b9:9f:3a:00:77:9b:db:d6:
37:3f:1e:28:c4:d1:3d:5a:93:cf:6a:d7:d4:1c:c5:
dd:34:6a:0a:c8:cb:ef:1b:14:eb:a0:bb:0a:af:d0:
bb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:23:4B:B8:F7:0F:81:BD:4E:F5:07:05:23:BA:CD:5D:ED:A9:41:A2
X509v3 Authority Key Identifier:
keyid:DA:96:B5:BD:AF:B2:83:32:DA:FE:84:7C:ED:14:F7:A5:FA:D4:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pa1va-ygzLa_oR87RT3pfrUXmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/819089-473b-463f-b87b-4253950f1155/1/2pa1va-ygzLa_oR87RT3pfrUXmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9d:68:e0:0f:c8:64:0f:f6:8b:dc:91:0b:75:1e:be:38:63:
8d:f0:0e:39:70:7a:70:7b:e5:2b:11:89:6a:3f:7a:ba:ef:0b:
9f:47:c8:cc:09:b5:67:1c:f2:56:fb:0a:94:35:65:f5:db:ac:
35:ec:b2:91:9f:b2:ef:e1:53:cf:4e:8b:66:bc:ca:75:cd:d8:
af:30:7b:27:45:30:25:34:7f:cd:7f:e0:54:e1:84:d7:fc:92:
63:05:ca:94:b2:c3:0e:98:31:80:ec:49:b0:ee:81:ed:5f:7b:
59:c3:ae:91:77:18:30:71:40:fe:38:77:c1:05:db:aa:c2:28:
14:fc:3f:18:32:19:3d:6a:14:26:a4:23:90:13:5a:26:37:57:
65:c9:75:1a:9a:86:ed:c9:ac:a5:eb:af:a6:b0:ee:49:61:e8:
d6:15:07:9a:6f:5a:43:76:cb:71:e7:7a:bc:4f:74:15:22:b1:
a0:39:2d:bc:d8:52:80:ae:14:71:3d:5d:5d:07:c2:34:1b:c3:
9e:8c:1a:b1:90:df:7b:9a:b5:36:a4:3f:1f:c2:9d:0e:41:fe:
62:07:a4:77:d1:90:a6:7b:a8:04:5f:b5:cf:8e:2a:c2:51:72:
37:27:02:ad:c2:c2:15:71:1b:a4:ce:00:f5:62:3a:26:d3:8f:
a6:8b:28:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:22:47 2026 by rpki-client