Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
File: 2ilr0AMdba2mxzBzYI89EeRFzkQ.mft (raw, json)
Hash identifier: HNPfQGQaiVMJhmqO9XteuzyzaYhGk2HwpiKXc0FnrvU=
Subject key identifier: A3:D9:26:05:C3:39:2A:E1:3D:BA:71:23:F0:05:E5:88:FC:62:77:05
Authority key identifier: DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44
Certificate issuer: /CN=da296bd0031d6dada6c73073608f3d11e445ce44
Certificate serial: 01A12C207CDF00097EC880B82CA606EECB13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
Manifest number: 08DD
Signing time: Sun 11 Oct 2026 18:01:28 +0000
Manifest this update: Sun 11 Oct 2026 18:01:28 +0000
Manifest next update: Mon 12 Oct 2026 18:01:28 +0000
Files and hashes: 1: 2ilr0AMdba2mxzBzYI89EeRFzkQ.crl (hash: n07NiLTAvQJBu0pe7L9mBbytD+Vftba29BPOBn8THpk=)
2: CUoKG5KBfZLY81B9VMINCtlfS6U.roa (hash: LS0KYy/ZBd62NqsUCQ3fjoY3u1OJXGmBPSRbAnObypM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:20:7c:df:00:09:7e:c8:80:b8:2c:a6:06:ee:cb:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da296bd0031d6dada6c73073608f3d11e445ce44
Validity
Not Before: Oct 11 18:01:28 2026 GMT
Not After : Oct 12 18:01:28 2026 GMT
Subject: CN=a3d92605c3392ae13dba7123f005e588fc627705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c3:6e:49:9f:fb:2a:95:4d:85:bd:ce:41:e7:
5b:23:76:49:28:be:4d:05:ba:fa:8c:12:38:03:b2:
a5:b4:6d:da:93:a0:91:ae:f6:26:95:97:69:07:cb:
db:23:35:d5:c8:24:94:13:d1:31:1d:8f:e5:11:0e:
33:91:4b:d5:34:0a:2f:e4:94:90:9a:4b:ab:de:65:
e9:65:e1:e5:06:9f:37:6a:bb:35:c6:03:28:aa:61:
c5:25:38:19:60:7e:4a:f9:83:cb:fb:8a:81:0f:b8:
b7:68:23:11:54:e4:83:4d:00:fc:5b:99:98:bf:5a:
da:7d:a2:16:42:ed:5c:42:68:d8:0a:49:52:24:3d:
a3:71:e2:bd:48:86:f5:b6:44:b8:2e:44:e5:95:9f:
25:b8:6c:fa:12:53:8d:d5:b6:c0:98:c9:8c:97:2f:
cb:3d:bc:8a:5e:63:85:50:39:57:0f:be:5c:bb:5d:
63:b8:43:d4:41:39:65:d9:3b:e2:70:db:e5:b2:d5:
5c:c1:18:85:a5:fe:e4:47:3d:c1:1c:d8:ba:34:ca:
7a:b2:6f:52:eb:85:48:64:b5:7c:24:ca:1c:a4:47:
03:d8:51:72:29:c5:43:00:64:3f:de:4f:5a:11:35:
5a:64:95:ff:e4:b6:37:e8:1f:3a:96:16:d4:07:94:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D9:26:05:C3:39:2A:E1:3D:BA:71:23:F0:05:E5:88:FC:62:77:05
X509v3 Authority Key Identifier:
keyid:DA:29:6B:D0:03:1D:6D:AD:A6:C7:30:73:60:8F:3D:11:E4:45:CE:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ilr0AMdba2mxzBzYI89EeRFzkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1aafa0-0278-4dd6-8807-5726c2b5148d/1/2ilr0AMdba2mxzBzYI89EeRFzkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0c:99:0b:93:2a:d4:ed:21:0d:c4:d5:e7:c6:3e:f5:a0:c8:
1a:4c:43:1d:51:e6:23:5f:f8:44:d7:5a:91:96:82:5e:28:b9:
38:b4:a0:68:55:20:3b:2d:ea:d5:a5:05:eb:51:ee:db:af:ae:
f5:ca:93:1d:88:0a:09:b2:bc:55:e2:1c:09:a8:4c:cb:f4:20:
f4:54:32:5b:cf:76:3b:65:eb:b6:79:04:8c:c8:68:aa:b4:4c:
eb:3e:81:a2:25:b9:e5:d7:71:b0:66:53:a2:3a:ce:d3:85:64:
00:fb:ee:40:3b:d5:4a:40:6d:8a:72:11:73:ca:cd:4f:f1:fa:
ca:93:d6:08:67:72:d1:c5:0e:fd:d0:97:ef:e0:0c:72:21:7e:
8d:12:bd:21:5f:ea:5a:3d:4a:72:b6:c1:ea:df:9c:a9:74:2b:
0c:37:e0:e3:fd:c7:42:97:5c:43:ed:bc:23:8e:93:9f:e9:1f:
ab:ee:68:82:55:c2:9b:56:44:e1:fe:92:56:1e:84:26:6d:21:
ad:e7:d4:8b:b2:83:b0:6f:51:98:f0:5a:04:9f:5e:b3:52:7d:
95:ae:fa:2e:18:83:5d:7a:dd:65:d9:95:17:0c:62:35:4f:b8:
70:6e:1f:12:e6:29:b7:54:68:54:85:48:fe:5c:5e:ad:87:b4:
1d:de:c8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:14:20 2026 by rpki-client