
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File: 2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier: 0MCUYB9PrxhiGH4cA5wFeHAVwbuvHpvwtR0gYEMWae4=
Subject key identifier: A3:FD:A2:BF:67:DD:3E:FE:0B:9D:E3:E8:3E:33:3A:E9:F9:AB:DA:D6
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer: /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial: 01A001DD6D2135D1F0BFD548A5152AEEA41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number: 1472
Signing time: Fri 14 Aug 2026 20:01:23 +0000
Manifest this update: Fri 14 Aug 2026 20:01:23 +0000
Manifest next update: Sat 15 Aug 2026 20:01:23 +0000
Files and hashes: 1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: fTMZoL0DUkAJWaNTFdcijWIkqpeyRTrVHXXDSe4bdGs=)
2: h-VETfFgbFHuxDZMujDztjTttXI.roa (hash: cT0vDAAZEp2yJmwUDRGaScHTPsMyXNmcut9rbqNcbpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:6d:21:35:d1:f0:bf:d5:48:a5:15:2a:ee:a4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Validity
Not Before: Aug 14 20:01:23 2026 GMT
Not After : Aug 15 20:01:23 2026 GMT
Subject: CN=a3fda2bf67dd3efe0b9de3e83e333ae9f9abdad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:06:3a:53:50:e2:ce:29:44:74:b1:6e:0a:
32:28:7d:4f:e0:d1:f2:cd:47:cb:89:8c:e1:2c:32:
f8:41:46:46:61:72:87:75:3f:97:8f:87:f6:0e:65:
92:f3:ff:fc:88:6f:74:2f:21:6a:03:d9:03:7b:75:
e9:04:b9:2e:dd:55:d0:91:60:6d:87:27:26:9d:e1:
2a:3b:89:5d:4a:01:93:36:54:2a:bb:86:73:94:89:
39:b6:f5:19:ae:6f:c6:e9:a9:72:b1:39:69:d5:6e:
e0:87:d5:33:f9:31:12:1d:0e:b0:d3:8d:76:e5:71:
5c:08:a0:3f:19:e2:cf:f9:72:5b:7c:77:96:9f:e2:
01:01:30:b3:50:59:62:66:69:41:7a:43:a7:10:93:
29:92:36:87:be:5b:db:63:98:7b:6c:ec:b5:71:25:
c3:9d:23:7f:8b:49:e2:f4:c2:1e:b0:21:29:75:01:
52:ab:35:f4:4f:18:52:2a:d4:aa:96:10:32:5a:97:
49:57:b4:c1:b1:89:4e:13:2d:bb:f1:39:fd:a3:37:
c3:ff:b4:c6:f3:e7:f9:9d:fb:ec:ad:b3:6c:b4:9b:
f4:dd:f7:3e:06:b8:d3:99:62:95:f8:6a:4f:74:ad:
2e:c7:ac:f8:85:43:97:33:f0:84:cc:cf:b5:49:1f:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FD:A2:BF:67:DD:3E:FE:0B:9D:E3:E8:3E:33:3A:E9:F9:AB:DA:D6
X509v3 Authority Key Identifier:
keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:84:2b:a7:69:16:81:03:28:58:39:8a:a1:74:16:df:45:c3:
1c:93:ce:89:3b:4d:0b:41:51:0f:5d:75:86:61:2f:f0:f8:d2:
26:74:be:85:57:9d:5b:e9:3a:93:71:89:c9:48:c3:25:d3:cb:
cd:b3:5c:e5:86:7f:ba:ac:7a:76:c4:f3:cd:3f:82:2e:80:0c:
61:59:99:a5:1b:b2:48:d8:4c:8f:6a:41:89:66:db:e7:c8:24:
56:86:49:73:56:33:af:56:68:2b:9f:9a:d6:57:aa:f6:5a:d5:
a2:73:80:a5:94:c8:3f:1a:71:7a:a3:01:d9:e8:4c:61:c3:0a:
c8:75:de:e5:18:9c:72:09:ae:2e:6e:c6:65:7d:47:da:09:d7:
44:93:79:ca:cb:63:86:a4:b6:fc:d4:fa:38:c4:3a:af:13:34:
6d:26:de:8d:21:0e:8f:9e:e5:ec:c3:21:5f:df:5d:9e:f7:3e:
38:b3:1d:61:c7:3b:bf:27:eb:a6:73:1d:22:5b:a4:4e:89:1d:
a9:df:bb:5b:5d:c7:0e:b1:76:38:b8:40:d8:21:61:e1:c2:a7:
9a:05:a3:dc:af:67:ac:27:37:0e:e4:b4:1a:85:a4:9e:10:d0:
e9:3f:ac:fb:5c:21:b8:8d:41:e4:49:67:bb:ca:6c:00:bb:f0:
6d:98:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:33 2026 by rpki-client