Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
File: pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft (raw, json)
Hash identifier: va1119jAbHmlxfoJ8sb4cAQoOVEEh15jZAoQqEk+q+Q=
Subject key identifier: 22:3D:B2:82:B8:38:32:A3:C9:5B:82:B6:B9:18:42:E6:C4:25:B4:80
Authority key identifier: A4:0B:AC:66:FB:FE:CC:E5:EE:2C:A8:CD:89:56:68:47:10:86:ED:9C
Certificate issuer: /CN=a40bac66fbfecce5ee2ca8cd895668471086ed9c
Certificate serial: 01A0D8A8C85B1591F3A66B81076E47E37511
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
Manifest number: 02D2
Signing time: Fri 25 Sep 2026 13:02:14 +0000
Manifest this update: Fri 25 Sep 2026 13:02:14 +0000
Manifest next update: Sat 26 Sep 2026 13:02:14 +0000
Files and hashes: 1: WlMbZGmn7ELXlYYDe9GRZvGgMVU.roa (hash: YxkhfO0kcIItDFF9reiDtyKSrNleRYkzff6/T+LQRME=)
2: pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl (hash: waJ+I9UhbC4xn6Lj4LgvE3HCa2i9wNnn89C9vnJvIL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:c8:5b:15:91:f3:a6:6b:81:07:6e:47:e3:75:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a40bac66fbfecce5ee2ca8cd895668471086ed9c
Validity
Not Before: Sep 25 13:02:14 2026 GMT
Not After : Sep 26 13:02:14 2026 GMT
Subject: CN=223db282b83832a3c95b82b6b91842e6c425b480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cb:50:cb:e6:8c:82:73:e3:9b:8b:58:3b:20:
56:67:78:73:51:4a:db:fc:68:a8:a2:f2:01:b1:74:
7d:8c:26:d4:f7:e1:46:df:24:83:98:79:51:31:80:
f7:8c:8e:6e:0c:98:89:dc:8d:95:f6:5a:35:a3:51:
ca:df:18:26:67:46:2f:a5:77:55:c6:0d:39:0a:28:
9a:c1:29:c1:16:fb:ea:66:e3:81:f0:22:fd:31:b9:
97:80:3b:ed:36:8d:19:41:05:13:83:1b:20:f4:67:
1f:1c:7e:3d:33:54:cf:89:91:83:96:73:c8:56:ba:
eb:48:e2:fd:e4:6a:e4:26:08:eb:c1:75:57:4d:a4:
bc:2c:4b:a9:bc:c9:c5:0a:26:a5:36:7a:4e:c7:d1:
46:e1:55:79:d9:f5:11:6c:9a:0a:04:0b:dd:ac:52:
4e:48:b8:f6:bc:ae:10:de:a4:cd:5c:ae:92:ce:e2:
f0:30:5e:dc:d7:2b:7a:9c:fe:96:81:24:8c:52:30:
bf:3b:30:d0:75:b0:5e:5a:90:7a:c1:72:f2:52:cd:
fd:32:6f:eb:96:1b:b2:02:97:14:3c:c6:5d:de:b6:
9b:f1:17:ab:31:c5:2a:35:2f:df:ce:6a:b3:ef:93:
14:5c:d0:6f:a0:5a:da:e8:44:3d:1c:c7:84:2b:a6:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3D:B2:82:B8:38:32:A3:C9:5B:82:B6:B9:18:42:E6:C4:25:B4:80
X509v3 Authority Key Identifier:
keyid:A4:0B:AC:66:FB:FE:CC:E5:EE:2C:A8:CD:89:56:68:47:10:86:ED:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAusZvv-zOXuLKjNiVZoRxCG7Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0dc200-8f9a-44d9-b53e-a75b962a7fca/1/pAusZvv-zOXuLKjNiVZoRxCG7Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2b:f5:d7:39:1c:14:e1:45:28:b4:b1:6a:d1:a9:68:40:c0:
7d:73:cf:b0:3b:38:4c:7a:ff:42:f4:eb:37:4a:af:0f:7d:18:
6e:19:25:93:d4:5b:f8:52:4c:0a:af:55:94:2a:06:56:72:1a:
33:6e:98:05:7a:88:ac:67:3d:b9:8d:c6:ca:33:c2:ec:7c:96:
07:ba:e9:0b:e6:4e:fa:b8:ef:5d:89:83:e8:eb:59:1e:1e:2e:
ba:45:6d:17:e2:df:4d:2d:0b:d2:6b:91:33:f8:48:11:93:c0:
05:2b:6e:6b:be:a8:02:fd:7f:37:32:ef:a7:65:86:3c:e9:2b:
c6:6d:c8:47:b3:4c:b0:ef:a8:7a:13:fd:c5:87:c9:32:5d:e1:
3c:ba:ec:03:8a:30:5f:fd:8a:ad:61:6c:88:41:cb:af:e9:1f:
72:fb:05:36:09:77:a3:d7:e9:38:ba:5b:43:fc:3e:8c:75:ed:
95:f0:20:58:ee:71:44:2e:39:88:20:74:7a:fa:43:d5:5d:9c:
22:d1:77:9f:0f:ad:be:65:63:c9:ba:41:8c:56:11:40:be:57:
f1:4c:52:c9:57:d1:33:c2:36:9f:42:5b:7a:ec:ae:bb:e1:f7:
fe:82:bc:d7:e2:71:d8:4d:29:4b:6a:c7:3e:24:06:ec:2b:1a:
b7:09:78:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:28:11 2026 by rpki-client