
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
File: 2ua9_kJ4AI9xbU17C5-S9-A26yY.mft (raw, json)
Hash identifier: kCHQKbbQaOHhWrX7nR8M4BkPQRkP3dPqh8w2pmfC2vI=
Subject key identifier: 80:52:E3:43:94:92:39:4A:64:4E:61:1E:97:D8:EB:2D:3A:93:3E:A1
Authority key identifier: DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
Certificate issuer: /CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Certificate serial: 019FAAF52398A4D1C85EEBC3FE0802B13D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
Manifest number: 1445
Signing time: Tue 28 Jul 2026 23:00:19 +0000
Manifest this update: Tue 28 Jul 2026 23:00:19 +0000
Manifest next update: Wed 29 Jul 2026 23:00:19 +0000
Files and hashes: 1: 2ua9_kJ4AI9xbU17C5-S9-A26yY.crl (hash: woxIEZAJLma0OPzsnaCt7A+U8zEN48sXPX/Kn2nymLU=)
2: h-VETfFgbFHuxDZMujDztjTttXI.roa (hash: cT0vDAAZEp2yJmwUDRGaScHTPsMyXNmcut9rbqNcbpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:23:98:a4:d1:c8:5e:eb:c3:fe:08:02:b1:3d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae6bdfe4278008f716d4d7b0b9f92f7e036eb26
Validity
Not Before: Jul 28 23:00:19 2026 GMT
Not After : Jul 29 23:00:19 2026 GMT
Subject: CN=8052e3439492394a644e611e97d8eb2d3a933ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:85:d1:37:53:a6:a0:95:61:b7:84:9c:05:
7a:55:f2:d4:03:c8:9c:b4:2c:94:33:16:8e:c8:4f:
62:70:b4:fc:62:48:1c:83:97:76:7a:a5:ff:20:f2:
d1:e4:3a:42:c8:19:5a:28:df:8b:a6:f7:5a:75:65:
68:fd:f5:27:5e:82:58:6b:16:ec:d7:a6:5f:ac:31:
a5:3a:82:12:1f:c5:94:c1:b3:c4:0a:2a:9c:5c:78:
b6:ff:a7:27:7d:5b:c7:5c:1e:b3:56:92:65:90:f8:
cc:18:21:37:a5:23:12:c2:b1:2f:fd:81:6a:57:21:
51:a3:7d:57:fd:34:0b:2f:87:8b:d3:db:b8:a6:1f:
9b:76:dd:b4:2a:cf:2c:df:f0:1c:a7:0d:59:8b:89:
38:e7:3e:95:02:df:b1:44:97:00:f3:b1:8a:3c:1c:
e6:cd:cf:e9:53:bf:45:90:06:a0:ca:f2:4c:37:49:
d3:4c:e7:14:66:0d:28:3b:87:42:25:eb:66:a1:c7:
27:82:06:ff:05:60:f9:58:96:ca:77:12:2a:a1:66:
73:97:44:33:ed:2b:b8:8d:47:49:ba:27:b3:f3:9a:
09:54:64:e4:55:15:00:5b:55:57:84:6b:f6:3b:f2:
33:a4:5e:d4:10:a9:7d:43:bd:34:f7:25:54:fc:be:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:52:E3:43:94:92:39:4A:64:4E:61:1E:97:D8:EB:2D:3A:93:3E:A1
X509v3 Authority Key Identifier:
keyid:DA:E6:BD:FE:42:78:00:8F:71:6D:4D:7B:0B:9F:92:F7:E0:36:EB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ua9_kJ4AI9xbU17C5-S9-A26yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/80d087-4700-4e85-a783-bf24e775b2bc/1/2ua9_kJ4AI9xbU17C5-S9-A26yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:20:8e:56:1c:13:a3:2e:a6:c6:94:11:4b:f6:70:16:cd:11:
9a:8a:e9:b1:ba:db:6b:5e:0b:bd:ff:8f:53:aa:fe:88:34:f0:
28:c8:a8:a7:9a:40:00:f2:9a:c7:10:b2:98:88:30:a2:95:02:
b2:95:8e:fb:74:dc:83:d7:48:6e:40:b0:79:7e:0f:1d:c5:4e:
37:d0:98:f3:98:40:9e:19:7c:e5:78:45:14:04:06:3a:19:e8:
36:e6:ff:59:ce:c4:0b:07:fc:56:a0:17:e2:01:7b:9f:4e:a5:
09:c5:08:cc:3c:c8:20:ce:cb:f4:85:1a:b6:d6:0c:c7:2c:a6:
46:e3:50:e9:4d:5b:15:b0:d1:dd:a5:c2:ac:4f:b7:60:46:ec:
21:1f:59:06:ea:9a:e6:02:18:04:93:e1:31:ae:26:7c:a2:34:
4f:d8:a3:2d:35:d3:5b:44:f9:a8:14:f9:88:fb:d0:79:54:9d:
9d:1f:a7:6f:71:f8:0b:9a:0b:d0:49:eb:34:0b:33:da:aa:10:
9b:a7:59:a2:60:50:d2:49:db:2c:22:04:84:47:25:ed:94:34:
aa:ad:2c:ab:1c:ea:4b:fd:4b:6c:19:ea:22:df:2d:6b:a7:25:
39:be:50:a2:5e:1e:2c:bb:01:26:67:93:1e:76:4d:75:2d:c0:
af:0f:1b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:43:53 2026 by rpki-client