Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
File: 2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json)
Hash identifier: UkIeurFjIM5d1cr7hqmBc+3Y3rPdT6z2ivw81NX3tcw=
Subject key identifier: 74:F2:C7:84:A8:7A:31:53:CB:45:E5:96:B7:B3:F3:04:12:CA:4C:97
Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
Certificate issuer: /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Certificate serial: 019E314E127E9384352F529F7E3A88D974D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
Manifest number: 0A70
Signing time: Sat 16 May 2026 15:01:00 +0000
Manifest this update: Sat 16 May 2026 15:01:00 +0000
Manifest next update: Sun 17 May 2026 15:01:00 +0000
Files and hashes: 1: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: 9EpXGl3Z4kdLLPff9lnJJo7RNZB59+HOkjyDt1HZ+bc=)
2: CiAnwNJagjVfieLOx1c1Vix6IOA.roa (hash: zHiUWsj/p9vTBDZQMmYEbPI7k87FTHgR5XEAk1UUQRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:12:7e:93:84:35:2f:52:9f:7e:3a:88:d9:74:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Validity
Not Before: May 16 15:01:00 2026 GMT
Not After : May 17 15:01:00 2026 GMT
Subject: CN=74f2c784a87a3153cb45e596b7b3f30412ca4c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:ed:52:26:53:20:15:b9:07:0a:22:b8:20:
b4:e5:2d:39:73:16:df:ea:59:9e:c0:b4:1c:ac:d0:
68:07:b1:37:d7:b2:e0:15:7c:5b:94:d0:78:6d:f9:
61:77:e7:73:e2:55:d8:e7:c6:10:d8:f0:bb:3b:36:
b6:a8:ef:62:db:e2:d7:89:34:a6:7f:c2:4b:33:b2:
80:99:d5:44:3d:68:67:9d:d8:1d:82:11:c1:6e:fd:
56:71:40:90:66:c0:c4:35:bd:c5:55:72:a2:d6:6a:
14:ed:93:c6:d0:1b:01:17:fd:3d:0d:db:80:58:8f:
27:ad:16:3c:5d:5b:1c:17:10:e8:27:87:02:84:84:
b1:2f:5a:0e:a9:f3:29:1c:65:61:d7:31:85:9b:ef:
f9:36:4a:f7:22:8b:6c:fb:37:ff:a8:7f:87:d5:c5:
a7:cc:cb:5d:3e:c3:e8:7a:93:0e:e5:8d:fc:8a:53:
b5:0c:bb:b2:11:89:de:91:52:0d:1b:21:c0:1a:3e:
5f:5a:8e:7c:0f:94:d3:ba:e1:1c:43:4e:7b:fe:2f:
e5:1d:27:f9:db:08:8f:92:d4:9b:31:6c:52:51:aa:
c3:f0:bf:11:df:d6:ac:f0:a6:fe:73:53:cb:82:c5:
15:5c:f1:53:f1:30:29:f2:a4:1f:25:1c:2f:08:86:
9b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F2:C7:84:A8:7A:31:53:CB:45:E5:96:B7:B3:F3:04:12:CA:4C:97
X509v3 Authority Key Identifier:
keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:85:1c:1d:d7:09:4b:4f:cb:60:08:22:8e:65:35:da:68:45:
52:4b:3f:16:3c:bb:71:7b:0a:03:92:08:91:30:bf:e5:b0:36:
d3:86:c4:41:23:28:7d:be:13:bb:58:35:70:82:a3:70:ac:e4:
dc:66:fe:be:37:dc:92:ad:af:8c:8a:85:5c:c8:a1:b1:46:6d:
cf:d0:dc:3d:b6:d6:72:aa:f4:d8:98:a5:c2:c2:8b:02:9e:b6:
f5:2d:95:27:ce:d2:d0:ab:dd:a8:b3:bd:d8:d1:3b:2b:57:6d:
ec:1a:cb:44:7e:03:a2:5c:3b:84:73:d5:85:9f:a6:33:56:58:
6a:3f:67:15:ff:65:40:6c:4f:54:e8:b5:d4:96:b1:a6:89:ec:
24:d3:ea:79:18:ec:d5:87:b6:67:5d:65:4e:4c:17:eb:9d:ed:
39:03:27:87:85:82:be:e4:92:ab:43:48:7f:b1:f2:53:9b:a5:
e3:21:03:ec:4b:b3:ff:65:52:00:2f:df:e9:10:08:84:96:0b:
1d:65:16:c5:2f:ca:06:83:30:9c:97:03:f7:8d:b9:54:1b:06:
9a:b3:43:92:15:1f:3a:fe:67:bd:6a:75:c5:1f:41:b4:c6:11:
3d:3d:d4:21:2f:55:3b:f6:35:7b:e5:dc:1d:f0:88:64:c6:54:
5a:b4:b0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:10:26 2026 by rpki-client