Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
File: 2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json)
Hash identifier: 144el+6uM7Mti6F+QvpxzldJytc8dJ4QTDFnEaenKxY=
Subject key identifier: A2:8C:65:5E:FE:03:4D:4D:8B:93:3F:A5:F6:90:EA:E0:51:F9:BF:89
Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
Certificate issuer: /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Certificate serial: 01A13F7076C49F159E9DAD84E051060BCD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
Manifest number: 0C05
Signing time: Thu 15 Oct 2026 12:01:37 +0000
Manifest this update: Thu 15 Oct 2026 12:01:37 +0000
Manifest next update: Fri 16 Oct 2026 12:01:37 +0000
Files and hashes: 1: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: og3h8chrxpbIMeVHSmQ2ux7aGlvNFaYM3UgDHHgqCXY=)
2: CiAnwNJagjVfieLOx1c1Vix6IOA.roa (hash: zHiUWsj/p9vTBDZQMmYEbPI7k87FTHgR5XEAk1UUQRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:70:76:c4:9f:15:9e:9d:ad:84:e0:51:06:0b:cd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Validity
Not Before: Oct 15 12:01:37 2026 GMT
Not After : Oct 16 12:01:37 2026 GMT
Subject: CN=a28c655efe034d4d8b933fa5f690eae051f9bf89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:07:02:3e:40:e3:9b:2e:8b:2f:ea:f6:9e:
ba:bd:23:77:69:2a:b5:13:91:bd:37:9e:82:13:c4:
63:91:d3:5d:5d:bc:7a:ee:2b:7f:81:58:55:21:1c:
32:41:e2:0e:45:8f:57:38:6e:b9:0b:82:21:8d:b6:
a8:e7:67:64:3d:4a:95:17:ef:74:88:27:45:7a:2a:
25:12:38:4e:c8:69:ea:89:a5:97:82:92:89:fc:38:
ad:bc:60:f1:40:1c:a7:cc:39:3b:86:af:6b:21:19:
34:29:99:16:44:73:de:55:07:50:2c:74:14:77:d3:
df:53:8c:3a:a3:12:e9:50:3c:96:55:dd:82:e9:e6:
a1:71:b5:a6:a0:2e:db:8a:cd:bd:9d:c7:80:77:f0:
20:b1:03:7e:bf:0c:ee:21:7a:b8:7b:76:9f:f9:0f:
b2:b0:fa:f6:15:e3:60:f7:0b:fe:ce:17:d4:1f:4c:
f1:47:b7:20:fd:0b:2e:be:c1:ff:90:e2:f2:e7:7d:
2d:a4:af:84:43:28:51:e1:99:e2:03:aa:f8:93:9f:
48:1d:81:0c:81:0f:d6:1d:81:74:fe:28:49:e3:bf:
07:d4:b3:8d:3a:2e:1e:aa:48:20:21:d0:4f:72:76:
75:86:f5:47:36:4a:3d:cf:87:45:13:58:27:da:5c:
45:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:8C:65:5E:FE:03:4D:4D:8B:93:3F:A5:F6:90:EA:E0:51:F9:BF:89
X509v3 Authority Key Identifier:
keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:52:a7:af:84:97:34:4e:c0:a9:5b:91:c4:31:bb:f6:1f:d1:
eb:92:12:80:bc:41:dd:c4:e1:c1:66:8d:fc:ca:23:48:5d:76:
60:63:42:3e:3b:87:37:14:72:99:c0:8e:e8:1b:50:4a:fc:05:
f4:c0:ec:55:be:76:26:eb:b2:79:3b:7d:d1:76:cb:ef:c5:ee:
06:c4:d6:f7:a3:d5:02:0a:29:2e:96:d3:a6:93:12:8d:de:99:
ec:f8:1f:7a:96:40:e6:71:be:c9:21:6e:25:1e:8c:dd:ff:16:
44:f1:b1:97:ec:ca:d8:3d:91:7f:80:24:d1:ea:15:b9:d2:af:
ea:16:89:fb:82:fc:da:7e:0c:de:10:be:b7:e1:fb:d4:f7:c5:
aa:82:ab:61:4f:3e:f0:80:35:d5:c6:7f:7d:04:71:83:80:22:
fc:c5:0b:82:03:87:30:9d:c2:9e:8c:98:17:00:e3:67:89:cb:
48:9e:1e:08:a3:9e:f7:81:fb:09:b7:72:d4:ab:9d:a1:d7:bb:
98:85:dc:05:8e:b4:69:ca:55:46:84:d2:91:9b:08:8e:f7:89:
f2:4f:1a:91:4a:01:05:07:7c:2e:4c:8b:1d:8e:43:71:e4:72:
7a:7b:72:8c:19:d5:55:6d:04:ea:24:ba:82:55:d0:1a:09:24:
59:06:04:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:19:57 2026 by rpki-client