Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
File: 2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json)
Hash identifier: AY3FpRaLkVBhIbKcmLgFhzxnjTiFopxWx2El8hWAoJE=
Subject key identifier: C8:2C:45:68:A4:65:7A:DD:81:25:20:E3:00:48:CB:A1:4D:38:F5:2E
Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
Certificate issuer: /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Certificate serial: 019D3789BADFCE0310D5DEECA2D5CF28F36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
Manifest number: 09EC
Signing time: Sun 29 Mar 2026 03:01:06 +0000
Manifest this update: Sun 29 Mar 2026 03:01:06 +0000
Manifest next update: Mon 30 Mar 2026 03:01:06 +0000
Files and hashes: 1: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: sSe1pE7ro7hZfsKC+Ar0jq1drDpEDVqpyRgDpjK/sLE=)
2: cb6RT1EIH2UE1qS6xuvmhoSY90w.roa (hash: w0eimh8eUGbfM3xNdHnghVn9Aj2SOX0pDoX2BzEu2Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:ba:df:ce:03:10:d5:de:ec:a2:d5:cf:28:f3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Validity
Not Before: Mar 29 03:01:06 2026 GMT
Not After : Mar 30 03:01:06 2026 GMT
Subject: CN=c82c4568a4657add812520e30048cba14d38f52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:02:6f:59:b8:69:9c:98:ac:bf:8d:15:0f:
d1:f0:d1:68:d2:52:22:65:7b:fe:38:f5:51:6c:21:
4b:74:3f:fd:10:46:e4:10:7b:5c:64:15:60:a5:49:
fb:52:8f:43:e8:58:f1:b7:35:ef:12:40:20:3e:6d:
b9:7b:a6:40:2a:6c:b8:37:7b:6c:9d:9b:0a:ed:b3:
63:19:ac:9c:94:ce:4d:9d:47:6e:1a:d5:c4:2c:d7:
32:e3:7e:c1:9f:99:f1:78:09:4f:b4:4a:47:49:44:
96:9d:f4:b6:1f:37:5b:38:fc:80:84:ff:8d:6c:21:
8c:77:98:d5:dc:07:11:f0:2b:d4:b3:4f:18:fc:80:
f7:ca:5e:46:0b:b9:21:22:3a:a4:6d:99:fe:76:2f:
d7:eb:f1:d8:b8:59:17:39:52:f3:d4:39:1f:74:69:
f8:21:77:de:e2:98:ac:55:20:da:9a:f8:5a:c7:92:
21:98:95:0c:da:ad:99:83:45:cb:73:e5:27:f1:3e:
a5:5f:19:45:c5:56:38:72:13:b7:08:74:f2:e1:5a:
67:10:b4:81:e7:1f:6f:7a:58:87:a0:70:26:3c:49:
4f:80:52:32:02:15:e7:89:c3:dd:1c:1c:ee:fe:21:
c8:ea:74:21:56:b8:5d:7a:7d:29:88:b7:cb:83:fd:
86:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2C:45:68:A4:65:7A:DD:81:25:20:E3:00:48:CB:A1:4D:38:F5:2E
X509v3 Authority Key Identifier:
keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f8:1c:3f:8a:a0:34:9e:ba:2a:14:e1:a5:de:d8:3f:f2:19:
2a:90:9b:3f:f0:00:36:5c:9e:bc:57:27:c2:a7:c6:ad:f2:86:
a6:84:0e:1f:c7:06:e5:0d:64:6e:18:66:a0:84:0b:7c:9f:88:
30:28:c1:f0:84:16:53:5c:b6:4e:59:8c:1f:07:f6:8c:72:7e:
23:30:33:08:a0:1f:9e:d5:24:9f:fa:ee:e5:5c:60:7e:47:16:
18:65:46:8e:11:ed:74:d9:80:be:8a:3e:61:c5:17:c9:04:38:
d7:67:63:42:d4:db:b4:9b:6a:fa:e6:68:bb:59:c4:76:98:89:
48:b7:2a:df:70:47:66:34:b5:cc:77:9f:85:66:9d:c2:35:2d:
74:f3:3d:e9:c3:f6:37:d1:1a:65:75:b9:0b:d8:f4:a8:aa:22:
e5:3b:e0:71:60:bd:cd:55:51:d7:a9:cb:34:f2:e2:fc:d7:43:
8e:94:45:e7:2c:44:9a:28:62:95:d0:42:20:5e:c8:26:21:a2:
be:f0:9a:42:86:68:b5:0a:8b:2c:ac:a6:4d:1c:17:ee:bd:6d:
9d:6c:f5:aa:38:91:b1:fd:e4:18:f1:b1:25:f8:4b:d6:3a:c8:
40:db:b8:46:e9:16:51:fb:15:49:46:b7:13:ab:4b:fe:84:0f:
7c:4e:2e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:59 2026 by rpki-client