Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: R8aA1+mI4MNAHi1jva++VEvvGhAuqEWAdghUddbs3bw=
Subject key identifier: 28:79:8E:13:36:5F:70:85:41:D3:23:28:2B:D7:1F:A5:BA:00:5D:4D
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 01A14D2C15F33107B7D0F1B98372C2164BAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 1AAC
Signing time: Sun 18 Oct 2026 04:01:37 +0000
Manifest this update: Sun 18 Oct 2026 04:01:37 +0000
Manifest next update: Mon 19 Oct 2026 04:01:37 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: WfNWh+Fb7QlpIsmjVQtN0w/IowzlBYtDH1y8h6hOWgk=)
2: uWdyVKFrhKn03chUHfeK0y0qk7Q.roa (hash: dt9A+qc2boc7/F2tKhjup1ZYyV2tp8NxgEsRgPLzDSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:2c:15:f3:31:07:b7:d0:f1:b9:83:72:c2:16:4b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Oct 18 04:01:37 2026 GMT
Not After : Oct 19 04:01:37 2026 GMT
Subject: CN=28798e13365f708541d323282bd71fa5ba005d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:fd:96:ef:bb:ba:09:d9:60:e8:d2:c2:6e:
2c:46:16:fc:3a:ea:b0:6b:9b:1d:96:b4:a0:f4:13:
9c:cf:40:76:ab:71:f1:6b:e8:c7:a1:bc:4d:0f:56:
15:7b:6d:cc:65:20:c0:a7:18:c6:09:a4:76:8c:37:
83:b1:0d:3a:89:6d:8e:64:29:a1:59:52:ad:d3:c7:
e3:a7:ae:e2:33:94:76:c2:9a:50:88:10:86:f5:5d:
f7:5f:90:c8:f1:ca:e5:a0:02:79:77:d3:b7:d6:94:
17:4f:8a:9e:1e:56:1b:b7:0d:0a:39:9d:5e:a8:15:
dc:90:2c:08:75:f1:1f:a2:51:3c:55:f9:e5:5f:74:
c3:58:76:f1:b4:fe:64:b2:0f:45:df:ec:ad:d3:a1:
7a:67:3a:5f:7f:c1:47:29:9b:35:f9:c6:f4:03:fe:
aa:38:72:77:f1:5d:16:8a:47:89:00:ae:40:d9:2f:
00:a3:ef:dc:4f:70:51:a3:4c:af:07:44:1e:97:e9:
e7:a2:e6:1c:46:4e:1a:20:02:eb:6c:e3:63:e5:ae:
de:30:6d:8c:97:6e:af:4e:1b:c0:45:c2:73:29:42:
c9:d3:a3:f4:c0:4b:12:95:f5:37:19:ef:66:7f:20:
a4:b1:85:65:c6:76:ff:14:6c:6f:98:1c:0b:47:8e:
f6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:79:8E:13:36:5F:70:85:41:D3:23:28:2B:D7:1F:A5:BA:00:5D:4D
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ca:60:2a:2e:04:3a:ed:16:59:88:85:ab:e3:95:6f:76:33:
d2:b9:ae:16:38:6c:02:29:29:eb:08:f2:37:10:03:26:4a:df:
cb:41:6f:6b:eb:02:e3:c2:fd:3f:95:0c:78:cf:00:96:12:8c:
3a:84:b8:32:96:1b:e4:c2:d9:d1:e5:5c:26:e7:69:5c:94:72:
f0:ce:f5:c0:8b:95:42:9a:f7:ae:68:bb:d3:ea:3f:d4:c6:ee:
77:bd:7d:2d:9c:9c:0a:6d:67:93:28:7e:cc:16:9a:c6:0c:f2:
e5:f0:c0:e0:83:00:bd:2a:5b:70:dd:a2:64:fc:52:fc:4c:8b:
69:e6:d5:2e:d3:3d:ca:1f:4a:b9:1a:d4:63:68:71:8a:99:fb:
96:8a:51:a3:d2:21:58:fe:d2:7e:30:b6:c6:d2:c9:a2:30:ee:
0f:c3:65:1d:f7:20:49:62:b4:41:37:ad:43:db:a2:5d:d4:06:
24:be:1d:e8:25:c6:05:a6:21:5e:6e:2f:e2:ba:5c:ed:ba:f4:
0a:2e:7a:1c:01:ff:7c:3d:a0:cf:ed:eb:5e:a4:e1:da:a5:d3:
d6:0c:4d:e3:e2:4d:49:24:66:a6:3a:60:4b:98:4f:15:25:78:
35:23:f4:f6:59:42:1c:26:1c:06:cd:52:ae:aa:87:70:e0:ee:
d2:89:ea:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:50:13 2026 by rpki-client