Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: Mkp2iTv8F5bz4okI6n2iE6IMw2OHqNS2c9Nfu5LbpWs=
Subject key identifier: 23:C5:53:AB:6D:31:EE:64:BF:3A:6C:B6:32:0C:7D:3B:31:F2:2B:2C
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 01A0010210A2CE7D5D05907EE3BFB83E9C08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 16:01:47 +0000
Manifest this update: Fri 14 Aug 2026 16:01:47 +0000
Manifest next update: Sat 15 Aug 2026 16:01:47 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: JxFHGfkJo7MsaQuvV7QBz+qUJNFA2QTDLJKW3Ngvqk0=)
2: uWdyVKFrhKn03chUHfeK0y0qk7Q.roa (hash: dt9A+qc2boc7/F2tKhjup1ZYyV2tp8NxgEsRgPLzDSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:02:10:a2:ce:7d:5d:05:90:7e:e3:bf:b8:3e:9c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Aug 14 16:01:47 2026 GMT
Not After : Aug 15 16:01:47 2026 GMT
Subject: CN=23c553ab6d31ee64bf3a6cb6320c7d3b31f22b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:62:c3:12:e6:35:ad:df:00:b9:44:f5:1f:fd:
e3:3a:70:7b:05:a8:6c:89:88:e5:02:33:1e:bd:ff:
f9:34:b1:14:58:15:76:31:57:d1:d4:ef:82:e2:26:
0f:37:94:ee:be:2e:af:80:33:ab:0f:6f:2c:4e:33:
23:d4:6d:fe:16:db:f9:5e:70:21:33:6e:a8:a0:f5:
12:59:b2:84:8d:5c:a3:52:f9:1d:7c:74:da:08:51:
dc:e0:72:06:ae:40:94:c3:e7:00:55:6a:d3:b8:03:
a4:b8:54:5a:f8:f9:a9:85:21:10:90:32:29:dd:01:
32:83:26:5f:e3:ab:40:22:b3:4b:54:20:78:26:5d:
0c:8d:6f:eb:9b:dd:16:d0:9a:0b:a3:b3:02:52:26:
2a:f5:ef:de:73:85:c4:d6:85:f2:0c:40:ad:b2:1d:
23:59:28:5d:ef:dc:b0:9e:76:0e:2f:81:86:8c:32:
11:64:3a:f4:a1:86:dc:2c:00:e0:b2:7d:b2:0b:41:
25:91:d3:30:c0:91:54:51:9f:3b:59:46:00:58:5c:
dd:4b:d8:15:3a:5c:0f:70:44:72:ee:47:6c:1a:6b:
c3:90:f0:f6:af:e3:8f:7b:94:6e:0c:43:21:6c:ff:
e7:d2:29:4c:02:b8:5f:ae:c1:b4:88:bb:63:d4:db:
a0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C5:53:AB:6D:31:EE:64:BF:3A:6C:B6:32:0C:7D:3B:31:F2:2B:2C
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:1d:6a:52:52:e5:9c:68:cc:b8:4d:01:2b:d9:63:66:16:b4:
0a:17:88:13:38:4f:1e:9c:b4:05:a0:16:ad:1f:e6:e7:ba:58:
39:c5:28:5e:9a:4b:ed:74:1b:ec:35:df:b2:c4:67:54:4c:be:
ca:0d:d7:d1:23:32:f3:51:ba:54:44:b0:07:27:b9:45:ae:fc:
02:06:b5:b8:87:73:61:e6:a2:60:29:7f:f5:f4:0e:d8:8f:dd:
0c:c6:4f:bb:e4:70:f2:d9:73:6f:6b:e0:9e:84:b8:06:db:2e:
bd:56:22:11:7a:3f:f1:08:e4:d7:b1:fe:8e:68:e4:29:52:ae:
b7:bb:b6:e3:18:2c:44:87:94:5d:00:e6:07:75:8f:80:5b:79:
8d:c4:a1:d1:ea:8d:0b:c4:45:2f:3c:31:aa:12:96:ac:69:9f:
5d:cc:73:bc:ba:62:d4:f2:f1:a1:64:42:b7:9c:5b:3f:2d:cc:
e1:8f:b2:f8:80:ba:2f:28:f6:62:b7:05:d6:29:4b:b6:0b:1a:
2f:65:f1:50:56:80:97:96:6e:50:18:8d:4e:d0:2c:5f:a8:a9:
23:f2:19:bd:60:9a:fe:89:4c:df:bc:d7:4b:ed:0c:9d:83:89:
ea:d6:b8:0e:e6:ec:a2:60:19:bd:86:1f:c0:2b:66:69:44:e5:
5c:0e:24:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:17 2026 by rpki-client