Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: 82hfHPOXJz9hKh0oP1uI5ZqrhamhpWCtO4VhVn2/eTo=
Subject key identifier: D1:40:64:8B:D1:61:12:A7:E0:68:41:23:90:B1:07:06:41:BF:9C:2B
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 019D38656798F894C9C6428D2647F338EC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 07:01:02 +0000
Manifest this update: Sun 29 Mar 2026 07:01:02 +0000
Manifest next update: Mon 30 Mar 2026 07:01:02 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: tSkPRmNDNzrNVbI31S8Wwcyzt1y1O3x3Vpys5mctqY0=)
2: uWdyVKFrhKn03chUHfeK0y0qk7Q.roa (hash: dt9A+qc2boc7/F2tKhjup1ZYyV2tp8NxgEsRgPLzDSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:67:98:f8:94:c9:c6:42:8d:26:47:f3:38:ec:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Mar 29 07:01:02 2026 GMT
Not After : Mar 30 07:01:02 2026 GMT
Subject: CN=d140648bd16112a7e068412390b1070641bf9c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b8:a8:d5:39:17:d0:d5:10:22:c0:a5:8f:f9:
7d:e2:38:ac:fc:c5:68:66:8b:72:14:2f:54:f3:4f:
49:0e:da:02:ff:a7:ab:6d:e6:c6:b9:23:2d:78:70:
7b:6e:6e:43:0b:5b:a4:11:f6:a1:db:fc:47:ee:92:
51:ff:c5:2c:44:b5:ba:57:0a:9d:49:27:d6:48:f8:
1f:11:90:da:d1:b5:c5:38:41:43:36:25:31:a6:86:
7d:e3:de:56:3b:f5:8e:10:a3:e6:ed:37:f8:3f:38:
59:93:38:1d:a6:80:a0:30:55:2c:ec:36:e3:59:cf:
32:3c:9f:59:bf:5c:78:41:4c:c4:43:95:21:b9:3e:
b9:01:e5:6b:c6:c2:ee:54:e6:14:91:f8:bc:57:80:
7a:10:9f:df:bc:3f:2c:25:d3:3b:50:6f:89:29:b2:
af:54:94:24:4a:35:49:cb:e5:98:1b:7c:03:b1:33:
ad:26:7f:b1:01:4a:c9:f8:08:e5:42:2a:32:ad:6c:
54:df:51:cc:e7:02:a5:c8:85:fb:14:01:51:73:d2:
9c:cb:4a:ec:96:01:61:5e:0b:17:ac:9b:85:b4:c2:
23:5a:5b:2f:31:80:94:b4:66:a5:0e:41:aa:74:fb:
d7:16:65:43:90:9a:10:34:7d:96:e8:6e:d0:24:a5:
3d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:40:64:8B:D1:61:12:A7:E0:68:41:23:90:B1:07:06:41:BF:9C:2B
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:a1:41:eb:52:79:a1:8b:8a:46:54:98:b8:9f:07:7b:81:c0:
20:2e:3a:1b:0b:67:c5:e6:15:35:8f:c6:2d:0c:5b:cf:5a:ba:
f9:68:b2:b8:46:8a:84:cf:79:16:40:e1:69:77:89:ee:51:3e:
29:67:47:07:02:a1:60:05:e4:ff:82:e1:b8:5b:ba:a3:29:09:
d2:ec:67:7f:89:8c:16:5c:5d:0d:08:e3:38:2b:73:6f:77:5a:
0e:c9:0d:a5:8f:8f:4e:1b:09:9d:9c:22:2b:d3:b0:b7:a6:94:
69:82:c9:88:4f:c8:23:45:24:67:43:a8:83:8e:54:8f:da:80:
f0:2f:38:4b:52:fa:59:64:1d:1a:5f:4e:18:6d:74:b6:e5:08:
63:f3:f6:42:af:02:4d:15:25:4e:87:5b:a1:d7:71:6b:b7:1b:
5b:d4:78:b7:29:89:be:4f:04:bd:b4:ca:d7:29:0f:e2:c4:34:
be:69:a5:56:68:44:4b:a4:50:31:c4:04:d4:d2:f1:93:30:3c:
97:05:a6:e4:63:b1:97:8b:aa:e5:5a:b6:63:47:98:a6:db:b4:
aa:04:bc:1d:4c:11:d8:f1:b4:d2:c5:c3:36:8c:fd:9d:bf:6e:
87:ce:8c:33:c5:24:86:81:b3:6f:2b:ef:1f:da:83:fa:2c:78:
e8:3e:5c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:33 2026 by rpki-client