Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: sNiXD3jmXmWQ2zMgWf6jreJz+cFx4sgjI8i04HcMufc=
Subject key identifier: 63:6A:9B:91:8E:08:57:04:0B:E6:DB:FE:3E:D9:C8:32:AF:31:ED:75
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 019D382E252F78F7B5322F3CF0FF2CA8221A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 06:00:41 +0000
Manifest this update: Sun 29 Mar 2026 06:00:41 +0000
Manifest next update: Mon 30 Mar 2026 06:00:41 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: 0YhOB54gsydNzSjcUyy9v5or0fnzWqsQvPFyJxwU/h0=)
2: N55eH_oAjxUzygUu8ZpQX2jQHJY.roa (hash: XxApRY5e0T0pxBKCirNpMUCze56tIRN9zPVvruBzwks=)
3: oZaTMKE7E4FwqTm79QuG6ASibB0.roa (hash: ZOWJ5Trq3fmQuF8ETV1iaKndg7XImOjNbNyQwiNg8RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:25:2f:78:f7:b5:32:2f:3c:f0:ff:2c:a8:22:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Mar 29 06:00:41 2026 GMT
Not After : Mar 30 06:00:41 2026 GMT
Subject: CN=636a9b918e0857040be6dbfe3ed9c832af31ed75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cb:c7:81:f7:dc:9f:57:5f:5d:f0:9b:00:cb:
5a:77:f3:00:4f:c2:76:5e:1f:29:d8:c9:34:dc:0e:
e7:c9:fb:67:e6:8b:a0:9c:a0:1f:24:85:e6:6a:0e:
da:f1:c1:81:8d:a9:b2:0d:02:77:9e:7d:f9:94:ce:
74:fe:99:95:29:4a:16:eb:7c:ab:62:6c:c1:f3:f9:
24:58:30:45:4f:73:ce:f3:cb:eb:2d:f3:8f:68:a3:
ee:2e:e3:ad:e3:a8:ad:a2:38:84:66:b1:67:82:2b:
73:b0:07:4d:00:c4:19:41:06:70:da:13:95:a7:a5:
37:78:39:de:64:e6:65:73:5a:2f:57:f0:f4:2c:67:
8c:e8:59:4f:be:f0:71:89:19:df:00:a2:28:64:33:
6a:91:e6:c2:14:92:3f:ec:bd:10:26:e7:1d:86:db:
a9:35:28:d9:24:84:af:e5:0c:8d:fe:2c:dd:38:a2:
2d:51:ff:0b:6c:01:ed:88:cd:91:4b:1b:be:dc:9e:
93:d3:1b:15:9b:32:3d:4a:e8:2a:6a:49:e4:b2:01:
7b:7e:46:d3:56:a3:ba:bf:d6:27:71:cb:7c:43:3b:
6b:3f:a9:7e:4e:f6:b8:c2:25:d6:d0:fd:0b:6f:18:
fc:72:a5:59:fa:be:f3:11:55:db:2d:ac:65:9c:2c:
d4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6A:9B:91:8E:08:57:04:0B:E6:DB:FE:3E:D9:C8:32:AF:31:ED:75
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:99:f3:d8:76:f8:08:f5:d1:0b:bb:73:62:73:4f:9d:df:3a:
90:dd:75:7c:58:07:ac:66:8e:aa:e7:fb:d6:4c:6f:24:a0:c3:
3e:3d:c2:15:80:11:38:17:c8:9f:80:1c:f8:4b:d0:74:4c:57:
fe:a1:3a:92:c6:57:96:e8:0c:fc:e4:e2:fb:24:9c:20:8e:11:
9d:ad:19:c8:15:0c:16:f0:ad:ba:6b:23:39:d5:da:59:d4:c8:
b6:98:38:f7:79:6a:36:ae:af:5f:f1:0a:0a:ca:5b:3e:31:f0:
5e:ad:bf:c8:5e:07:51:5c:9f:c8:59:83:40:9a:e6:eb:a3:27:
5e:24:c7:8d:fa:dd:9f:fc:0b:d7:23:4b:f2:10:f2:10:05:61:
0d:c0:a5:ce:f6:34:db:cf:0d:10:ff:ad:ea:72:c8:96:a6:d9:
f1:94:09:ea:84:3a:f7:77:e1:a2:cf:f9:69:06:5c:fb:8b:67:
04:14:d8:d2:56:05:98:3b:e2:b6:52:6c:c0:8f:a5:3b:33:45:
cc:66:e8:86:41:d7:8a:05:8c:e8:db:14:93:1e:09:d0:7c:b2:
6f:86:21:be:a5:4f:fa:09:51:92:d7:fb:0b:5b:18:f1:f4:ec:
e0:48:d9:a8:b8:87:2a:eb:08:e0:3f:a6:03:d4:57:b1:ee:02:
b8:d5:14:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:06 2026 by rpki-client