Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
File: 2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json)
Hash identifier: 1hyd2IZtHgbFis8v6QZAUuGTAACSo3Gx2Q3OaRypcH0=
Subject key identifier: 51:36:EE:78:35:49:4B:FC:1D:40:EA:8D:6E:1A:AA:5E:69:50:4D:67
Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
Certificate issuer: /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Certificate serial: 01A0CD7F05406BA0A78FA0A6F3BBC6FA2FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
Manifest number: 0BCA
Signing time: Wed 23 Sep 2026 09:00:48 +0000
Manifest this update: Wed 23 Sep 2026 09:00:48 +0000
Manifest next update: Thu 24 Sep 2026 09:00:48 +0000
Files and hashes: 1: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: O/mP6LM6fAp4Ea2K1A7izzD7NqnvtNX4SA+S54mjdYs=)
2: CiAnwNJagjVfieLOx1c1Vix6IOA.roa (hash: zHiUWsj/p9vTBDZQMmYEbPI7k87FTHgR5XEAk1UUQRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7f:05:40:6b:a0:a7:8f:a0:a6:f3:bb:c6:fa:2f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Validity
Not Before: Sep 23 09:00:48 2026 GMT
Not After : Sep 24 09:00:48 2026 GMT
Subject: CN=5136ee7835494bfc1d40ea8d6e1aaa5e69504d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:23:81:4a:27:3d:28:a7:04:d4:55:1c:8d:a1:
00:0e:5c:0b:93:9e:24:20:39:69:82:55:7c:e3:31:
a6:e0:11:76:fb:93:22:2a:e5:05:cd:93:cb:1c:ab:
30:ce:b4:0a:0c:29:a5:77:b9:96:02:52:b1:53:4a:
82:d7:20:92:92:bf:22:9b:ce:2c:9a:08:57:d8:17:
79:2a:a5:c8:1e:10:17:28:b1:2f:cf:e6:5e:b6:5c:
ca:88:4c:9f:50:a0:9a:d2:45:25:fd:42:32:e2:ee:
13:74:03:7d:9b:dd:3a:c5:00:14:2f:c0:b2:80:1f:
af:44:20:bd:a1:6f:dd:fa:23:bd:af:bc:07:67:84:
2c:b7:36:23:b7:4d:d4:09:e2:58:00:54:7d:dd:db:
11:da:b6:86:23:60:ab:54:b9:af:f8:78:b4:dc:59:
ac:e2:25:6c:47:01:07:3c:0d:8b:ad:ca:80:bc:96:
25:97:30:c5:ea:7d:9b:56:d0:de:1b:2d:c7:c3:df:
32:05:86:37:db:12:8b:1f:6e:40:47:6e:a2:a5:5b:
fe:34:44:0c:63:7f:7c:ae:15:c7:2a:2b:b4:20:ed:
82:d0:d9:62:be:33:db:c3:cc:93:63:25:4d:13:54:
e8:29:4f:58:af:ea:a5:84:c9:83:19:7b:54:79:1f:
25:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:36:EE:78:35:49:4B:FC:1D:40:EA:8D:6E:1A:AA:5E:69:50:4D:67
X509v3 Authority Key Identifier:
keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f7:5e:77:27:34:bb:9e:10:b6:5f:f8:27:0a:fd:1b:c6:87:
5a:d1:9a:c0:04:81:64:bb:13:e0:5f:25:7d:09:b1:52:8c:60:
10:99:08:9a:3f:ed:26:d4:c8:39:5a:81:8a:2d:07:b6:39:2f:
a8:c7:e5:d9:f0:80:38:2a:4a:0d:0a:a4:24:21:da:82:43:b1:
90:aa:37:cb:57:a4:55:ea:31:4c:c4:e8:f7:5e:16:1f:59:86:
ba:99:3a:b8:89:90:52:0f:94:8f:a5:47:76:d6:f4:eb:29:a0:
81:84:80:7d:a0:b7:fa:53:b6:2d:c5:b0:91:5a:7b:9a:94:0a:
10:27:46:70:4d:1c:55:32:ae:20:d9:e3:7a:14:3c:3e:85:78:
ad:fa:bf:65:22:e2:1d:f8:92:1f:b3:02:8d:c5:32:3b:b2:57:
7f:85:f7:52:be:32:95:63:c7:ee:3b:36:90:5f:2b:01:8a:5a:
82:62:b5:19:7e:3a:0a:09:00:08:17:1e:16:c6:ae:0d:82:83:
70:0a:4d:ae:c5:14:16:9c:58:cf:c2:a8:2d:3a:ce:fe:bf:cf:
7d:bb:ab:15:a3:ac:b6:59:ad:7d:68:6c:32:1a:65:4b:84:3e:
83:7e:38:6b:65:7b:59:fd:86:74:f8:5e:a5:2b:91:ad:40:bd:
b5:d7:83:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:27:31 2026 by rpki-client