Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: 2sGxv8b78PsTbCKnzZ/rF+k0P3mLGRCGem6YLFoWeHo=
Subject key identifier: B4:93:3F:C5:4F:BE:B1:4E:5B:92:47:3A:DB:C1:15:8D:0E:97:E8:1E
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 019F92EE06A2888CF25A80B935D59B33EE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 07:01:40 +0000
Manifest this update: Fri 24 Jul 2026 07:01:40 +0000
Manifest next update: Sat 25 Jul 2026 07:01:40 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: rfCjkZstm0ivntFg2y1TnpxjyddAO3GZqJ/Ah0pAQ/I=)
2: uWdyVKFrhKn03chUHfeK0y0qk7Q.roa (hash: dt9A+qc2boc7/F2tKhjup1ZYyV2tp8NxgEsRgPLzDSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ee:06:a2:88:8c:f2:5a:80:b9:35:d5:9b:33:ee:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Jul 24 07:01:40 2026 GMT
Not After : Jul 25 07:01:40 2026 GMT
Subject: CN=b4933fc54fbeb14e5b92473adbc1158d0e97e81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:1e:fb:53:f3:b2:ce:81:43:3e:06:de:df:
3b:35:89:6a:6b:a8:51:62:96:18:58:23:ce:09:ef:
7c:05:84:43:aa:1b:91:fa:a0:14:9c:07:b0:7e:ef:
cf:b4:12:2d:c8:b7:92:56:ba:59:d1:d5:af:65:61:
be:d5:0d:f9:0b:25:e6:8c:45:17:49:7f:0a:c6:6d:
a8:a3:c9:3d:8e:97:f7:d0:33:28:93:67:a9:96:91:
8a:87:92:7d:42:10:6b:ee:d9:be:7b:70:be:eb:1a:
38:48:7c:6d:8d:29:f1:b4:9c:be:b9:38:a5:81:30:
86:93:d1:44:83:c5:c2:aa:41:46:7e:d5:fd:cf:d3:
06:4b:3c:36:38:79:a9:fb:9b:02:59:04:2b:6b:fe:
fb:12:fd:61:b1:5d:14:3a:1d:13:2d:83:77:1d:5d:
66:15:2f:bf:6a:d9:f3:30:1d:f1:50:85:92:bb:3d:
a3:d9:cc:43:c3:7b:28:af:65:22:e1:89:3b:4f:5a:
cf:47:e9:37:f7:01:34:15:fd:07:1a:1a:2b:d4:57:
7d:e5:ed:a5:ba:e9:82:05:ec:00:16:f4:85:ed:f6:
91:57:17:ea:de:c0:75:41:f1:85:bf:aa:eb:b9:33:
b6:14:0d:79:ea:ca:7c:19:22:6d:f9:75:6b:a9:7e:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:93:3F:C5:4F:BE:B1:4E:5B:92:47:3A:DB:C1:15:8D:0E:97:E8:1E
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f9:70:bb:60:80:9d:6f:d9:9a:1a:f9:bc:c9:68:44:50:a5:
28:f6:e7:9a:de:11:40:33:ae:96:d6:6d:81:7d:e1:1d:03:d4:
73:d2:8e:4c:50:47:5c:26:92:65:49:29:71:4b:93:92:03:d8:
07:1b:51:ba:d7:98:87:16:16:f1:67:d2:83:75:c2:79:83:69:
a4:95:65:c2:36:3b:25:15:a5:2c:bb:ae:e2:38:57:8a:74:7b:
65:ea:49:77:b7:c3:48:ae:9f:f7:47:77:78:d8:05:90:90:67:
4c:1e:8b:50:ae:55:f4:e7:8b:0e:db:db:96:b0:54:3b:1b:88:
12:06:42:07:f1:5a:61:5f:95:3e:df:bc:b7:8b:7c:af:67:15:
87:c2:6d:b8:6a:47:ed:f1:2f:e7:10:1f:12:93:2d:a6:8d:d2:
17:bb:2a:88:e0:1e:e6:1c:1e:3b:50:fa:c0:53:75:8f:d8:33:
6e:af:09:73:d5:06:57:ab:dc:c1:2d:47:f2:28:e0:f0:e6:44:
0e:82:b5:04:5f:1e:4b:b1:98:81:6b:0b:e3:1c:58:73:4f:99:
43:f6:5b:9c:af:e6:7e:5d:37:05:91:a8:e9:cb:61:d4:c6:49:
80:45:4a:4d:7a:f7:52:60:35:6e:aa:f3:01:8b:34:14:73:c6:
06:53:31:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:22:48 2026 by rpki-client