Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: SZyPIuZqbQQLkEUaJbNhwc1taazd0ZyIHeXTZtyLSWM=
Subject key identifier: D9:F1:E0:0A:7E:F3:86:A3:E9:5F:66:FB:88:DF:10:8E:D2:A3:CD:28
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 01A0CBC830656F26C36221459CE9E01FCCB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 1A69
Signing time: Wed 23 Sep 2026 01:01:29 +0000
Manifest this update: Wed 23 Sep 2026 01:01:29 +0000
Manifest next update: Thu 24 Sep 2026 01:01:29 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: AEMHrs4zB6Ul7W3DndTy5v6tjOmP3y7crBI+R+m9eTE=)
2: uWdyVKFrhKn03chUHfeK0y0qk7Q.roa (hash: dt9A+qc2boc7/F2tKhjup1ZYyV2tp8NxgEsRgPLzDSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c8:30:65:6f:26:c3:62:21:45:9c:e9:e0:1f:cc:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Sep 23 01:01:29 2026 GMT
Not After : Sep 24 01:01:29 2026 GMT
Subject: CN=d9f1e00a7ef386a3e95f66fb88df108ed2a3cd28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8e:cb:1c:4d:35:89:c9:3f:83:55:7d:a4:3c:
fa:fa:12:f7:fb:82:7e:12:26:21:72:60:16:d1:18:
92:f6:67:7d:5d:9b:c6:db:53:86:c7:a5:c6:b8:ab:
ec:5a:19:e1:90:3b:d6:e8:bf:3f:e4:8e:aa:a1:f4:
e8:fa:7a:8b:83:72:84:62:67:d7:ad:8a:01:1e:03:
e2:88:15:0f:f9:72:1c:27:e9:cf:03:b8:3b:64:7d:
e6:3f:d3:13:7b:f5:46:87:df:a4:b1:0a:30:65:3d:
2d:31:07:22:43:3b:f1:43:f6:0c:c1:fb:77:86:a4:
0f:35:7b:10:10:8b:e5:54:4b:0a:f2:94:27:8f:c8:
19:9b:6f:30:62:41:d3:33:d0:b7:50:96:6a:3f:e0:
1c:4b:e0:b5:ab:b1:50:e2:8d:93:ab:00:f3:85:a2:
95:b1:ce:a1:6b:d1:2f:7e:7e:3a:f6:18:da:73:0b:
db:fa:8d:bd:f9:4d:a7:ea:1b:c1:d8:c3:51:82:28:
40:5c:bb:da:3a:a9:dd:84:6f:b8:a9:3f:08:ad:4d:
b5:b6:9f:de:11:ec:12:22:e3:ee:7f:79:9c:f3:5f:
2b:7e:88:9d:da:ed:3e:72:2d:65:c9:32:97:69:53:
92:b6:c6:79:68:fd:69:d7:ec:fd:4e:4d:77:21:96:
b6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F1:E0:0A:7E:F3:86:A3:E9:5F:66:FB:88:DF:10:8E:D2:A3:CD:28
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6c:b1:1b:f0:cd:67:dc:c2:ff:6f:bd:c6:f8:7a:80:4a:bf:
46:cd:bb:72:7b:20:9d:72:8f:c7:c2:05:44:43:e7:30:89:a2:
a9:f7:b9:c0:bf:82:f8:45:56:d2:c9:ce:de:df:6d:d1:80:a6:
87:f4:b7:c0:21:c5:04:7a:3a:fa:a0:88:e3:cf:a4:b5:e8:cb:
28:b2:b9:b2:2d:ac:6a:66:c6:db:e6:c0:70:f1:1f:6c:06:37:
b4:9a:ff:03:fa:1e:e5:08:a4:fe:58:e8:db:37:9a:f3:db:f2:
79:82:f9:0e:1d:09:e9:17:0c:27:1e:76:a5:70:3d:a0:b0:e7:
18:b0:f4:d6:8d:bf:56:17:27:f8:84:ee:9c:d2:ee:a6:c8:82:
71:16:08:4c:e5:9c:f3:41:f8:b8:89:ff:7f:fe:5a:c8:6f:06:
3b:da:01:d9:38:bd:a1:92:06:aa:ad:93:30:db:c6:ab:71:1a:
6a:db:c6:69:a0:3d:4d:d0:d4:f7:e6:e9:b0:33:b5:e6:72:69:
40:fd:0b:e9:30:8e:88:31:5c:f3:8a:a5:0b:4f:9c:48:a6:24:
53:0c:e6:54:f2:8d:3b:e9:e3:4b:ca:7f:02:1d:75:4b:06:1c:
3c:be:93:b1:68:05:08:0d:28:62:ff:dd:da:5a:51:f6:4c:2e:
40:f6:f4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:00:25 2026 by rpki-client