Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: FlfCo+3onLE0qwGrhZSkNRrSJvrcxwZqPxMRVGJQMS4=
Subject key identifier: A3:F1:23:ED:CF:6A:6B:40:F8:31:F4:7F:EB:A1:CF:37:B2:0F:42:6D
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 019E1C469CBDE66BEBC16E9BFC8EBDB6D1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 13:00:49 +0000
Manifest this update: Tue 12 May 2026 13:00:49 +0000
Manifest next update: Wed 13 May 2026 13:00:49 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: 9/YUpvVA4YIu7rMzIH0X7Blgiq00BCVU9eY8B7oiNA4=)
2: uWdyVKFrhKn03chUHfeK0y0qk7Q.roa (hash: dt9A+qc2boc7/F2tKhjup1ZYyV2tp8NxgEsRgPLzDSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:46:9c:bd:e6:6b:eb:c1:6e:9b:fc:8e:bd:b6:d1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: May 12 13:00:49 2026 GMT
Not After : May 13 13:00:49 2026 GMT
Subject: CN=a3f123edcf6a6b40f831f47feba1cf37b20f426d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d4:b7:29:df:d2:2b:61:dd:63:f2:14:85:93:
2a:6e:ab:83:75:cf:10:14:19:f0:3b:34:16:b5:7e:
ec:a1:43:62:3c:4a:61:66:d6:06:d5:96:7a:ea:31:
62:38:51:3d:10:f3:a2:ec:b8:58:3e:3d:d5:cc:48:
ae:b3:c8:7f:4c:14:73:58:f9:08:05:3a:9d:44:8e:
0a:fe:2a:1e:d6:c8:a4:02:0f:17:f8:f5:98:94:82:
dd:89:62:70:37:c3:0f:76:ec:af:81:ce:8a:a3:03:
a5:55:6e:ff:79:4b:0f:8e:0e:5b:1a:bb:65:b9:03:
54:94:a9:5e:90:40:fa:14:35:b4:61:0a:ae:14:28:
2a:e3:07:a9:b6:2d:16:1e:61:56:eb:58:56:9e:6f:
9c:66:8a:f7:8b:76:86:62:0f:93:38:d1:61:25:3c:
e4:c5:75:3e:8a:a3:20:f6:90:c2:5f:d9:7e:bf:19:
29:24:a0:57:aa:0a:4a:a8:7e:b0:06:32:2e:b2:a9:
bc:49:1b:5f:9c:c9:ec:6b:5c:f9:19:9d:5e:c7:db:
eb:c8:77:4e:e5:b2:9d:87:48:c0:c4:12:39:cd:6c:
2d:e8:e3:2b:8c:f6:fb:93:aa:a5:93:31:70:f1:c6:
69:89:94:4e:4e:99:ed:76:94:00:9a:74:4e:07:1f:
ed:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F1:23:ED:CF:6A:6B:40:F8:31:F4:7F:EB:A1:CF:37:B2:0F:42:6D
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:2e:41:79:f7:d7:e3:12:29:f4:80:04:60:04:23:80:a1:b3:
ed:26:16:0b:c9:44:cb:8c:ce:4a:78:1a:fc:a6:70:45:ba:9b:
fa:d4:de:39:50:89:1a:fc:2e:a1:87:cc:0f:3e:9b:c1:16:e0:
55:24:5c:21:84:e8:2e:39:2b:91:f3:35:b8:2a:bc:b1:e5:f3:
28:8a:3c:20:f1:df:90:44:d0:4f:f5:c3:e1:78:f2:88:d0:c8:
50:d5:6b:33:d3:fc:63:3f:84:27:cc:55:8d:45:f0:04:4d:09:
0e:99:bc:ae:c5:cf:8c:fc:fa:96:6e:e0:a9:14:a7:6b:29:30:
73:9b:43:94:00:bd:b2:95:fd:a5:cf:01:c0:44:e8:64:4e:e1:
72:30:9a:9c:80:80:ac:ae:e3:a0:04:65:0f:fc:ed:36:5a:54:
44:7f:b0:eb:7c:32:c0:35:23:9b:32:b4:1a:82:ec:b9:fe:75:
09:0d:b6:02:6d:c7:8e:dd:80:41:3b:99:47:3c:20:06:74:89:
f0:5b:b1:b0:dc:93:20:ce:77:73:52:0a:9f:2c:d6:d7:61:43:
18:80:cd:89:a0:1b:bd:ba:18:9e:5e:29:89:14:af:e5:24:12:
d2:a6:da:d6:f3:ad:24:3b:e4:0b:cb:f8:75:9e:d0:0c:19:63:
cf:25:2f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:07 2026 by rpki-client