Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
File: 2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json)
Hash identifier: JitOFw84b9KQwMh3CYMw9fOPdH0qCY+4QFEoJKQoqpQ=
Subject key identifier: F9:1B:C1:DD:72:92:A7:D6:9F:6A:AD:D2:44:BA:25:A3:3D:D7:5C:3C
Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
Certificate issuer: /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Certificate serial: 019D984F7E631744DA0217111711E16D6B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
Manifest number: 0A20
Signing time: Thu 16 Apr 2026 22:00:39 +0000
Manifest this update: Thu 16 Apr 2026 22:00:39 +0000
Manifest next update: Fri 17 Apr 2026 22:00:39 +0000
Files and hashes: 1: 1a1Hz0PzM6MuhV6g6x_kVg7kspQ.roa (hash: SxLq0IDA9ULiz8yncJU48iCtZHe0HJA53FejGCQEDC8=)
2: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: oGclBoK0u/JAmx7P4zDgVsAlTINkDCKDlet5oLmxtWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:7e:63:17:44:da:02:17:11:17:11:e1:6d:6b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Validity
Not Before: Apr 16 22:00:39 2026 GMT
Not After : Apr 17 22:00:39 2026 GMT
Subject: CN=f91bc1dd7292a7d69f6aadd244ba25a33dd75c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:08:f6:5a:a7:6e:55:8f:d5:86:34:77:1b:
18:22:3a:38:75:99:69:83:a3:9a:b6:ca:a1:04:d9:
9d:ce:4f:39:c8:0e:d0:14:a2:39:d5:e3:c5:f2:0b:
10:8f:fb:57:50:d6:d4:be:02:a7:fe:43:e7:8a:32:
cc:3d:0f:af:99:9e:04:3a:da:2c:91:60:07:c5:80:
bf:20:5b:45:61:c8:c2:7c:c7:27:46:00:fc:35:8a:
d9:1d:7b:a1:4c:3e:cf:bd:07:b5:1f:31:b7:7c:a0:
8d:ed:d7:c2:4c:4c:d2:b7:26:40:dc:10:94:1c:46:
30:92:ec:b5:12:2c:ef:92:22:a1:6c:66:38:d4:0e:
44:dd:19:9c:8a:af:92:ca:f2:3b:69:c3:16:cf:9b:
42:2a:13:02:20:c0:75:86:23:69:3b:67:75:ed:2d:
14:9a:90:03:35:59:e6:01:28:e3:5b:0e:c9:c2:e8:
5a:ef:3a:2b:49:58:be:7e:ea:cb:59:f4:57:4c:fc:
e6:66:97:1b:b2:7a:59:62:58:cf:a4:12:c1:df:a7:
42:7c:50:2b:1e:98:b7:5e:5b:7f:15:06:ad:a6:17:
d3:d5:2d:e8:3f:e3:c4:b9:67:2a:32:49:6d:3f:cd:
8e:f6:14:2e:78:22:09:ce:5e:2e:2e:38:a3:04:2f:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1B:C1:DD:72:92:A7:D6:9F:6A:AD:D2:44:BA:25:A3:3D:D7:5C:3C
X509v3 Authority Key Identifier:
keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8b:5d:1b:92:96:2e:ba:6e:df:a5:ae:53:33:47:d4:fb:0c:
c7:f7:d4:22:0b:5d:ac:42:00:67:c2:52:26:3f:d4:ea:50:8b:
ef:ef:3c:d6:6a:89:a9:ff:84:69:a0:c3:36:58:d8:7a:72:62:
70:6e:c6:8e:28:02:9d:dd:ff:4b:c0:e0:4d:62:a0:1f:38:ef:
2b:94:bf:ea:8a:38:ac:e8:7f:e5:df:61:be:bc:1e:5f:21:68:
03:cc:de:d4:ea:23:51:b2:c9:2b:2e:ac:af:a0:5b:46:c9:b4:
3f:56:93:48:5e:07:1e:37:d1:09:61:2e:8f:f4:04:77:a2:cc:
e6:9c:a9:e6:72:ad:57:4a:67:0c:84:4a:f3:12:93:67:d0:bf:
e3:2a:4a:62:6e:00:72:d8:fb:55:29:a6:fc:18:56:75:7d:a3:
4f:d7:c5:0b:f2:43:86:4c:66:96:c3:59:72:3e:b6:cb:53:2a:
b9:5a:58:4b:d9:38:a5:56:5b:d6:f2:8d:08:e9:3e:56:53:d0:
73:ea:d2:17:b5:35:6e:12:84:ee:a3:09:2f:55:5c:ee:01:f1:
e0:65:7f:2f:49:4d:31:6c:8d:72:de:18:50:f8:6c:a8:79:8a:
e4:54:b5:79:f4:c4:33:a6:ad:07:a6:02:ad:0c:66:d0:12:e6:
a2:ee:22:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:19:38 2026 by rpki-client