Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
File: 2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json)
Hash identifier: csue7sdFZxM8OqMDeLCrzFQ+qkgAvfZJikxD2eZwRFY=
Subject key identifier: 4D:F8:63:A5:2A:4C:40:6A:CA:48:71:85:8E:78:9F:30:D1:10:01:30
Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
Certificate issuer: /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Certificate serial: 019CAA900C80FB60FE860578B54DF710FC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
Manifest number: 09A3
Signing time: Sun 01 Mar 2026 18:01:32 +0000
Manifest this update: Sun 01 Mar 2026 18:01:32 +0000
Manifest next update: Mon 02 Mar 2026 18:01:32 +0000
Files and hashes: 1: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: g/XYcnUC79/xaAyAqwKm41tra0Xa8JIXdc4FidtGJH0=)
2: cb6RT1EIH2UE1qS6xuvmhoSY90w.roa (hash: w0eimh8eUGbfM3xNdHnghVn9Aj2SOX0pDoX2BzEu2Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:0c:80:fb:60:fe:86:05:78:b5:4d:f7:10:fc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Validity
Not Before: Mar 1 18:01:32 2026 GMT
Not After : Mar 2 18:01:32 2026 GMT
Subject: CN=4df863a52a4c406aca4871858e789f30d1100130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:e6:f7:96:a8:77:47:0b:9c:f1:91:07:17:
7a:15:4b:27:59:2e:13:59:8b:74:2c:03:bb:81:f6:
50:dd:5e:b4:79:43:55:97:e1:22:c5:60:00:0b:1b:
45:3b:fb:77:e0:63:ae:e2:fc:d0:e0:a8:09:fa:12:
b4:fe:a7:2e:be:c3:9e:09:d2:45:d6:f3:ef:da:c8:
fe:85:07:14:6d:fa:47:cc:78:23:7e:b7:fc:08:27:
57:de:8f:86:b1:89:b3:46:1a:d3:19:39:d8:5e:6a:
8b:c7:39:e8:26:e3:0e:f4:64:67:31:e1:ae:57:b6:
f2:6f:b0:a4:0b:34:11:07:ca:ad:fe:44:bd:0f:9e:
6c:f9:db:80:25:1b:45:f2:7b:b4:d6:12:2c:4c:24:
a5:b7:ac:0c:f3:a5:3b:f5:2c:27:60:7c:46:fb:75:
64:45:32:0f:f4:97:d0:d7:25:cb:2d:59:8e:e0:de:
c7:f5:68:5b:61:28:34:f8:04:02:e3:fe:cc:79:5f:
61:5c:17:be:d7:59:f3:ed:ec:17:d5:fc:f7:fb:23:
4c:14:dd:30:0f:4f:f0:66:6e:3c:b8:08:e3:4d:d1:
b0:0d:54:7d:aa:7f:d1:13:be:3b:7a:a5:8b:6d:02:
e2:3e:21:0b:28:e2:ca:db:9e:3a:e3:88:61:41:8c:
10:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F8:63:A5:2A:4C:40:6A:CA:48:71:85:8E:78:9F:30:D1:10:01:30
X509v3 Authority Key Identifier:
keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:ac:2e:32:f5:9e:5f:5a:c6:cf:3a:19:48:d4:a7:4f:d5:f2:
b8:9a:18:eb:c7:8d:61:d4:ad:f1:32:0c:3b:89:f4:0e:70:81:
d7:75:31:96:39:c7:76:56:b5:68:da:3b:1b:5a:b4:5b:76:5e:
36:b9:0b:00:64:ee:31:ec:ce:63:43:f3:37:b2:7a:89:51:79:
e7:2b:9b:46:5a:49:b5:1e:fa:4b:e2:62:8b:f5:b9:01:00:13:
bf:a5:d2:7e:50:10:a3:2b:b3:74:08:52:c4:dc:22:11:82:cb:
92:82:7c:7c:83:98:43:40:2c:32:8b:8b:aa:97:94:5c:b3:77:
04:e5:a5:6f:00:56:cf:f8:b0:bc:71:7b:69:72:bf:43:01:16:
95:d5:0f:4b:0b:62:e6:96:4f:31:1a:48:c1:35:df:80:8e:96:
ae:a4:d3:ac:aa:16:1d:af:5b:88:e0:93:73:c9:1f:ae:51:29:
0d:10:48:d2:55:f1:f5:d8:20:c0:58:a8:d4:a9:6b:e6:31:cb:
46:05:ab:8a:10:0d:de:dc:a8:5d:12:05:42:d0:c9:21:02:cb:
aa:34:00:38:f0:83:37:14:c1:55:7f:57:84:d7:9e:4f:f6:46:
87:2c:38:00:f7:70:3c:32:06:51:6c:7f:97:99:0d:b5:29:16:
f5:a3:d5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:47:13 2026 by rpki-client