Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
File: 2m3EGSZFyEKk-i-II08uWhhMdmQ.mft (raw, json)
Hash identifier: BeltrsYbmpsw+0tBSUDqnAYIbmhRP+VOQw4lOoj4d24=
Subject key identifier: 68:18:70:C1:09:9E:23:D9:E4:FE:01:2D:DC:3A:D4:73:C7:BF:8E:83
Authority key identifier: DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
Certificate issuer: /CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Certificate serial: 019FA9E34D4B8261CD9E67E2C9BA3CF39D81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
Manifest number: 0B33
Signing time: Tue 28 Jul 2026 18:01:13 +0000
Manifest this update: Tue 28 Jul 2026 18:01:13 +0000
Manifest next update: Wed 29 Jul 2026 18:01:13 +0000
Files and hashes: 1: 2m3EGSZFyEKk-i-II08uWhhMdmQ.crl (hash: 1E1DAn3WInC+IBwBWC72iB3U/XvVuTCRovOxW8jPkjw=)
2: CiAnwNJagjVfieLOx1c1Vix6IOA.roa (hash: zHiUWsj/p9vTBDZQMmYEbPI7k87FTHgR5XEAk1UUQRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:4d:4b:82:61:cd:9e:67:e2:c9:ba:3c:f3:9d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6dc4192645c842a4fa2f88234f2e5a184c7664
Validity
Not Before: Jul 28 18:01:13 2026 GMT
Not After : Jul 29 18:01:13 2026 GMT
Subject: CN=681870c1099e23d9e4fe012ddc3ad473c7bf8e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5d:fd:73:3c:d1:2e:4d:9c:f5:77:0c:6d:0e:
3b:74:16:06:e6:22:c2:b8:50:7c:8d:1b:88:8d:fa:
aa:24:7b:f7:5d:38:e8:82:67:53:98:55:f1:4f:42:
a5:93:21:1a:e6:2c:7a:25:33:49:92:19:c1:9e:0b:
3b:6e:fd:9e:eb:56:39:4a:cc:eb:19:8c:2d:e9:4a:
e6:54:50:f0:33:2b:21:bf:e8:cf:7f:6f:b4:bb:39:
9f:f8:80:a5:44:56:21:e6:21:c6:08:c6:0b:1f:d8:
11:9c:85:c5:07:d1:6f:de:43:58:cf:5e:9d:bb:ae:
7e:e5:aa:81:0e:46:a7:57:c0:97:c7:d3:be:41:df:
06:1f:c3:6b:94:e3:6e:50:7d:dd:1d:5c:98:3f:89:
58:56:fb:39:ad:dd:d5:e8:da:f7:1b:0e:cd:d0:87:
ad:05:1f:64:74:9e:5d:37:ab:6f:fe:d4:a6:62:8f:
fb:cc:19:7f:c7:32:f6:39:72:0f:6b:e9:12:22:78:
c0:3f:fd:86:38:7f:a4:56:a4:4e:53:3b:07:58:09:
21:4c:4f:2f:f1:56:70:28:79:77:5f:a2:c9:4c:99:
8e:a6:24:cd:2c:84:ec:bd:9f:25:b8:f1:13:c8:5b:
25:65:d1:26:39:29:d9:2b:2d:da:53:2e:36:36:34:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:18:70:C1:09:9E:23:D9:E4:FE:01:2D:DC:3A:D4:73:C7:BF:8E:83
X509v3 Authority Key Identifier:
keyid:DA:6D:C4:19:26:45:C8:42:A4:FA:2F:88:23:4F:2E:5A:18:4C:76:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2m3EGSZFyEKk-i-II08uWhhMdmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/23c57c-b8a7-49a5-9c05-eef70aab035e/1/2m3EGSZFyEKk-i-II08uWhhMdmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:52:69:86:5e:2d:c5:08:9a:83:d0:4e:e9:0d:e7:b0:ea:cf:
5f:ab:58:1d:e7:8f:d4:60:d5:c0:7a:5a:32:a4:d6:57:7f:cb:
4e:8d:9d:65:04:15:d7:d4:6f:65:cd:1d:8f:e0:36:02:62:40:
01:42:4f:bd:05:7c:d2:ed:2b:58:15:2b:48:06:b1:1c:32:8f:
11:d8:12:d0:89:15:b4:04:42:74:cd:b2:2f:54:09:c8:58:3b:
92:ef:24:24:85:3c:ac:13:89:ab:39:28:98:79:02:3b:e7:72:
d6:72:24:85:72:b4:dd:04:a8:d1:c0:7f:3a:a8:37:0b:92:dd:
3a:94:18:dd:ac:09:f7:f8:35:5f:a4:ec:d7:18:92:f4:64:04:
8c:4a:54:29:b0:77:70:cb:50:34:d2:96:3f:c2:14:63:3d:37:
6b:0d:b9:2c:30:0a:be:38:91:2b:53:bf:ad:f0:e8:4e:44:44:
7d:bf:b3:9c:60:50:01:6e:a4:cf:f6:15:fc:d4:86:3a:08:f8:
ca:8c:4d:da:a0:d1:5b:ad:dd:e4:ac:05:79:70:89:10:9a:77:
1b:ad:cb:c5:9c:bb:7c:9f:79:07:5a:2b:93:b8:4d:10:83:9c:
6e:86:89:7b:aa:bc:a5:99:12:b2:66:8f:97:e9:cd:77:16:05:
c1:ea:4a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:35:08 2026 by rpki-client