Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: 9kM6EuVwAgx2Appp71lkW+mDc2xetrbfHW6YbD7k5uY=
Subject key identifier: 91:1F:FD:80:82:7A:B3:91:15:83:2F:70:44:70:5D:0F:04:11:B6:45
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 019DA48A888E78025001764532E6DAE5DE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 07:00:35 +0000
Manifest this update: Sun 19 Apr 2026 07:00:35 +0000
Manifest next update: Mon 20 Apr 2026 07:00:35 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: 7qTD3jTofXnXJZ7nClc/5pzb0cwOrLqsNr6yKZHqtik=)
2: uWdyVKFrhKn03chUHfeK0y0qk7Q.roa (hash: dt9A+qc2boc7/F2tKhjup1ZYyV2tp8NxgEsRgPLzDSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:88:8e:78:02:50:01:76:45:32:e6:da:e5:de:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Apr 19 07:00:35 2026 GMT
Not After : Apr 20 07:00:35 2026 GMT
Subject: CN=911ffd80827ab39115832f7044705d0f0411b645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:03:31:f9:e6:2e:7a:8b:2c:8b:38:85:f5:6e:
f1:9f:90:37:40:c0:93:a6:3e:b4:83:39:df:09:e4:
00:fd:fa:33:f7:bf:f1:eb:22:66:e8:2b:91:c9:99:
5c:fd:5c:46:69:88:3d:82:c3:23:d4:00:4b:53:cb:
c8:4e:11:9a:a0:80:67:39:65:ef:80:e4:9a:f5:54:
8d:ec:ea:ee:41:8f:37:2c:3e:02:a4:96:b4:be:42:
bf:fd:2c:ab:32:6e:4a:c0:3f:00:70:5e:7f:37:2c:
87:e3:93:9b:9a:81:f4:3f:7f:bc:fe:48:1f:07:8d:
60:ca:54:c0:41:97:1e:fc:bc:75:79:08:2a:5a:f7:
88:53:d7:6f:eb:c7:85:c3:75:e1:57:2b:af:ec:5c:
23:f7:33:1d:e7:f9:e1:2c:16:ab:b7:6b:0b:7a:ac:
27:57:7c:1d:54:a4:c3:3b:2d:91:23:5d:08:d8:67:
3f:0f:97:26:bf:d3:c8:ec:eb:c1:34:2a:dc:65:64:
d6:0c:1f:30:6d:ad:47:0c:af:84:03:49:81:6b:48:
01:27:ed:1c:a1:56:9c:bb:f2:25:fe:b8:82:dd:25:
8e:21:17:5e:ce:d1:07:70:d4:50:43:59:f9:d2:d3:
de:b6:fa:68:79:fe:a1:71:27:4b:3f:48:8d:6d:af:
26:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:1F:FD:80:82:7A:B3:91:15:83:2F:70:44:70:5D:0F:04:11:B6:45
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:6f:ed:2b:e6:eb:c2:cc:24:42:38:d5:2a:04:f1:f1:5d:33:
1a:37:6b:a1:76:3f:11:d3:56:33:00:4a:1e:7c:87:5c:87:50:
0c:e0:50:83:42:c7:30:41:25:fe:2c:a4:c1:3d:a2:0c:af:31:
d0:f5:bf:3b:d9:5b:c0:fb:00:28:77:45:52:bc:eb:a0:c5:81:
58:b8:c5:8a:80:5f:da:bf:75:cf:02:0c:8b:d4:4b:14:dd:1a:
41:fc:ef:a3:53:51:71:0d:97:c2:df:ce:35:cf:b8:0d:24:bf:
59:15:16:e5:73:bd:75:46:b2:b3:f3:70:4f:38:8d:f2:65:d5:
f4:e8:6a:ef:52:08:ef:e8:4f:db:99:0b:d6:59:07:c7:1d:6c:
b9:81:7c:82:d5:31:a4:c2:f6:13:15:fc:98:4f:c6:27:a3:a8:
36:c4:54:80:30:b7:25:92:27:44:db:8e:c9:ae:1b:92:a8:50:
5c:cb:91:a2:30:92:bf:9a:96:d1:00:f3:63:5c:ff:d3:47:a2:
ab:91:b0:d5:7d:9d:ec:64:1c:ec:5d:21:ee:89:b1:08:e0:a9:
a5:56:21:b9:fd:07:72:88:c4:45:7f:b5:9a:b5:9b:18:ec:f2:
44:27:e4:77:a3:c9:b9:53:f8:a0:b9:f2:46:b3:d6:76:ea:00:
d9:a7:e9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:14:53 2026 by rpki-client