Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: hBHpmfy6Ad9w/I8Dp1/Ref0mWBo82pQLYOQA1QTmiKs=
Subject key identifier: 56:8B:0C:CA:AF:D0:69:8A:DE:C8:D3:10:5C:BB:F0:38:BF:82:4B:90
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 01A1C2F8FC3575E6AB3C05239299F0E10E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 1AE9
Signing time: Tue 10 Nov 2026 01:00:59 +0000
Manifest this update: Tue 10 Nov 2026 01:00:59 +0000
Manifest next update: Wed 11 Nov 2026 01:00:59 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: qFgRyKktq4rtCjHG/lAykw+CpoXOxV+AIeuxLG1Gx1w=)
2: uWdyVKFrhKn03chUHfeK0y0qk7Q.roa (hash: dt9A+qc2boc7/F2tKhjup1ZYyV2tp8NxgEsRgPLzDSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c2:f8:fc:35:75:e6:ab:3c:05:23:92:99:f0:e1:0e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Nov 10 01:00:59 2026 GMT
Not After : Nov 11 01:00:59 2026 GMT
Subject: CN=568b0ccaafd0698adec8d3105cbbf038bf824b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:35:2b:28:ab:be:2d:6c:d6:b2:b0:cd:5c:ba:
ff:b9:9a:39:28:00:82:bc:4e:02:5a:00:b7:d8:b0:
e9:dc:68:79:e2:03:8a:88:cf:6a:96:31:5a:62:d6:
5d:db:a6:a4:fb:21:80:b6:c6:af:6d:9f:85:18:39:
70:77:fc:c4:8b:0a:59:8f:51:e2:ce:5f:12:7e:d7:
13:9e:80:d6:3f:ee:b1:a2:af:8f:b9:15:80:66:6e:
6f:8d:dc:00:62:01:2a:2d:87:ef:76:fb:bd:b1:74:
53:02:49:ea:3b:54:e9:36:b1:16:f4:01:4f:25:f1:
a0:5b:85:93:b9:13:fb:70:67:ce:fb:6c:a8:f3:4d:
a5:0f:f5:be:54:54:00:31:a9:fe:9f:63:d6:8f:9e:
5a:55:b8:62:3c:89:b0:09:e4:9f:34:d0:75:88:bf:
f8:83:7f:0f:df:0d:10:91:2d:c1:db:79:e3:89:4e:
bb:22:e1:1e:0a:f5:87:a1:c0:01:f7:32:b7:c3:05:
8e:35:6d:bd:e4:f6:69:b8:2e:be:e2:ae:88:55:d7:
d8:0c:00:5d:8f:15:d2:1d:56:ee:8d:d4:ec:5d:15:
b3:e0:31:1b:0d:cc:d1:38:6a:23:b4:90:4a:02:4f:
09:35:29:3f:a0:b8:df:97:28:83:25:93:1d:f9:02:
2f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8B:0C:CA:AF:D0:69:8A:DE:C8:D3:10:5C:BB:F0:38:BF:82:4B:90
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:25:0f:d7:f7:f0:4b:03:1e:0b:bc:fd:47:f7:3d:ff:41:a4:
29:88:dc:d8:09:9d:23:8e:ad:4d:7d:54:ac:20:8e:55:99:23:
34:79:a3:96:a2:09:61:77:5d:df:4c:8b:ee:a6:07:46:7d:87:
b6:68:8e:ed:f9:a1:4f:55:19:3e:08:87:f1:20:46:43:78:89:
a9:6f:80:31:4e:c2:d7:6e:49:1c:a2:95:5b:32:76:ca:fc:2a:
57:7b:59:16:7c:3c:26:16:4a:ad:94:f6:dd:20:34:7b:59:29:
9d:ee:6e:cb:0c:c9:b3:ab:35:8d:28:21:20:2f:e1:47:73:9b:
6c:c1:1b:d4:05:dc:89:b5:e0:a5:23:04:69:c5:86:53:c4:eb:
9a:32:7b:2b:2e:66:a6:0a:bb:05:32:bf:9e:4d:14:f6:31:c3:
f5:1a:22:11:ba:04:cf:19:92:4f:6e:ad:d1:8b:7a:0f:a3:60:
01:1e:b3:b9:11:5f:9a:86:88:d1:dc:f6:a3:9a:91:1e:57:23:
7c:5f:1a:8c:29:aa:f8:ff:93:ad:49:70:8e:2f:2e:33:d7:66:
e6:69:ed:77:72:5a:d3:bb:d6:9f:e6:de:64:e5:55:2a:ac:df:
b1:6d:0e:43:a1:ee:74:e4:5f:89:49:71:fe:18:ad:8f:7e:05:
87:82:26:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 05:57:05 2026 by rpki-client