Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: 1hFy7tOyANOBVp2H0hQxdErSKGhSU3Epnw9EhoiuWzA=
Subject key identifier: BA:9D:7D:16:D6:2B:51:6C:E3:AE:FE:BD:03:20:D3:05:2F:19:46:B7
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 019FA82B6A7E9C890F45475E0AAAD54E7FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 10:00:45 +0000
Manifest this update: Tue 28 Jul 2026 10:00:45 +0000
Manifest next update: Wed 29 Jul 2026 10:00:45 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: giFK25Aw49h4TL/fOkFd0uhNjI5OTo+GBvNke9Aj8Dg=)
2: uWdyVKFrhKn03chUHfeK0y0qk7Q.roa (hash: dt9A+qc2boc7/F2tKhjup1ZYyV2tp8NxgEsRgPLzDSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:6a:7e:9c:89:0f:45:47:5e:0a:aa:d5:4e:7f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Jul 28 10:00:45 2026 GMT
Not After : Jul 29 10:00:45 2026 GMT
Subject: CN=ba9d7d16d62b516ce3aefebd0320d3052f1946b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:d6:38:0e:b1:f7:04:b9:ff:23:eb:a6:ec:
38:43:32:03:37:3c:4e:23:ce:12:36:dd:8f:3e:9a:
5b:b4:2a:d0:b1:34:36:08:f1:9c:3d:92:6a:36:02:
ac:9f:27:f7:0b:ae:c8:c8:9f:dd:16:21:c5:5e:de:
86:6d:7b:f0:19:0b:97:b9:4f:f3:6e:ca:14:1a:04:
11:ff:21:14:35:5c:99:25:d1:ff:76:27:9c:52:20:
53:88:e1:f5:e2:81:8a:a8:60:41:b4:2d:e1:22:1b:
54:58:0b:86:e3:fd:ab:dc:21:e3:1d:f6:e3:cc:f4:
16:85:ac:30:7b:f7:bf:54:81:68:32:f1:ad:7e:12:
27:2f:6a:af:e9:c2:af:21:81:c9:3f:2e:da:83:7e:
ff:67:9f:aa:39:4f:49:0a:bc:75:28:90:4f:16:b0:
60:e6:52:4f:60:cb:c5:61:5c:03:96:a2:74:f2:77:
38:2b:ab:f7:16:3e:6b:38:d7:27:16:3f:c4:85:a8:
33:70:f7:eb:92:1a:3d:04:dd:62:7e:fc:77:e5:4e:
37:bc:78:a9:48:b8:fe:c5:30:3d:92:e3:e1:0a:e2:
97:14:23:db:f9:84:b0:b5:cc:42:26:85:ad:32:6a:
b5:5d:fb:f9:df:af:10:4b:0f:ba:83:54:8e:a2:5f:
21:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9D:7D:16:D6:2B:51:6C:E3:AE:FE:BD:03:20:D3:05:2F:19:46:B7
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:be:8d:03:e7:2c:69:e6:d1:78:0d:c9:af:1b:da:14:df:61:
3f:1a:ae:85:54:a9:f1:5a:3f:76:04:b6:49:da:b9:62:6d:6b:
ce:80:7e:74:e6:69:e5:72:23:e4:f5:fc:3e:0b:b6:df:a9:c4:
fa:c5:51:bb:25:4e:01:27:5b:d8:38:c6:6a:cd:86:82:e2:35:
27:af:ae:5d:d5:fd:06:1d:1d:1e:08:b6:a7:c3:19:13:db:ae:
cb:59:fb:6f:7b:b2:a0:34:48:c0:66:9b:40:24:61:b9:3d:3c:
a9:ad:79:1f:30:54:ec:81:a7:e4:e5:1d:76:ee:37:bf:43:25:
75:d5:a3:8d:6d:ac:3e:02:ef:07:a8:e1:ea:9d:20:b9:b6:b1:
94:7f:16:fe:41:f1:5f:9d:e0:a6:de:95:5d:5e:f4:1d:37:e4:
25:cf:9d:c6:4d:ae:e9:f0:c8:b1:63:64:a5:96:55:ed:86:10:
92:13:6d:fc:79:fd:22:f9:ec:88:95:fd:db:14:d8:02:4d:38:
12:39:90:d7:28:07:22:2f:0f:94:a0:df:b0:f0:7e:47:27:6d:
36:4f:fb:11:87:7e:fc:08:91:d9:55:25:5d:e6:92:b7:c2:30:
c5:3b:83:c2:1d:9d:53:ef:16:f2:b9:66:b5:a9:c3:1d:ff:05:
7b:25:f6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:34 2026 by rpki-client