Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: SEestJ8iy5OenXEqKDcHkeKwCzrizNov3QS8yKevWgg=
Subject key identifier: 6C:43:78:54:EE:CB:81:C6:D3:54:1B:30:9D:F3:AA:9A:35:AC:E5:08
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 01A0C40E871ED241809606731D010F768FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 13:01:21 +0000
Manifest this update: Mon 21 Sep 2026 13:01:21 +0000
Manifest next update: Tue 22 Sep 2026 13:01:21 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: iwnFfgoyWjx3ejNI3o3+ZdMA44smT5PD+08Zcaxdq7s=)
2: uWdyVKFrhKn03chUHfeK0y0qk7Q.roa (hash: dt9A+qc2boc7/F2tKhjup1ZYyV2tp8NxgEsRgPLzDSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:87:1e:d2:41:80:96:06:73:1d:01:0f:76:8f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Sep 21 13:01:21 2026 GMT
Not After : Sep 22 13:01:21 2026 GMT
Subject: CN=6c437854eecb81c6d3541b309df3aa9a35ace508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:07:b1:9c:b8:d7:45:2f:2e:e6:88:44:c6:39:
12:9c:ac:17:5b:96:2b:13:01:44:c7:2d:71:10:e4:
46:29:57:cf:28:3a:e1:ad:a1:8e:43:8d:5a:ef:ea:
54:1d:38:7a:4e:9d:18:82:6d:0e:b7:36:31:8a:18:
81:8c:12:be:a9:89:3a:56:46:5c:00:15:c5:20:76:
a3:06:bd:fc:80:f0:88:2a:7d:b7:e4:69:ad:f2:9e:
08:43:11:85:5f:34:77:1b:4e:1e:7f:52:8e:ed:1c:
cb:e7:2c:05:d0:4b:6c:85:ee:c0:bd:6d:dd:19:57:
0f:87:38:c6:dd:23:28:cc:86:df:51:fd:d7:eb:3d:
fe:20:04:e7:81:4b:4a:52:63:af:f2:44:20:94:17:
aa:c7:30:4b:f7:fe:79:77:07:fd:e0:59:00:0a:98:
05:c4:09:81:0c:ec:cf:c5:61:ae:ad:d9:98:21:96:
c8:9d:e6:4c:aa:c0:53:83:c1:63:5f:e5:c4:c9:84:
56:12:b2:0d:53:c5:1c:05:18:c4:16:52:3b:97:2c:
72:27:56:2e:21:77:11:10:be:8d:a6:38:6a:d0:30:
04:de:8e:13:ec:0a:7e:83:79:ce:38:0f:bf:f0:c8:
65:46:c3:7a:51:ca:96:36:2e:1a:92:06:ab:41:71:
05:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:43:78:54:EE:CB:81:C6:D3:54:1B:30:9D:F3:AA:9A:35:AC:E5:08
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:1d:a4:53:7a:81:82:c8:5a:82:cd:2f:f8:70:45:00:7f:eb:
95:80:f3:92:c7:de:19:f7:67:be:8a:5b:64:e7:db:3d:e7:ac:
5c:bd:9c:67:3b:4f:47:67:b5:56:cd:74:a9:50:c7:56:b1:50:
05:ac:ed:0a:ad:ab:a5:b1:60:45:3f:76:8c:1c:ab:b6:53:61:
72:92:ee:9c:1e:e7:c0:38:30:71:47:e7:90:2b:6a:f3:d2:25:
61:e5:69:e6:49:46:40:e3:f1:3b:03:98:64:02:2a:f4:fb:e8:
1b:30:27:84:cd:bd:b1:bd:74:c1:fa:7e:71:98:1a:c2:f6:18:
ce:6d:43:92:6c:e1:f9:39:8d:d3:5c:b7:14:5c:d7:b8:15:51:
1c:3c:8b:b7:95:c1:3f:f7:92:70:a3:1f:de:3a:fc:90:28:b0:
2a:f4:85:b5:86:a8:6a:74:bb:14:48:03:f0:ba:4d:f5:b0:cc:
41:bd:b5:34:df:f8:f0:c8:54:8a:54:f8:99:a7:56:0b:63:93:
63:e4:f1:ab:30:d4:1c:50:13:09:56:19:bd:b8:3c:b6:80:53:
fc:72:85:75:94:48:a2:99:ae:c1:92:42:f2:6c:e2:3c:4f:da:
94:ef:23:bc:b9:6d:e4:59:68:74:93:86:0f:6f:af:07:c8:93:
7f:55:e0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:41:55 2026 by rpki-client