Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft (raw, json)
Hash identifier: hsNj55BBEt8Vix4zg+A7GGKqObUkYFlp1pUFElinPJs=
Subject key identifier: 69:46:D3:B7:04:95:C6:90:0E:7A:37:EB:FE:CC:DF:19:52:00:EE:EE
Authority key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Certificate issuer: /CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Certificate serial: 019CAB6B28FBFE694A13AD663F2E8E985FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 22:00:52 +0000
Manifest this update: Sun 01 Mar 2026 22:00:52 +0000
Manifest next update: Mon 02 Mar 2026 22:00:52 +0000
Files and hashes: 1: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl (hash: +b8nR3vdfq9ksLBkTZwOl3m1I252hQBT7sLbTBUHRNA=)
2: uWdyVKFrhKn03chUHfeK0y0qk7Q.roa (hash: dt9A+qc2boc7/F2tKhjup1ZYyV2tp8NxgEsRgPLzDSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:28:fb:fe:69:4a:13:ad:66:3f:2e:8e:98:5f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Validity
Not Before: Mar 1 22:00:52 2026 GMT
Not After : Mar 2 22:00:52 2026 GMT
Subject: CN=6946d3b70495c6900e7a37ebfeccdf195200eeee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0f:d1:de:e3:fc:b7:7f:c6:65:7b:b5:68:c7:
c8:ec:1f:bc:57:44:ec:88:3b:f3:8d:32:a4:b7:97:
bb:09:76:72:0b:08:a2:22:c8:a0:f7:dc:7a:b9:40:
90:66:fe:1d:67:21:d7:cb:93:0a:99:59:19:13:c4:
0c:b5:c4:78:66:bf:9e:05:97:d2:a3:d2:8a:ca:89:
82:c6:03:89:10:dd:59:30:09:3f:53:d3:98:40:cb:
4c:d4:ba:91:18:d1:ac:30:26:e0:7d:21:0b:81:fc:
f3:05:21:86:17:6a:e1:30:2c:a0:6f:80:0a:df:e7:
ac:cd:3d:b9:07:2a:37:19:60:5b:00:e9:9a:22:36:
15:09:c3:2f:35:6e:4e:e9:9c:c0:b0:bc:d7:6a:18:
9b:22:70:df:4f:98:42:8f:36:2c:e0:e1:28:66:dc:
02:18:fa:eb:13:b6:3e:8c:fd:49:f9:9b:48:fb:49:
9e:20:ae:5b:0a:68:be:1d:94:0a:85:24:5f:b9:ff:
18:aa:21:67:15:28:cf:fa:e0:1b:d6:f9:42:d0:e3:
a3:d4:72:12:47:16:60:00:60:b6:22:27:6b:6f:0e:
9e:80:00:31:27:64:11:26:b8:67:e0:48:ea:a5:79:
9e:3c:a6:c1:9d:ff:3d:a2:be:1d:9f:af:f7:5c:eb:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:46:D3:B7:04:95:C6:90:0E:7A:37:EB:FE:CC:DF:19:52:00:EE:EE
X509v3 Authority Key Identifier:
keyid:DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a0:43:92:ef:73:fd:b0:f0:9e:e9:39:85:09:71:89:99:e6:
cc:c5:ef:f2:c9:b4:c2:ce:5b:ba:58:11:3e:6d:fe:d3:b8:a4:
22:85:84:6c:49:cb:a3:48:0d:8e:ab:f0:75:36:5f:f4:7e:ed:
c0:ee:97:16:83:95:04:aa:f8:ce:a7:28:05:1b:54:03:82:86:
a7:42:20:70:47:f6:a0:53:a7:73:38:07:ad:bd:59:06:93:b1:
4f:ac:30:28:64:b1:64:c4:ce:3e:58:45:17:ce:4e:68:6f:44:
82:51:d2:a8:de:46:5a:42:36:2f:42:30:43:1a:cd:ef:7b:4d:
15:3e:dd:50:fb:ed:98:87:c2:28:8b:7d:4c:17:c2:97:dd:1e:
98:21:6a:3f:3f:f7:b7:f9:b3:fa:9a:e8:c6:11:1f:59:b4:13:
3f:44:eb:25:c8:a1:3d:95:4f:ed:69:89:5f:5f:54:bc:7c:7e:
34:f9:ad:2d:8e:17:54:d2:85:af:bb:e2:b6:b9:7e:e3:30:85:
68:2c:f8:b2:24:3b:88:14:d6:37:09:ab:29:46:29:f2:ca:fa:
5f:db:2b:5e:e8:ed:4f:e3:1a:15:97:79:cc:56:fc:75:50:ea:
48:21:15:2b:f4:19:3e:07:d7:28:12:a2:b1:b7:8b:50:62:41:
56:91:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:33:40 2026 by rpki-client