Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
File: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft (raw, json)
Hash identifier: MUEXFl80+P56GMf7+wUvt9llweVUBALG/Yppr1bQoDI=
Subject key identifier: CF:61:3A:78:6F:70:AC:DF:99:50:5C:BE:62:35:DE:F0:BA:82:44:03
Authority key identifier: DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
Certificate issuer: /CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Certificate serial: 019CAD22857E081D588A1E3152EB7CAEF969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 06:00:46 +0000
Manifest this update: Mon 02 Mar 2026 06:00:46 +0000
Manifest next update: Tue 03 Mar 2026 06:00:46 +0000
Files and hashes: 1: 2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl (hash: PRHfqPOClcijYf9poxxCWKvtteWY31G4aVrVXyVnZ9I=)
2: N55eH_oAjxUzygUu8ZpQX2jQHJY.roa (hash: XxApRY5e0T0pxBKCirNpMUCze56tIRN9zPVvruBzwks=)
3: oZaTMKE7E4FwqTm79QuG6ASibB0.roa (hash: ZOWJ5Trq3fmQuF8ETV1iaKndg7XImOjNbNyQwiNg8RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:85:7e:08:1d:58:8a:1e:31:52:eb:7c:ae:f9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da60f646bc7f488caf5ebdca8072c09d63f61a21
Validity
Not Before: Mar 2 06:00:46 2026 GMT
Not After : Mar 3 06:00:46 2026 GMT
Subject: CN=cf613a786f70acdf99505cbe6235def0ba824403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ee:38:eb:0f:a4:0b:48:48:d0:fa:68:d8:ee:
5c:b2:5c:0d:1b:f6:aa:65:60:48:d4:f1:76:03:40:
23:5b:82:b0:a3:37:80:75:2c:7c:ad:87:7a:a4:d6:
7c:b9:99:99:e0:c9:68:a5:60:d8:ec:8f:24:fe:c6:
6b:75:5f:26:c4:37:28:dd:00:b3:ef:9a:bd:7d:83:
30:7c:74:4c:56:cc:ad:55:64:87:f2:f4:24:97:a1:
7d:86:75:75:11:7a:c5:17:94:d0:c5:5d:0c:6b:38:
93:1d:c8:2a:4b:77:2f:03:44:94:76:20:bc:7c:01:
99:cc:71:b5:b5:e8:19:76:dc:2f:18:4d:8e:06:27:
0b:93:7b:24:44:8a:f4:5c:8c:3b:c4:88:b7:d5:8f:
d1:60:d6:0d:40:c5:fc:fa:ef:14:1b:5b:81:a3:3e:
0c:e2:d5:c4:91:50:e7:50:4d:1c:a1:7b:88:09:30:
cf:7a:8a:a3:64:c4:b7:ab:68:de:25:1f:1a:80:af:
b5:40:4d:bd:35:1b:89:be:9e:db:67:8e:98:d9:fe:
e5:e6:6a:72:c4:14:8c:4d:99:ec:63:f0:49:da:ac:
2c:a4:b8:d4:9b:ec:a4:d8:be:74:f6:64:2d:43:b5:
b3:5b:0a:5f:f4:1f:a5:38:97:8a:9a:90:f9:6c:af:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:61:3A:78:6F:70:AC:DF:99:50:5C:BE:62:35:DE:F0:BA:82:44:03
X509v3 Authority Key Identifier:
keyid:DA:60:F6:46:BC:7F:48:8C:AF:5E:BD:CA:80:72:C0:9D:63:F6:1A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/0d0d11-8b0c-4360-ac61-dab9f8ba8fb6/1/2mD2Rrx_SIyvXr3KgHLAnWP2GiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f6:83:9c:be:cf:9e:b6:cf:81:56:e5:c2:ec:ec:6d:51:93:
d8:5c:1f:f2:2f:00:3b:aa:87:a5:15:74:40:f1:d8:28:4a:ea:
f4:61:bc:e6:2b:51:2a:e3:71:10:23:d0:93:a7:44:a0:72:3e:
10:34:a3:ba:b3:c9:95:41:25:a3:49:c8:ca:04:e8:cc:0e:82:
0c:2d:29:be:a2:4f:b9:b3:4b:ba:bb:19:15:1b:20:94:22:b1:
91:00:8f:f6:cf:cb:f3:e0:f8:ba:b1:5c:e1:f7:ff:a5:bf:31:
ea:1b:32:9d:2c:84:89:f7:a8:e5:43:ff:f1:5d:6f:84:f8:ee:
9c:0f:de:d1:3b:dd:f8:d6:a5:f0:f3:ed:b6:54:76:ea:d9:0c:
1c:19:ed:78:f6:a6:97:51:59:cc:da:5f:f0:13:0a:a5:4d:93:
33:eb:04:e0:9a:43:8d:15:41:75:a9:53:bf:e2:f2:d5:9a:08:
33:d3:01:35:de:4a:f6:5e:13:b7:1c:34:e1:eb:64:82:01:55:
2d:4c:c2:40:f8:d6:5c:4d:5c:69:7b:d9:be:43:4d:c3:dd:e4:
ff:1e:a4:a5:98:11:0a:13:07:ba:3e:7f:fe:b0:42:24:42:e0:
8d:87:4d:17:9b:c1:57:5c:41:bf:3e:03:6b:8f:1f:d8:77:e1:
a7:f5:fb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:03 2026 by rpki-client