Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: QhWUhdspy8fFn5z6O18haF3HbSY0bpVm0n2d3mOhcaA=
Subject key identifier: 5A:B5:C5:EC:36:43:07:30:C7:87:1B:26:D3:23:2A:03:5F:1C:6A:3B
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 01A0024A9731725A27ACD135308C6F4F2B7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 0959
Signing time: Fri 14 Aug 2026 22:00:37 +0000
Manifest this update: Fri 14 Aug 2026 22:00:37 +0000
Manifest next update: Sat 15 Aug 2026 22:00:37 +0000
Files and hashes: 1: 16NNRYKcMtPO3l4tyItIrY8h2j0.roa (hash: n/D4QX4whPLnDcZV4Beurl7vINkWm+9qF/HLT546rMY=)
2: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: 6+p8bHzWbe/g8Iu10VSWdfoysZbHd8455tmP82nSkAs=)
3: WEOXhVwqbIDcOCVVSfnUDKXKyCA.roa (hash: qTqoCsN4m9/gVAirsn6sBD2Gq5wSIm8Ih8LAi/O159Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:97:31:72:5a:27:ac:d1:35:30:8c:6f:4f:2b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Aug 14 22:00:37 2026 GMT
Not After : Aug 15 22:00:37 2026 GMT
Subject: CN=5ab5c5ec36430730c7871b26d3232a035f1c6a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5c:86:15:36:27:5d:a8:a3:8f:40:42:6d:46:
70:88:96:96:da:2e:3f:ad:e3:6a:6f:62:16:06:06:
5a:40:f1:0f:23:62:94:02:04:d8:79:4e:1d:b3:6f:
86:fb:f7:29:12:15:73:38:3b:bc:9f:bc:9c:d9:18:
98:cf:13:27:fd:7d:6a:d4:a1:fb:13:23:72:2f:82:
e2:fa:a9:0c:b8:ac:1b:ed:23:ce:07:cd:7c:f3:5a:
15:7b:b3:57:f5:a5:15:5a:4e:43:ff:68:7e:57:42:
30:a1:88:18:cd:b3:0e:40:4b:b8:58:52:2d:34:ad:
4c:e3:ae:36:0d:47:99:7b:6f:ae:79:5b:ea:00:5a:
8a:19:9e:d2:4b:3d:c5:05:ee:3c:83:ff:5d:1d:62:
a9:26:97:27:25:09:60:cd:8e:42:66:1b:6a:ec:0d:
3e:1c:77:c6:e9:b8:bc:28:ef:29:75:22:e8:d0:a7:
92:19:09:bc:61:93:35:2e:ea:22:16:55:f7:e9:b4:
e4:e9:56:0e:d6:88:bc:36:29:49:e4:36:11:40:d6:
5c:1f:a3:c7:7f:bd:e5:5c:59:01:97:92:b0:f7:e4:
07:2e:e0:e0:6b:e2:da:ca:98:f4:87:51:d7:0d:b6:
04:63:e4:9c:c5:88:00:b6:bc:18:0d:85:b4:7d:77:
9f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B5:C5:EC:36:43:07:30:C7:87:1B:26:D3:23:2A:03:5F:1C:6A:3B
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:90:31:64:b8:de:b5:1b:ab:f9:26:5f:5c:e2:6b:86:d4:94:
b4:77:58:74:a7:cb:75:f4:a1:ee:d4:01:4f:e0:6d:41:ab:03:
38:25:2e:bb:c1:54:cc:f9:89:7b:e3:a4:fc:b8:d4:d8:6e:0b:
1c:9d:e6:f8:35:dc:35:ce:96:7c:83:0c:6b:aa:c4:b7:5c:5b:
26:b5:43:87:97:58:be:8d:cc:9b:2b:d0:d8:9d:fe:5c:a9:c4:
b3:df:78:1d:40:98:56:44:5d:a6:03:44:00:8a:97:85:f4:4c:
b2:ed:da:83:8e:0e:da:15:fc:f1:45:69:4d:58:0f:cd:bc:47:
4e:67:d4:a8:21:a1:59:01:f2:fb:5b:b7:1f:f3:50:fb:08:60:
ed:0f:e6:05:58:42:57:87:f6:89:94:cc:04:fb:df:8b:76:81:
21:ea:39:43:04:25:d7:a3:23:86:a5:82:75:bb:ba:ad:d8:c6:
fb:de:66:e8:fd:f0:c5:22:60:e5:3b:18:a0:41:8a:88:3b:64:
8f:30:e5:6d:11:9f:72:13:8a:ed:81:53:dc:6a:4d:6e:89:37:
6c:8e:d6:d1:01:3d:36:51:32:d7:42:57:f6:73:91:18:74:eb:
e9:9e:f2:35:e9:7b:b7:0e:c2:fb:83:96:ab:d5:5c:ef:53:eb:
3d:da:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:13 2026 by rpki-client