Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: Nqa7yEvqb/qHm/4wZiS76+Y9xsnNyDnw4nGq34FWthQ=
Subject key identifier: 8A:42:25:85:1F:6E:F4:B4:AF:DF:FF:30:55:0F:23:20:D2:35:19:9B
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 019D39AF4CAC303377DB73E492287DDA30D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 07E8
Signing time: Sun 29 Mar 2026 13:01:22 +0000
Manifest this update: Sun 29 Mar 2026 13:01:22 +0000
Manifest next update: Mon 30 Mar 2026 13:01:22 +0000
Files and hashes: 1: 16NNRYKcMtPO3l4tyItIrY8h2j0.roa (hash: n/D4QX4whPLnDcZV4Beurl7vINkWm+9qF/HLT546rMY=)
2: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: eztMpVF2PACdCY3qT2h+wwmqNQOH3+tmxQo/j1mMO+c=)
3: WEOXhVwqbIDcOCVVSfnUDKXKyCA.roa (hash: qTqoCsN4m9/gVAirsn6sBD2Gq5wSIm8Ih8LAi/O159Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:4c:ac:30:33:77:db:73:e4:92:28:7d:da:30:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Mar 29 13:01:22 2026 GMT
Not After : Mar 30 13:01:22 2026 GMT
Subject: CN=8a4225851f6ef4b4afdfff30550f2320d235199b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:f7:e2:0a:e9:4d:f2:1b:b3:34:ab:6a:56:
0e:87:3b:82:71:c5:94:1f:01:b8:2e:5c:c4:c6:23:
21:7a:12:1f:5f:f6:b5:56:64:9d:d8:d4:db:14:77:
5a:5b:76:ed:ce:62:71:9c:d3:4e:41:53:42:10:1b:
80:06:a6:7f:5e:fc:a0:e6:6c:c3:0c:18:1d:e3:92:
97:6a:fb:ff:c7:ef:8e:26:b4:49:5c:a3:95:a2:b0:
75:ee:d8:05:7e:22:5a:63:1d:d3:f1:85:09:75:8c:
7d:36:5a:13:88:13:99:c1:e3:1b:59:7b:51:37:8c:
0d:de:6a:8e:f1:0f:d9:79:63:3d:47:8c:37:66:36:
15:c6:10:5f:99:7f:e9:86:31:d6:17:e5:a7:26:4a:
3b:5d:a8:4c:9c:df:bb:ff:78:fc:ab:23:d0:50:fa:
20:6c:9e:bd:55:3a:2b:a1:ff:71:11:94:09:29:5f:
71:10:91:4c:0c:c8:cd:0f:c8:c3:ee:0f:92:40:21:
6b:e4:dd:50:20:5e:3d:f1:2c:62:ac:23:b7:67:f0:
ed:33:de:41:b8:c1:0a:4d:1c:bd:ab:8d:06:ec:24:
d4:65:34:74:27:55:e2:f2:0b:0b:34:2c:97:56:ca:
4c:dc:5c:3e:74:46:b5:f0:3b:ba:57:35:29:14:18:
be:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:42:25:85:1F:6E:F4:B4:AF:DF:FF:30:55:0F:23:20:D2:35:19:9B
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6e:8c:13:00:b3:94:c2:41:74:9d:0c:17:81:a4:58:59:41:
86:b3:63:55:21:dd:ec:fb:fd:0b:76:4f:96:92:e0:9c:62:70:
a3:7a:99:31:56:fa:8b:fa:68:15:4e:b8:ab:23:3b:73:ad:2c:
fe:2e:e0:eb:3f:62:6f:61:95:be:9a:58:50:5f:2c:af:4e:da:
76:2c:f4:5b:08:d7:9d:62:59:6a:0b:d9:8f:21:2b:23:3f:f6:
85:7d:59:ae:2b:17:65:64:99:e7:c0:b4:76:a7:54:04:7c:23:
07:a9:a2:3f:3f:3a:05:c0:8c:e9:a3:bd:1c:d6:54:c3:97:2d:
ab:c6:d5:43:57:ae:cb:ca:7d:b9:75:97:f9:07:9a:52:d1:43:
74:87:aa:b8:8c:66:33:58:20:ff:24:ff:7c:f8:ca:25:c1:d0:
50:e7:e1:c9:6b:86:a2:66:35:8d:53:c6:4d:47:d6:c7:37:74:
9f:8f:7c:64:70:5b:2a:1d:f2:28:c3:f3:0d:07:89:0e:08:9d:
04:c1:62:a5:7f:5d:71:b9:7b:d0:6f:21:6d:7e:2b:8b:a3:97:
32:80:12:33:b4:2e:f7:cb:b6:55:b2:70:fc:13:3a:70:f9:c1:
d1:94:a6:99:27:77:7f:7c:94:9c:8c:28:f3:df:10:8d:c7:9b:
20:40:e8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:02:15 2026 by rpki-client