Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: 2F+uIXKOSAAsrO5ANnm4RqRQuhFTww54h68zHNJeoSI=
Subject key identifier: 28:53:C7:64:7F:6A:0C:15:BF:5C:AD:87:36:0F:15:04:AF:D2:EF:3B
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 01A13E94A12D4B199675D3395B441329475C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 09DA
Signing time: Thu 15 Oct 2026 08:01:30 +0000
Manifest this update: Thu 15 Oct 2026 08:01:30 +0000
Manifest next update: Fri 16 Oct 2026 08:01:30 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: QOZ/Uj/vBp24JIwa5CuWGTNOzV64lK8RsUDg4+p3G2M=)
2: UbKp8SZhnSoZXvXI5ekDZVISvJ0.roa (hash: Qzbo1YF+7OuM7vfSmLC+YBsyPpRh0JaNoTJmEXBDYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:a1:2d:4b:19:96:75:d3:39:5b:44:13:29:47:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Oct 15 08:01:30 2026 GMT
Not After : Oct 16 08:01:30 2026 GMT
Subject: CN=2853c7647f6a0c15bf5cad87360f1504afd2ef3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a2:75:75:18:1f:bb:f6:87:46:9a:ce:5e:5d:
0b:cf:ee:6e:be:33:37:d8:6c:10:8e:42:e9:67:ab:
9a:30:66:8f:c8:51:ed:7d:5d:ff:99:ff:6c:eb:b7:
a6:17:5b:63:53:59:36:4e:e9:cf:83:6d:47:fb:2f:
cb:53:3b:79:9c:de:e1:03:af:76:d7:04:9f:4a:a0:
58:82:c5:21:9a:08:65:5b:44:96:71:9a:07:a6:4a:
f7:2b:0c:91:ac:33:1d:7f:53:0c:57:aa:a2:04:ce:
3f:50:d1:8e:d6:b0:fd:64:0a:70:5b:6d:e2:4c:2d:
9e:93:5f:96:ca:4b:3e:db:06:2f:bc:3d:1d:37:31:
d7:76:93:37:67:c2:71:fe:42:f3:60:a8:07:d8:a3:
28:63:9c:e5:47:bf:f3:95:49:00:6e:05:22:d2:84:
8b:25:0d:4c:9d:bf:42:71:ff:b2:30:68:0d:72:46:
34:78:66:87:c0:47:69:32:45:bb:76:05:c7:43:31:
84:6b:8c:5c:08:a5:a0:14:f6:ed:00:7a:42:74:14:
2f:c8:2e:5c:e2:6f:ba:24:3a:93:02:6d:66:65:64:
97:17:58:17:95:23:10:e6:24:79:12:6b:3e:ff:83:
82:0a:c1:02:11:b4:6d:30:70:29:f5:da:a1:e1:06:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:53:C7:64:7F:6A:0C:15:BF:5C:AD:87:36:0F:15:04:AF:D2:EF:3B
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e8:dd:db:ff:68:7e:3a:79:71:cc:59:63:cc:e0:36:68:ca:
fd:f3:83:9a:32:65:b4:fd:28:5c:ae:ee:1f:83:84:83:d9:56:
4b:c3:5e:e5:3e:73:4a:64:d3:5c:96:a5:cb:0f:8b:84:86:cb:
a7:46:75:13:b0:ff:c5:e0:4e:31:26:b8:fc:32:ab:2c:df:38:
d5:21:ca:46:e3:e8:26:16:d4:0e:81:07:bd:07:c6:0a:da:41:
33:b6:c8:c3:40:65:b9:60:ef:13:8f:36:32:e4:68:39:bd:7d:
e4:3f:66:3a:a5:b8:f3:48:ba:87:fe:b5:eb:15:98:65:7b:57:
e4:4f:8a:67:df:84:48:81:d5:87:15:cf:cd:da:f1:1c:98:0d:
ab:6a:0b:2c:c4:83:ac:4f:53:c1:01:3f:fa:fa:41:ae:2a:02:
e7:6b:15:0d:ef:04:45:77:38:e9:b5:26:83:79:58:6c:4d:25:
74:0a:50:4b:78:4e:92:56:77:42:53:a2:1f:45:9f:1c:6f:01:
4a:95:c6:36:14:cf:c9:24:38:a0:44:ca:3e:dd:ed:d0:b7:9e:
fd:3a:c6:04:02:13:cf:8b:28:9c:1c:8e:08:3d:a3:e5:2f:00:
62:09:31:7c:2e:5e:fd:38:f7:66:8f:66:46:3d:4c:de:5a:35:
ff:62:84:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:54:36 2026 by rpki-client