Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: S6wFZdm1LrsTsgtFpMbRqKXhwS8mz1uqfG3Zy1cQw7s=
Subject key identifier: 77:BE:E7:22:B6:7C:76:C7:83:A4:0A:53:45:BA:4E:9E:59:80:DD:B3
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 019D3941505B2E8334A3E4ADD52B38693957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 07C5
Signing time: Sun 29 Mar 2026 11:01:14 +0000
Manifest this update: Sun 29 Mar 2026 11:01:14 +0000
Manifest next update: Mon 30 Mar 2026 11:01:14 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: 8yd6h1Qvfkd5y9vNnCse0DPeSJxKqHc4rzIq2sMC4ow=)
2: UbKp8SZhnSoZXvXI5ekDZVISvJ0.roa (hash: Qzbo1YF+7OuM7vfSmLC+YBsyPpRh0JaNoTJmEXBDYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:50:5b:2e:83:34:a3:e4:ad:d5:2b:38:69:39:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Mar 29 11:01:14 2026 GMT
Not After : Mar 30 11:01:14 2026 GMT
Subject: CN=77bee722b67c76c783a40a5345ba4e9e5980ddb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6c:15:d2:b2:af:06:a6:98:a7:ec:28:a4:fc:
0e:a4:8b:d2:04:d3:c7:b4:59:d5:3f:e0:ec:de:66:
8e:4d:df:e8:26:94:fb:79:21:d0:87:b2:d8:51:f6:
b3:bf:66:16:a0:ae:4e:83:3d:46:05:5c:82:5e:c8:
35:9e:6d:ed:d3:20:cf:61:4a:46:be:1f:85:23:52:
f9:b3:55:bf:5a:d4:bb:00:0d:92:a3:7b:a6:e3:3c:
86:3a:cd:e8:47:94:b6:fc:13:5a:18:eb:d6:5f:18:
36:d8:1c:fa:3c:17:b6:0c:66:30:7b:82:da:0f:68:
d6:28:9c:ea:ba:32:44:02:0f:4e:2a:2b:2b:1e:f6:
b6:a9:ad:ea:70:6d:d5:c6:d7:03:0a:9f:c8:9e:f0:
e9:b0:e8:94:0c:87:eb:4c:a9:5e:a2:1a:5b:f5:5d:
29:fb:0d:03:5a:3d:19:4e:90:e5:33:48:c5:4c:37:
fc:e0:88:75:ec:9c:53:18:b3:85:b6:52:a1:ea:b3:
af:eb:51:d7:5a:56:a5:37:1e:ef:dd:2b:32:c4:32:
f8:11:67:8b:1c:5b:44:7b:11:4d:00:8b:be:96:e3:
84:9a:bb:87:68:4b:a8:5d:6d:c3:74:30:64:9f:b8:
b8:c3:c1:b5:92:fa:83:2c:e5:24:a5:06:99:df:e8:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BE:E7:22:B6:7C:76:C7:83:A4:0A:53:45:BA:4E:9E:59:80:DD:B3
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:55:1f:a1:4e:38:79:08:8b:d6:3d:5a:f3:7b:d8:30:5b:f9:
be:79:a7:a3:ef:ee:5d:bc:27:e2:55:4a:bf:8e:54:99:a0:1b:
21:99:70:54:ee:cc:cf:07:91:07:e6:ac:ce:46:2c:b2:b6:31:
fa:08:d8:e0:3d:ee:4c:b7:70:a7:1f:be:e2:1a:15:a0:e5:71:
50:76:1e:45:3e:b7:68:0c:0b:38:24:04:ef:ca:0c:80:23:b4:
28:71:e1:fb:d2:66:57:af:73:d6:e9:f7:e5:65:e4:b7:f4:3f:
70:a6:b8:e8:73:c7:d0:0c:75:4f:bc:b0:18:10:9d:7a:04:df:
78:e7:77:ce:20:2a:38:0d:36:02:16:fb:e7:eb:fd:05:5c:b6:
0c:41:69:fb:f7:33:dc:84:72:b8:30:91:c6:2c:c4:6e:4a:54:
78:73:4c:f2:d5:01:a9:b8:9c:60:11:ef:0c:9e:ad:3e:7f:b3:
24:b8:f1:65:ca:14:f5:22:b1:e1:69:21:8f:41:d0:1a:6e:c5:
43:2e:73:c1:a9:a4:94:d5:ef:e4:7c:8e:58:df:15:ba:62:b9:
be:cc:a0:ac:dc:11:a5:e0:69:04:dd:54:06:63:58:29:61:41:
ef:b8:f3:f2:7e:62:c4:df:77:7d:75:e4:9c:55:4d:aa:49:f2:
00:19:e8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:09 2026 by rpki-client