Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
File: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft (raw, json)
Hash identifier: BVy6hoqZRzbI0QeuEFljol8Yi9bum5DZunZD+fN+Xpk=
Subject key identifier: 3F:EF:29:57:55:6D:DF:EE:32:15:01:C7:BB:40:BF:E9:0C:DB:24:BF
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Certificate issuer: /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial: 019FA2CE9B865199E1A9206065FC1EE2A711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
Manifest number: 0A85
Signing time: Mon 27 Jul 2026 09:01:16 +0000
Manifest this update: Mon 27 Jul 2026 09:01:16 +0000
Manifest next update: Tue 28 Jul 2026 09:01:16 +0000
Files and hashes: 1: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl (hash: 6Cze5hVADDCodsGtc6ns4hqBWcqZwY2ZbMiqRDJNgzI=)
2: 48OS4sWYglwtZBn1YxiPqc26nTU.roa (hash: NBM10gWvuZSa38kRQAx40WjX3amxqFeb96LnMyUj85Q=)
3: HUZvsXoFqmpwitLw4aku7m5jYa8.roa (hash: rhpAJ7/RvlTCzRrbypi+sM57yT9OZ8RJ46KD4H90XuY=)
4: Rl0xX2L5u9e-WU3LxVTHfDCZoEQ.roa (hash: iB5ApjU6OfFGOZU2O/uqHAaYYGIEkIhRygeaclVc054=)
5: hih4fzkJ3O9yEk3BE5UpAZ6h-8Q.roa (hash: R7mk0homAMVaYBl/kyf6p+7Cu/DPi0srKaEKzzxe+Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:ce:9b:86:51:99:e1:a9:20:60:65:fc:1e:e2:a7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Validity
Not Before: Jul 27 09:01:16 2026 GMT
Not After : Jul 28 09:01:16 2026 GMT
Subject: CN=3fef2957556ddfee321501c7bb40bfe90cdb24bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:62:42:46:e1:c4:ff:3b:e7:e5:8e:25:3d:
dd:80:b7:0c:c3:cb:8f:06:7d:1e:d0:da:bc:19:db:
9b:5e:e9:b3:9e:24:ad:88:be:d9:83:9e:91:4f:15:
ba:0a:07:9d:45:02:b3:c7:56:84:92:bd:a1:86:36:
a2:9d:32:42:fc:1a:9f:24:ed:31:fc:2e:21:8b:ad:
04:17:a0:95:e6:b8:c4:a0:59:11:46:7b:0d:5a:5a:
79:ee:67:09:ba:78:31:5e:88:44:21:c8:33:38:d5:
b0:13:90:9a:63:23:4a:55:cf:67:71:a2:22:c9:34:
d8:e0:34:92:07:a5:3b:bd:e0:b9:06:59:96:e1:0e:
af:32:78:0d:56:a8:13:93:38:ac:c7:22:eb:ae:88:
a9:11:9c:6e:fa:bc:99:67:b0:7f:46:22:6e:02:56:
03:63:2e:a8:7a:9c:41:52:5b:68:1f:ee:c1:2b:6f:
e3:a3:95:14:aa:ee:2f:f0:f6:3d:a4:a6:0f:dc:00:
3a:cc:83:6e:8b:e1:81:44:97:93:30:d0:4a:d3:c4:
ec:6a:11:c3:2c:f9:e9:be:36:c3:2c:57:bd:68:5a:
d5:5e:b3:0a:54:e3:c1:da:e1:66:0b:b7:bf:f1:79:
44:db:b7:31:e6:88:f6:c7:86:d5:99:1b:0b:ba:8e:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EF:29:57:55:6D:DF:EE:32:15:01:C7:BB:40:BF:E9:0C:DB:24:BF
X509v3 Authority Key Identifier:
keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:1d:c2:9a:01:fa:7a:88:b1:95:e0:14:1b:32:8c:58:37:44:
a1:7f:47:bd:0c:c8:17:08:5e:df:74:db:75:84:4e:36:a2:13:
17:87:85:43:4b:ad:ea:39:c3:72:b4:ba:e1:7c:d1:0d:22:1f:
62:3f:ac:b5:1d:a2:88:cd:4d:b1:a8:f9:fb:22:5d:16:47:05:
36:bf:93:eb:5f:a6:82:f2:46:43:bb:83:fd:05:bd:d7:6b:6d:
ae:38:30:3f:35:0f:48:c3:6e:a0:5f:7a:c6:d8:33:23:13:21:
1d:45:08:4a:04:f5:8f:ad:4b:85:48:16:f3:c8:d2:53:2c:11:
02:1c:de:66:82:ef:63:02:55:b3:05:51:34:a4:ba:f2:a3:bb:
d3:3a:2e:5c:d8:64:74:ee:d9:f4:71:78:46:ab:83:ee:a3:31:
07:7c:a5:65:9b:5c:1b:ee:23:c1:b9:c2:1d:b7:88:b9:56:df:
0e:6d:7f:b3:50:5a:30:a2:ef:54:82:dc:ad:7f:ab:bf:1d:91:
2d:ce:ec:f9:dc:f6:d7:a7:66:0a:fb:84:47:32:06:44:c4:8b:
99:39:2c:7c:ed:5e:89:bc:4e:c8:ae:87:10:60:b9:ac:df:d8:
62:73:ee:48:53:2c:83:fd:ad:c9:46:fc:51:bb:92:78:18:91:
91:ec:f4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:25:21 2026 by rpki-client