Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
File: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft (raw, json)
Hash identifier: bmgzieFFDbPhPC2w8+URDvVEaCC2yj5bv1tTcMW7oLA=
Subject key identifier: 76:99:A2:98:57:77:AA:EF:FC:15:94:59:0E:AB:A5:88:C7:11:68:88
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Certificate issuer: /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial: 01A0EEF952F8E51AA9425047C99A683F02EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
Manifest number: 0B31
Signing time: Tue 29 Sep 2026 21:01:52 +0000
Manifest this update: Tue 29 Sep 2026 21:01:52 +0000
Manifest next update: Wed 30 Sep 2026 21:01:52 +0000
Files and hashes: 1: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl (hash: TZi+0HAkkdlnGg0cxkDs18Wi62af5oDUcW/eVF9KXKk=)
2: 48OS4sWYglwtZBn1YxiPqc26nTU.roa (hash: NBM10gWvuZSa38kRQAx40WjX3amxqFeb96LnMyUj85Q=)
3: HUZvsXoFqmpwitLw4aku7m5jYa8.roa (hash: rhpAJ7/RvlTCzRrbypi+sM57yT9OZ8RJ46KD4H90XuY=)
4: Rl0xX2L5u9e-WU3LxVTHfDCZoEQ.roa (hash: iB5ApjU6OfFGOZU2O/uqHAaYYGIEkIhRygeaclVc054=)
5: hih4fzkJ3O9yEk3BE5UpAZ6h-8Q.roa (hash: R7mk0homAMVaYBl/kyf6p+7Cu/DPi0srKaEKzzxe+Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:f9:52:f8:e5:1a:a9:42:50:47:c9:9a:68:3f:02:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Validity
Not Before: Sep 29 21:01:52 2026 GMT
Not After : Sep 30 21:01:52 2026 GMT
Subject: CN=7699a2985777aaeffc1594590eaba588c7116888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:06:3a:fb:bd:82:7b:0c:47:89:74:98:a0:4d:
43:ac:c5:a3:59:a8:1e:6a:f4:a0:02:1d:e1:ed:3b:
2c:74:de:3a:2b:ca:d9:5d:07:e7:ae:16:62:ef:12:
d2:f9:47:07:76:60:f9:54:1e:19:2c:75:f4:9e:1b:
93:d7:0f:37:5b:9e:67:07:98:97:cd:ff:d1:55:40:
0a:16:86:4e:db:3a:ba:01:04:79:72:5b:0f:a6:bf:
b0:96:dd:63:19:5d:ca:f9:24:d5:8e:1f:6e:46:0f:
0d:b7:97:f0:a8:65:43:64:e3:6d:45:e5:e1:6c:0a:
1d:d7:ed:93:0f:ae:7b:4b:c9:8d:e8:df:55:a9:d0:
a7:4b:47:bc:d9:cf:6c:6f:59:44:62:bc:0e:70:94:
d2:0b:36:ae:b1:49:f3:0b:51:bf:75:47:b4:34:1d:
20:3c:c3:e6:92:8e:b0:2a:df:70:89:73:5d:75:66:
01:45:75:28:24:ba:5c:1e:63:ed:77:ee:74:d1:16:
7c:a8:92:15:51:e6:4e:50:80:49:70:52:2a:b4:56:
ac:57:67:25:32:3e:86:87:2b:2c:50:bc:48:38:52:
20:21:57:e4:ef:59:e8:95:a0:30:85:74:c8:3a:30:
52:1b:a4:b6:95:07:81:73:22:af:76:61:df:2a:3b:
16:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:99:A2:98:57:77:AA:EF:FC:15:94:59:0E:AB:A5:88:C7:11:68:88
X509v3 Authority Key Identifier:
keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0a:50:17:a1:5a:cb:bb:18:dc:81:6e:90:f9:12:7e:3f:00:
0b:ce:a9:e6:36:b7:20:ca:44:68:52:f1:e4:20:a1:0f:81:da:
f3:23:84:72:94:cb:c4:9c:56:20:08:eb:9d:3f:4e:9d:fa:e5:
5d:ea:92:ea:95:90:4b:07:b6:60:43:e8:8b:3d:82:48:6e:4f:
47:ea:9b:2b:ca:ac:25:93:6d:33:03:c0:f5:90:04:92:ab:79:
a4:a1:ee:42:19:be:72:6b:22:c9:b4:1e:8d:b0:85:bb:98:52:
99:77:3a:35:0b:10:16:b3:67:ff:f7:2d:0e:3e:8d:22:84:45:
4b:ca:ec:48:44:b5:df:5e:a8:c6:91:2c:d2:03:31:1e:f3:fa:
fe:da:0f:2d:a0:1b:b7:6a:42:88:5f:1b:af:07:e8:6c:82:b6:
00:5d:2d:33:4a:92:7f:e1:6b:56:33:e2:27:c2:6c:b6:d4:5d:
71:9f:ce:47:70:ef:01:b1:4a:65:6d:a6:0e:28:30:49:93:fa:
48:04:e8:c2:fb:24:58:3a:b0:dd:10:af:ef:7d:f2:18:13:b3:
f2:bc:55:48:01:69:d1:de:79:5c:4c:05:c1:96:a8:54:74:fa:
33:e0:d3:a6:c4:a9:a5:17:d2:31:f7:13:ec:ea:67:d2:8d:a9:
3c:b9:3a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:15:06 2026 by rpki-client