Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: OqY8blLS9kW1b9m6y5DJt/PHgq2ZGg0evDjQupoyU44=
Subject key identifier: A1:92:35:C1:B6:4E:83:4B:3F:C8:46:B4:C6:AF:D1:F8:7C:BA:BF:9C
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 019FAB632BA7F47C137F3008259EE20A0DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 092C
Signing time: Wed 29 Jul 2026 01:00:30 +0000
Manifest this update: Wed 29 Jul 2026 01:00:30 +0000
Manifest next update: Thu 30 Jul 2026 01:00:30 +0000
Files and hashes: 1: 16NNRYKcMtPO3l4tyItIrY8h2j0.roa (hash: n/D4QX4whPLnDcZV4Beurl7vINkWm+9qF/HLT546rMY=)
2: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: aZNkD8TFDJNGknqe1Bygzj0OVcoLysHRNgnOwhoesS4=)
3: WEOXhVwqbIDcOCVVSfnUDKXKyCA.roa (hash: qTqoCsN4m9/gVAirsn6sBD2Gq5wSIm8Ih8LAi/O159Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:2b:a7:f4:7c:13:7f:30:08:25:9e:e2:0a:0d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Jul 29 01:00:30 2026 GMT
Not After : Jul 30 01:00:30 2026 GMT
Subject: CN=a19235c1b64e834b3fc846b4c6afd1f87cbabf9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2f:fc:b4:6e:3c:23:16:d4:85:90:8f:cf:56:
d6:25:14:0e:50:69:c7:03:d5:36:81:7e:37:b3:08:
af:40:39:c2:53:00:6d:64:9c:5a:bc:b9:fe:5f:81:
45:f3:4e:d0:0d:73:76:a1:af:83:5d:59:8c:f0:7e:
3f:6d:8f:f0:84:df:06:e3:1f:cb:04:6c:d1:6c:ea:
64:f9:68:70:0f:c8:bc:16:67:05:5b:d2:5f:b6:ab:
97:ae:e7:d9:d1:86:15:bc:73:7d:a5:11:df:57:9b:
68:d9:cf:d1:ac:d8:60:cd:6e:ef:11:db:bb:93:ad:
9b:93:ef:6c:54:56:35:76:c6:7e:31:b1:98:ac:0c:
7c:c1:40:b9:42:6c:73:46:8d:00:da:cb:b5:73:d2:
a3:05:37:ac:88:0a:ef:47:32:f9:44:2b:35:3d:92:
f3:2b:87:39:03:9c:64:66:d5:6a:ce:d8:78:d8:fa:
7a:ae:db:ef:c6:1e:01:76:47:56:0c:1a:11:53:32:
69:da:4c:63:f3:27:88:c8:3c:c5:03:07:e3:68:b5:
e4:fa:4e:72:01:8c:dc:c5:54:7b:c1:e3:3b:b8:6c:
96:88:2d:0e:bc:b5:f3:ec:47:f3:90:64:dd:e4:36:
7a:da:0f:79:48:1a:7f:ee:5c:0a:e6:a0:2b:aa:75:
f7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:92:35:C1:B6:4E:83:4B:3F:C8:46:B4:C6:AF:D1:F8:7C:BA:BF:9C
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a7:72:66:00:48:49:b5:cc:16:0b:56:0d:6c:19:36:97:da:
27:e6:de:77:18:7f:18:38:8e:36:48:46:87:1b:9e:7e:b3:ff:
9a:54:4e:ba:4d:59:c1:d4:90:53:bf:c5:97:67:6b:5b:07:b5:
80:00:70:20:52:77:c5:45:6d:4d:59:3a:24:57:12:50:db:2b:
14:3e:a4:b9:0b:4f:98:2d:bd:e9:e2:6e:ff:71:6d:68:91:2a:
70:58:ec:c8:bd:3b:3e:41:5e:79:70:cf:ba:83:b7:0d:b4:ad:
39:4e:38:aa:81:dc:ba:17:42:66:63:bf:55:06:b2:a0:68:fc:
4b:40:c5:76:24:ae:f1:80:ba:c1:f6:80:c7:77:62:01:43:04:
0f:e4:34:13:39:ae:c2:42:65:42:32:f4:a1:57:59:5f:b3:75:
ac:98:d5:70:8b:f0:ac:d8:24:41:af:88:c9:3d:0d:31:ea:13:
50:fb:c4:9f:a0:92:54:f9:2f:e6:58:21:2c:c6:d2:af:9e:fd:
3d:42:8b:1c:ca:bc:28:ac:aa:a3:90:88:47:7e:d7:93:72:a6:
4d:98:9c:77:12:98:06:e4:0c:bd:ee:f3:d8:2a:a2:fd:93:d6:
9b:2e:6c:bf:1f:34:6a:58:83:d5:fd:6c:0e:49:e0:d0:05:d0:
ab:91:cf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:45 2026 by rpki-client