
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: 2ngrWVJs+mfeft6Mum3DVPdu5fPDRjJRk2xWmIJXIcQ=
Subject key identifier: ED:A3:05:60:75:09:89:83:24:DF:EE:97:E3:08:41:88:DC:5A:63:70
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 019EC1B6EC17411BF91491C0BF45F4355260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 08B3
Signing time: Sat 13 Jun 2026 16:00:50 +0000
Manifest this update: Sat 13 Jun 2026 16:00:50 +0000
Manifest next update: Sun 14 Jun 2026 16:00:50 +0000
Files and hashes: 1: 16NNRYKcMtPO3l4tyItIrY8h2j0.roa (hash: n/D4QX4whPLnDcZV4Beurl7vINkWm+9qF/HLT546rMY=)
2: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: Wa/nE9elml+3gTFI09Sw4Nszm0q6SlQn3CHkzvislU8=)
3: WEOXhVwqbIDcOCVVSfnUDKXKyCA.roa (hash: qTqoCsN4m9/gVAirsn6sBD2Gq5wSIm8Ih8LAi/O159Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:ec:17:41:1b:f9:14:91:c0:bf:45:f4:35:52:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Jun 13 16:00:50 2026 GMT
Not After : Jun 14 16:00:50 2026 GMT
Subject: CN=eda305607509898324dfee97e3084188dc5a6370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:94:dd:89:23:91:c2:e4:ea:4b:52:89:77:fe:
c0:be:3a:43:52:b4:bb:9f:8c:ca:90:51:09:2f:14:
6d:87:3e:7e:b5:63:8a:3a:d3:1f:4c:bc:c0:e3:7d:
5b:d4:fd:d6:71:08:f4:7e:a4:56:e2:97:6b:9b:ae:
30:72:60:4e:57:5a:0a:eb:29:9b:18:21:6d:66:e9:
cd:e7:7b:75:52:45:b5:06:53:66:9f:03:11:7b:cd:
42:04:72:b0:ff:06:c1:4c:da:4a:50:03:c9:a3:37:
c2:02:86:36:d1:10:f5:68:e9:0b:ac:b7:dc:b5:12:
ba:fc:10:c8:77:bb:b6:f9:46:bb:76:16:5d:6c:ea:
8b:08:0e:46:21:78:25:34:a2:93:07:86:76:2e:27:
84:a1:75:df:5e:4d:45:66:36:56:e8:84:5a:38:f3:
4d:65:38:7c:d0:2c:98:85:b4:16:a0:e8:45:e1:09:
1b:a6:7d:7f:96:c0:27:1b:7c:91:f5:2c:0d:af:98:
7c:4a:a6:9b:75:df:42:8b:2f:b8:27:12:a2:69:32:
21:99:33:31:6c:99:4d:f2:9b:b2:7c:1a:63:e9:7a:
98:6e:25:ac:3d:19:da:e6:8f:22:77:40:71:da:e6:
b8:95:8d:f8:10:3d:2a:ad:6c:ef:1b:7c:32:df:8c:
7d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A3:05:60:75:09:89:83:24:DF:EE:97:E3:08:41:88:DC:5A:63:70
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:55:e1:ad:bb:6e:49:2a:29:d6:25:28:3d:48:4b:6b:b6:71:
75:ae:90:b2:40:f9:47:d9:34:52:38:8c:0a:05:77:6a:cf:9d:
67:aa:9b:be:ad:87:0e:25:87:a9:a1:80:fe:1e:9c:e7:f4:6b:
1d:dc:41:3f:1d:2a:3c:68:ec:4c:6a:4c:ca:02:c4:52:73:b6:
da:3b:3e:2a:db:2d:9b:93:2e:bc:11:ef:4b:99:56:30:c5:5d:
d2:48:00:ff:33:e5:b5:97:35:b6:21:99:77:5c:d7:b5:db:66:
67:88:a6:6d:15:80:a8:7f:5c:63:0a:52:f7:d3:e3:b9:df:54:
7e:0c:df:f4:02:5f:ec:88:27:6c:d5:a3:fb:ab:f3:ff:ef:7d:
c9:96:76:3c:ab:7b:ad:da:b9:2e:9c:95:ac:1a:ec:dc:83:e1:
48:f0:5f:af:bd:b8:a5:84:8b:4b:92:72:ca:73:b1:cc:a2:54:
a9:dd:6c:1f:a5:45:28:8d:f8:de:65:21:3c:49:24:37:6f:90:
81:4f:02:da:a3:f8:0a:56:ef:8b:07:dd:f9:2a:31:c7:11:92:
a3:9e:00:f0:73:59:be:92:06:8e:bb:2a:fb:b0:7e:1a:66:66:
12:c9:9b:8b:52:b0:c2:33:2c:a8:90:70:e5:88:11:39:28:80:
e4:87:d9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:39:16 2026 by rpki-client