Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: 1PejJrkJrVa9+6tsbIcrXujthQxF5pNDGiZTU2M+ZbQ=
Subject key identifier: 47:65:2F:F5:95:5D:91:8A:B9:AD:6C:32:1F:92:92:9B:F3:16:9D:62
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 019CACB51343C0E6992B183DBE62C7D4941A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 079F
Signing time: Mon 02 Mar 2026 04:01:13 +0000
Manifest this update: Mon 02 Mar 2026 04:01:13 +0000
Manifest next update: Tue 03 Mar 2026 04:01:13 +0000
Files and hashes: 1: 16NNRYKcMtPO3l4tyItIrY8h2j0.roa (hash: n/D4QX4whPLnDcZV4Beurl7vINkWm+9qF/HLT546rMY=)
2: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: HymWO0VbztX6O75H6CYeU+fNvPBHFf0yhIQDnVEq6iI=)
3: WEOXhVwqbIDcOCVVSfnUDKXKyCA.roa (hash: qTqoCsN4m9/gVAirsn6sBD2Gq5wSIm8Ih8LAi/O159Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:13:43:c0:e6:99:2b:18:3d:be:62:c7:d4:94:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Mar 2 04:01:13 2026 GMT
Not After : Mar 3 04:01:13 2026 GMT
Subject: CN=47652ff5955d918ab9ad6c321f92929bf3169d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:97:95:2f:87:2e:67:e9:e8:30:9b:15:2d:4b:
38:90:cd:f2:1c:7a:81:e3:0a:e2:fe:47:73:a9:c3:
cc:92:6b:4d:46:8b:00:f3:44:f2:9e:de:60:1e:e1:
64:b6:c7:91:d6:9e:16:ff:19:11:fe:2d:f2:8c:c6:
78:5e:30:3a:a0:d7:b2:da:b3:af:f1:ed:db:30:dd:
9a:3e:74:88:05:2c:ec:24:be:44:d9:2c:8e:72:18:
28:27:1c:ec:00:99:95:dc:c8:cd:ec:99:d0:ab:91:
36:07:f0:19:7c:e1:c5:ab:2a:cd:07:64:c8:81:b5:
a3:17:cd:f3:20:55:81:bc:2f:54:d2:ce:bc:9f:a2:
d8:f9:13:28:94:0d:91:c3:fd:7d:dc:0f:a3:e0:d7:
82:5b:56:c8:e8:ae:e4:1f:af:6a:73:88:b3:85:e7:
30:6e:54:e3:60:15:b7:38:b4:16:71:f1:9a:64:38:
a0:e2:42:b4:d9:70:80:7b:b1:1f:7d:d1:b2:b4:90:
b1:fd:3d:02:73:bd:cb:47:89:1a:02:2b:d0:7a:9f:
c8:3b:8a:c1:50:ab:b1:fe:b0:f2:ba:ca:d0:a3:ef:
84:f8:b3:df:dd:db:e3:7e:32:f2:44:68:e1:42:68:
07:f0:c0:bb:f2:ee:a0:47:d2:b7:ae:2b:bd:6d:c0:
7c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:65:2F:F5:95:5D:91:8A:B9:AD:6C:32:1F:92:92:9B:F3:16:9D:62
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ee:e3:e2:43:e2:89:c8:45:91:b6:f8:fa:a4:fd:93:57:d3:
20:00:40:03:e2:e7:b3:ba:68:4a:1d:54:53:c3:c3:fa:76:85:
97:ac:48:54:54:48:25:c7:fd:24:61:36:1f:02:1f:a8:5a:75:
f7:e3:ee:2b:72:c4:7e:22:ee:ae:ba:2d:00:66:cd:67:58:69:
e1:7a:f0:76:0b:90:19:27:2c:10:16:4e:13:2a:5b:6a:c5:ff:
81:65:5f:31:a5:84:0e:af:e9:34:39:e5:33:89:08:4a:a6:ec:
32:1e:c8:95:8e:f2:77:48:be:cd:eb:16:62:af:70:1d:83:49:
db:53:ed:c2:dc:f6:a0:b5:33:d0:e1:3b:87:af:24:65:47:94:
c7:df:dc:6d:f4:a3:3e:a5:88:42:7a:39:f6:ac:63:cc:7e:d4:
7c:11:a1:1f:b7:13:53:da:74:78:ef:92:8d:3b:94:a9:50:09:
dd:29:c8:2b:1a:84:2b:08:8a:e3:f7:c1:1f:3b:76:57:5e:be:
5d:1c:58:ba:7b:69:52:f5:81:30:2e:ad:0c:87:ba:54:eb:a7:
91:bf:70:02:fa:7d:29:ba:2b:ba:f4:24:34:f5:b6:c5:22:fc:
4c:db:41:bc:27:37:d3:ca:00:44:7a:12:e2:a6:0f:7d:84:fb:
62:e5:d8:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:22:54 2026 by rpki-client