Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: VtVx/VAlBuQryJbYwa89QdAC5a8BG4+qVtlSoXxtTWw=
Subject key identifier: 99:F1:90:5D:64:4E:FD:12:0B:D7:FF:F6:3B:CC:21:5A:D2:C3:FE:AC
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 019D9A3DE1C52D7459DD54442EA1FE47AA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 081A
Signing time: Fri 17 Apr 2026 07:00:39 +0000
Manifest this update: Fri 17 Apr 2026 07:00:39 +0000
Manifest next update: Sat 18 Apr 2026 07:00:39 +0000
Files and hashes: 1: 16NNRYKcMtPO3l4tyItIrY8h2j0.roa (hash: n/D4QX4whPLnDcZV4Beurl7vINkWm+9qF/HLT546rMY=)
2: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: ngPyQ7V3pksy9ao8GFBzmKO/CaClmiJxYvSgaoi2Pis=)
3: WEOXhVwqbIDcOCVVSfnUDKXKyCA.roa (hash: qTqoCsN4m9/gVAirsn6sBD2Gq5wSIm8Ih8LAi/O159Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3d:e1:c5:2d:74:59:dd:54:44:2e:a1:fe:47:aa:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Apr 17 07:00:39 2026 GMT
Not After : Apr 18 07:00:39 2026 GMT
Subject: CN=99f1905d644efd120bd7fff63bcc215ad2c3feac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e0:c6:06:03:82:de:f4:b2:de:9c:c5:c5:fb:
a6:f7:d2:62:72:94:8b:83:fe:30:51:c7:63:5d:09:
88:ef:b9:5d:c0:1c:60:32:ce:ae:9b:56:3b:a0:b1:
56:f5:04:a4:f8:64:1a:dd:da:26:ef:8d:59:48:13:
df:a0:70:b5:bb:26:46:a4:8f:7a:83:57:4f:42:bb:
1a:ee:01:dc:fd:2f:25:41:61:00:b9:71:c1:71:96:
aa:bd:b6:a8:87:3c:a4:72:ab:40:ae:41:af:c9:6a:
e9:f2:3a:75:99:05:85:89:e4:ed:81:49:8a:84:b6:
61:a3:66:97:b1:c2:05:24:1d:3f:0b:b9:67:c4:90:
6f:44:99:33:95:68:24:98:8d:7a:e8:b8:fb:c5:0c:
e2:d8:47:10:f6:ee:25:dd:01:9d:99:27:f0:0d:4d:
5e:6d:c2:c9:02:65:34:15:65:51:22:7d:a1:14:00:
e6:34:a0:50:37:6a:ee:40:4f:c4:37:fe:5c:a9:72:
e0:08:d3:ac:14:68:1d:16:0a:36:de:a0:b3:dc:30:
e4:6c:55:83:31:dd:a9:a3:ca:89:a1:b1:d7:d6:69:
39:f0:3d:6b:75:89:98:da:9a:1b:26:15:4b:19:ea:
7a:2a:b4:5e:ec:93:5c:fd:e5:63:02:6a:f1:20:2e:
08:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F1:90:5D:64:4E:FD:12:0B:D7:FF:F6:3B:CC:21:5A:D2:C3:FE:AC
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:18:20:0b:c5:0f:ca:5a:35:c8:14:63:21:d9:ce:26:ae:c1:
9f:10:6c:c3:4f:a8:68:81:76:8d:5b:5e:f4:ac:fb:64:d6:5e:
40:aa:09:b5:dd:19:29:c6:03:c7:b6:46:cc:b7:77:28:75:7c:
44:88:83:9e:ac:21:db:a9:6b:e4:e6:51:85:90:24:4d:37:a5:
48:46:99:29:46:80:e3:97:6e:ab:4b:20:2c:85:3e:43:69:f0:
57:8f:08:2c:7a:23:f2:f8:67:71:b6:c9:da:c1:4d:8e:c4:d2:
b3:8d:38:86:e0:16:f2:fd:92:b9:a4:ee:07:5a:86:86:cf:27:
62:59:ad:8b:19:3b:c2:e0:10:0b:a5:35:bc:c1:a3:e6:40:56:
cb:51:48:0a:70:ab:81:9e:3d:28:cc:21:2e:48:66:ab:fb:d1:
8e:64:13:8e:fd:ba:c6:e6:cf:b5:8c:3a:46:e3:d5:01:99:bc:
4b:87:52:5b:8a:91:d8:72:97:b6:c7:48:54:2d:53:45:76:c9:
ca:94:e8:a1:d1:69:eb:2e:45:2e:b4:d3:7e:9f:f5:3f:b1:21:
04:8a:31:94:64:d9:43:25:38:2b:5b:c4:95:c0:be:75:c9:cd:
82:31:22:08:08:e8:91:0a:de:ff:71:76:d3:d1:21:bf:e0:6c:
8e:1b:60:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:42:43 2026 by rpki-client