Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: 8HSIVHQ6R97W9ch35SHXXHyw505fEHcmCnmg6ewdrZs=
Subject key identifier: 7A:BF:70:ED:D1:7D:72:9D:D7:CD:F1:F0:22:7B:89:8C:66:1B:D2:55
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 01A11E2CD96BB2AB05B4465074E91D1EA4AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 09EC
Signing time: Fri 09 Oct 2026 01:00:17 +0000
Manifest this update: Fri 09 Oct 2026 01:00:17 +0000
Manifest next update: Sat 10 Oct 2026 01:00:17 +0000
Files and hashes: 1: 16NNRYKcMtPO3l4tyItIrY8h2j0.roa (hash: n/D4QX4whPLnDcZV4Beurl7vINkWm+9qF/HLT546rMY=)
2: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: lQj7Qo+/vo4AUUE60UEQSnWEaJeNcksoTL2i8nymZt4=)
3: WEOXhVwqbIDcOCVVSfnUDKXKyCA.roa (hash: qTqoCsN4m9/gVAirsn6sBD2Gq5wSIm8Ih8LAi/O159Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:2c:d9:6b:b2:ab:05:b4:46:50:74:e9:1d:1e:a4:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Oct 9 01:00:17 2026 GMT
Not After : Oct 10 01:00:17 2026 GMT
Subject: CN=7abf70edd17d729dd7cdf1f0227b898c661bd255
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1f:5c:80:0b:4a:69:a5:b8:9b:3c:c9:f7:fb:
12:f1:a3:85:a9:5c:44:f5:34:4a:b2:53:36:63:dc:
bc:5e:e0:be:16:9e:b6:08:fc:28:01:18:71:55:58:
86:c9:85:60:41:7a:39:6e:4a:5c:7c:73:a7:4a:ab:
f6:55:33:cf:45:ed:ea:29:56:d8:b6:e2:fa:d8:94:
83:54:ca:4a:83:ad:88:ec:a3:3b:76:fd:5f:85:e2:
39:fb:33:15:38:2e:4a:74:94:92:4b:49:5c:0f:71:
93:0c:96:9e:25:6d:c2:76:58:be:64:a7:ce:df:99:
46:43:9d:31:96:95:c5:c9:ca:41:37:19:bd:55:54:
30:5c:15:54:6f:de:14:98:51:a6:68:67:5f:2c:4d:
21:34:3a:c4:7a:e6:d3:92:3c:97:71:5b:6c:10:ad:
77:e0:07:28:6d:68:30:01:3b:35:4c:cb:d4:ad:f9:
fa:c8:8f:66:ba:0f:8e:c0:ac:bf:70:dc:6e:ba:f3:
6e:2f:ef:71:29:a8:0b:34:7a:a7:4f:fc:4e:c4:39:
de:6a:57:4e:84:27:54:94:8c:0e:c7:d5:a3:f1:88:
53:76:9c:8b:2f:61:43:8b:62:14:a2:76:cb:43:59:
ed:58:76:c8:85:c1:27:17:cd:d8:ed:a9:a3:7c:84:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BF:70:ED:D1:7D:72:9D:D7:CD:F1:F0:22:7B:89:8C:66:1B:D2:55
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d9:88:3e:4d:15:18:03:ab:f3:d0:d1:eb:8c:08:97:01:6a:
5c:1e:7d:39:8d:bc:1a:71:60:1f:7b:73:56:de:21:13:3e:32:
d8:d3:ca:49:8f:73:97:a5:44:19:c0:f3:e0:49:bf:70:a5:04:
e1:5f:0e:f0:69:6e:1b:12:25:0a:df:e5:21:3b:4d:a1:38:70:
6e:e4:8f:30:99:f2:3e:b5:e9:ec:64:e5:cc:66:99:c4:ec:d2:
aa:28:df:91:b8:5e:03:b4:8c:f6:96:55:5d:c7:4f:49:58:49:
9d:04:0e:5a:e9:e2:d8:53:47:28:49:85:9e:e3:92:4c:59:c3:
d3:9d:9c:e5:15:79:3a:ed:3b:9c:c3:7c:fc:d6:ff:2f:79:a5:
f6:f5:ea:b7:aa:7c:8b:dc:70:8e:e5:29:16:f6:85:15:bf:6a:
eb:0b:f1:d8:fc:80:3f:2a:b0:71:e0:43:3b:53:a2:7e:d4:3b:
1e:3d:05:2b:06:0b:c4:3f:fc:dd:2b:e0:46:86:38:07:4d:7b:
3b:5c:26:4c:04:45:f4:ea:5d:1d:8f:81:e9:8b:24:05:f4:58:
91:a3:3c:96:66:bd:87:6d:f9:89:4a:d0:67:3c:2a:f8:46:cd:
93:26:a4:6b:35:c8:15:4c:91:d2:36:ec:74:96:fe:c8:3f:40:
23:d9:0c:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEeLNlrsqsFtEZQdOkdHqSsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMzBmMmZmZjRmZTEwYjFhNzljMTI3YTZhNGFkODJjYTUz
MjYwNjQwHhcNMjYxMDA5MDEwMDE3WhcNMjYxMDEwMDEwMDE3WjAzMTEwLwYDVQQD
Eyg3YWJmNzBlZGQxN2Q3MjlkZDdjZGYxZjAyMjdiODk4YzY2MWJkMjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R9cgAtKaaW4mzzJ9/sS8aOFqVxE
9TRKslM2Y9y8XuC+Fp62CPwoARhxVViGyYVgQXo5bkpcfHOnSqv2VTPPRe3qKVbY
tuL62JSDVMpKg62I7KM7dv1fheI5+zMVOC5KdJSSS0lcD3GTDJaeJW3Cdli+ZKfO
35lGQ50xlpXFycpBNxm9VVQwXBVUb94UmFGmaGdfLE0hNDrEeubTkjyXcVtsEK13
4AcobWgwATs1TMvUrfn6yI9mug+OwKy/cNxuuvNuL+9xKagLNHqnT/xOxDnealdO
hCdUlIwOx9Wj8YhTdpyLL2FDi2IUonbLQ1ntWHbIhcEnF83Y7amjfIRNIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq/cO3RfXKd183x8CJ7iYxmG9JVMB8GA1UdIwQY
MBaAFNsw8v/0/hCxp5wSempK2CylMmBkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMGMwYWYtNjE5Yi00YWQ1LWI5NWYt
OTM3ZTI1MjNkNmY3LzEvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iMGMwYWYtNjE5Yi00YWQ1LWI5NWYtOTM3ZTI1MjNkNmY3
LzEvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVtmIPk0V
GAOr89DR64wIlwFqXB59OY28GnFgH3tzVt4hEz4y2NPKSY9zl6VEGcDz4Em/cKUE
4V8O8GluGxIlCt/lITtNoThwbuSPMJnyPrXp7GTlzGaZxOzSqijfkbheA7SM9pZV
XcdPSVhJnQQOWuni2FNHKEmFnuOSTFnD052c5RV5Ou07nMN8/Nb/L3ml9vXqt6p8
i9xwjuUpFvaFFb9q6wvx2PyAPyqwceBDO1OiftQ7Hj0FKwYLxD/83SvgRoY4B017
O1wmTARF9OpdHY+B6YskBfRYkaM8lma9h235iUrQZzwq+EbNkyakazXIFUyR0jbs
dJb+yD9AI9kMVQ==
-----END CERTIFICATE-----
Generated at Fri Oct 9 09:19:15 2026 by rpki-client