Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: PXbeoDzssNyY8OfJOII1SkP50mXLhE9oQkk1+OwF5Fg=
Subject key identifier: 3C:40:10:02:89:26:8F:FD:DD:57:4C:88:21:31:8F:DB:2C:B5:79:52
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 019D97E2115F46560FBEA71FAB78F329A7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 07F6
Signing time: Thu 16 Apr 2026 20:01:08 +0000
Manifest this update: Thu 16 Apr 2026 20:01:08 +0000
Manifest next update: Fri 17 Apr 2026 20:01:08 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: lyrMGM07auAQNokzZMVMbda1yR4j1N6GTe6tTWbWPkE=)
2: UbKp8SZhnSoZXvXI5ekDZVISvJ0.roa (hash: Qzbo1YF+7OuM7vfSmLC+YBsyPpRh0JaNoTJmEXBDYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:11:5f:46:56:0f:be:a7:1f:ab:78:f3:29:a7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Apr 16 20:01:08 2026 GMT
Not After : Apr 17 20:01:08 2026 GMT
Subject: CN=3c40100289268ffddd574c8821318fdb2cb57952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:4b:89:7e:fd:05:cb:0b:d1:fe:d1:c9:d3:
0b:47:34:e6:d8:ec:c0:1f:5a:d8:b9:54:c7:cd:31:
b1:37:8b:cb:93:6d:49:41:24:8b:17:8d:a7:c5:1e:
10:8d:b0:bc:8a:04:8e:b6:d8:2e:8b:ba:fd:30:97:
4b:d8:3c:7c:aa:af:6a:32:a8:73:59:d8:69:82:62:
60:0f:ac:2f:f4:77:5b:2f:69:af:dc:1a:01:17:61:
7b:91:ac:00:20:46:be:62:1c:f9:21:7f:77:bc:d9:
5e:ff:4b:fe:d4:62:e3:01:bb:3d:94:5e:cb:51:d4:
00:f6:70:ed:58:49:68:6d:f4:ba:07:d1:f8:a6:e7:
09:d3:7c:f8:d4:3f:dd:ac:e9:a5:93:de:8e:10:d1:
ca:1f:ba:8a:30:37:84:de:1b:60:a7:fc:00:81:0b:
2b:90:4a:bb:6d:45:09:30:a0:b8:82:0d:14:28:bd:
46:da:57:e5:83:ad:0d:f8:a2:b7:d1:c2:6a:8b:d4:
9e:42:51:07:c7:0c:f4:90:52:a2:9e:51:a6:01:ff:
2b:d6:72:4f:75:cf:ef:35:7a:ec:8f:ec:a8:d2:bc:
ab:dd:f8:81:54:10:fb:06:52:2c:81:57:e9:91:62:
fd:c3:57:f3:ce:d2:60:48:c6:56:eb:ff:1f:0b:29:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:40:10:02:89:26:8F:FD:DD:57:4C:88:21:31:8F:DB:2C:B5:79:52
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:37:48:98:28:a0:6d:60:d5:a1:7b:84:94:e0:e0:d6:5d:91:
08:d9:ff:0f:9c:f5:1c:b9:f4:b0:80:12:07:37:e1:82:27:a3:
b5:1d:3a:fe:74:ab:14:68:b0:fe:48:f9:9f:4d:15:41:df:73:
00:19:84:30:b7:e8:92:ec:99:6b:bf:95:97:29:d3:73:14:c2:
1e:90:fb:2c:8c:11:c5:d8:86:ef:73:b8:38:6d:4a:d4:ff:0a:
d8:5d:c1:a6:e8:76:b8:ff:5c:b9:93:36:81:40:12:85:c1:c8:
8f:36:8d:3a:37:80:6c:25:a0:d7:bd:58:6a:56:07:da:1a:a9:
32:80:43:08:10:6e:39:19:ab:18:00:fd:0f:82:b6:b2:62:ab:
dd:3a:66:a6:74:c9:6d:5a:20:d7:9f:6f:61:b8:c6:46:88:b6:
30:90:e7:9c:78:78:b3:0e:f4:1f:ea:d1:93:38:42:6b:04:b2:
11:ab:55:6f:23:fa:27:da:b9:8c:c0:06:28:6d:a6:12:73:53:
55:85:2e:af:47:03:e3:03:66:8d:91:94:5e:d8:f3:c1:25:74:
5a:a4:47:42:61:b9:73:05:d7:02:d0:24:7e:34:f1:e1:c1:a2:
ac:99:3e:b5:8f:e1:1d:84:57:a0:fe:cf:cf:f8:e7:81:12:9c:
7d:9b:06:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4hFfRlYPvqcfq3jzKafaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OWQ4NmEzNTIzOGQ0ZjJlYjYwY2JkMjE0OTVmODFhMzU3
N2MxYTcwHhcNMjYwNDE2MjAwMTA4WhcNMjYwNDE3MjAwMTA4WjAzMTEwLwYDVQQD
EygzYzQwMTAwMjg5MjY4ZmZkZGQ1NzRjODgyMTMxOGZkYjJjYjU3OTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyBLiX79BcsL0f7RydMLRzTm2OzA
H1rYuVTHzTGxN4vLk21JQSSLF42nxR4QjbC8igSOttgui7r9MJdL2Dx8qq9qMqhz
WdhpgmJgD6wv9HdbL2mv3BoBF2F7kawAIEa+Yhz5IX93vNle/0v+1GLjAbs9lF7L
UdQA9nDtWElobfS6B9H4pucJ03z41D/drOmlk96OENHKH7qKMDeE3htgp/wAgQsr
kEq7bUUJMKC4gg0UKL1G2lflg60N+KK30cJqi9SeQlEHxwz0kFKinlGmAf8r1nJP
dc/vNXrsj+yo0ryr3fiBVBD7BlIsgVfpkWL9w1fzztJgSMZW6/8fCymOIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxAEAKJJo/93VdMiCExj9sstXlSMB8GA1UdIwQY
MBaAFNmdhqNSONTy62DL0hSV+Bo1d8GnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNTBjMjgtYTRhNS00Yzk0LWFmYmEt
Mzc1N2QxMGQ4ODllLzEvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iNTBjMjgtYTRhNS00Yzk0LWFmYmEtMzc1N2QxMGQ4ODll
LzEvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuDdImCig
bWDVoXuElODg1l2RCNn/D5z1HLn0sIASBzfhgiejtR06/nSrFGiw/kj5n00VQd9z
ABmEMLfokuyZa7+VlynTcxTCHpD7LIwRxdiG73O4OG1K1P8K2F3Bpuh2uP9cuZM2
gUAShcHIjzaNOjeAbCWg171YalYH2hqpMoBDCBBuORmrGAD9D4K2smKr3TpmpnTJ
bVog159vYbjGRoi2MJDnnHh4sw70H+rRkzhCawSyEatVbyP6J9q5jMAGKG2mEnNT
VYUur0cD4wNmjZGUXtjzwSV0WqRHQmG5cwXXAtAkfjTx4cGirJk+tY/hHYRXoP7P
z/jngRKcfZsGjQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:33 2026 by rpki-client