Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: qjxSCtf6S3caGHUwyE5x7KgL3mcEHcYJPEjPiYuztEs=
Subject key identifier: BD:E9:82:DD:C7:31:BE:06:6B:58:4A:38:55:FE:D8:8D:87:77:61:C0
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 019CAA58BBBFCE04C1C6879A1C166A9312D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 077B
Signing time: Sun 01 Mar 2026 17:01:07 +0000
Manifest this update: Sun 01 Mar 2026 17:01:07 +0000
Manifest next update: Mon 02 Mar 2026 17:01:07 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: KGO7+UqxeAcCSdz5G6p3bM+YF2XhOIM2aSds9v4oRoo=)
2: UbKp8SZhnSoZXvXI5ekDZVISvJ0.roa (hash: Qzbo1YF+7OuM7vfSmLC+YBsyPpRh0JaNoTJmEXBDYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:bb:bf:ce:04:c1:c6:87:9a:1c:16:6a:93:12:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Mar 1 17:01:07 2026 GMT
Not After : Mar 2 17:01:07 2026 GMT
Subject: CN=bde982ddc731be066b584a3855fed88d877761c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4f:5b:d5:54:97:ba:af:7a:13:6d:f5:f9:7c:
b4:9a:79:25:3e:ca:66:27:78:51:56:be:fc:a4:55:
5b:b9:51:26:02:c5:3f:63:29:20:35:a6:93:80:bc:
f5:93:9f:85:11:4c:3b:f8:8a:cc:4d:08:e2:4f:90:
a7:c6:37:cd:f7:4d:80:1d:97:0b:fb:03:c6:39:90:
b4:b5:a5:8c:c0:34:51:e9:87:93:32:6d:34:0b:52:
ae:d6:c1:23:08:05:21:f0:f4:28:73:db:aa:03:75:
a5:84:ee:2c:68:ed:3c:1e:08:54:53:4d:c1:3d:04:
d3:b5:e5:bd:52:0d:56:e5:55:e8:04:12:64:ed:4e:
1b:7e:5e:ad:21:84:94:5c:e8:97:50:2f:8b:d7:a1:
81:5d:18:67:71:ef:85:38:58:4e:e6:d6:a3:f9:dc:
58:b8:9e:88:3e:1e:91:69:01:83:07:3f:83:64:ed:
7d:14:7a:55:9f:8a:30:6e:68:ab:29:ee:08:b9:2f:
8d:d0:71:be:f3:37:e2:32:98:10:07:63:43:18:71:
87:01:51:a5:dd:01:5e:35:46:33:98:a2:25:a0:5e:
c5:4c:63:a8:dd:bf:7b:b0:0a:fd:e0:fe:19:c0:7f:
9e:d7:4d:57:6e:33:52:77:74:c3:50:e5:9c:99:15:
52:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E9:82:DD:C7:31:BE:06:6B:58:4A:38:55:FE:D8:8D:87:77:61:C0
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ec:bf:ae:14:ae:b4:c0:81:f8:33:05:83:89:a9:4d:a9:02:
75:95:0b:50:5d:ea:47:c1:7a:e3:01:09:04:76:73:cd:87:39:
da:1b:42:a7:33:2b:cb:f6:7c:7d:6c:1e:d3:6e:cf:62:7c:2a:
bf:8e:77:96:c4:bf:b2:47:28:3a:ab:f6:f5:87:0c:f0:a6:c7:
18:cc:88:b5:2b:85:63:99:68:cc:d4:1c:a7:9d:30:3d:ec:e1:
1f:71:4b:b1:b4:b5:bb:cb:22:a1:86:60:96:47:79:31:7d:c5:
e4:6e:b9:b7:c6:f0:23:87:ac:0a:1c:61:50:6c:e6:27:23:82:
8d:62:8e:56:80:9a:e9:ab:ce:3b:43:ad:91:d9:80:98:d1:60:
7b:dd:5a:cc:e5:f0:25:38:32:8b:e8:65:22:3e:6e:fd:e9:2d:
22:e4:a1:83:e2:3a:fe:bc:82:97:e7:d8:a4:87:9c:dc:cf:a3:
10:d0:47:60:3f:e9:b4:a7:4d:c2:84:d9:d5:23:ad:79:b5:b1:
54:d6:4b:8a:b3:e7:4b:34:cf:3c:40:b1:4f:71:af:95:05:6f:
be:00:cf:4b:8d:bd:ea:36:8c:8c:41:66:c7:95:0a:ac:c9:05:
09:8e:b6:cf:7b:e1:83:bb:c0:c4:2e:04:38:f9:c3:fa:20:48:
14:38:be:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:39:58 2026 by rpki-client