Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: emYTxlOVP/AmTJrOyIaVg5mhfw79/iLjnxNHp5KPu+8=
Subject key identifier: 94:F8:C6:E5:B1:27:5A:57:B9:6B:15:06:E1:35:E1:65:E5:23:77:7B
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 01A0C2FB545AE693776DCC5C6AD194AF9559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 099A
Signing time: Mon 21 Sep 2026 08:00:45 +0000
Manifest this update: Mon 21 Sep 2026 08:00:45 +0000
Manifest next update: Tue 22 Sep 2026 08:00:45 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: eOsjanCbgswPZBT7m4JoLdQJA3ywNRINSSCVP7CrIN4=)
2: UbKp8SZhnSoZXvXI5ekDZVISvJ0.roa (hash: Qzbo1YF+7OuM7vfSmLC+YBsyPpRh0JaNoTJmEXBDYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:54:5a:e6:93:77:6d:cc:5c:6a:d1:94:af:95:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Sep 21 08:00:45 2026 GMT
Not After : Sep 22 08:00:45 2026 GMT
Subject: CN=94f8c6e5b1275a57b96b1506e135e165e523777b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:76:dd:31:9f:7b:aa:f1:10:e5:77:63:8c:
10:e0:40:1a:dc:cf:a7:fd:93:3f:c2:4c:83:2e:1d:
72:6f:43:b7:33:8c:b1:69:50:14:d5:b2:c6:24:ca:
94:d6:ca:b1:b1:e6:a3:61:9c:47:bc:91:73:0b:0d:
11:2d:71:db:58:9a:be:66:42:ab:26:5f:29:2c:a2:
66:a9:31:ef:05:a8:c9:1b:17:4f:b0:e7:6e:1c:25:
d0:1b:76:ab:52:79:0c:0b:90:14:49:c9:a5:71:c7:
74:fe:a6:c8:01:d8:a0:ef:58:04:22:d6:24:57:fe:
1c:f7:4f:31:13:e1:f5:e7:1b:51:2f:e7:e6:fe:61:
f8:5e:e8:71:e6:b8:68:c5:90:1f:41:f1:a5:99:d7:
05:37:25:c1:3b:24:37:08:b4:a0:14:c1:57:f3:77:
97:93:4c:92:8f:1c:4a:68:cb:fe:43:a8:b2:07:bf:
a0:17:7f:59:34:a7:b2:75:df:59:b5:55:ed:90:cb:
0c:a6:8b:d3:d9:ff:0d:48:96:8b:4a:7e:d7:a5:73:
b0:24:34:04:18:a0:cf:f5:11:20:5a:66:6f:88:76:
83:dd:85:bc:61:3c:47:97:92:7b:69:c5:56:83:ae:
35:35:e3:29:2c:f8:27:28:58:77:ca:1d:a0:0b:55:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F8:C6:E5:B1:27:5A:57:B9:6B:15:06:E1:35:E1:65:E5:23:77:7B
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:52:91:8e:28:12:fb:86:61:c3:bd:61:39:77:84:b6:e6:98:
11:b1:22:e5:ea:b8:70:1a:5e:dc:ef:42:31:24:c9:0a:34:67:
ee:8a:6a:9c:7b:1e:5c:e6:a6:33:ec:0a:62:7f:ec:0a:14:1d:
e9:c4:c7:41:a2:37:80:7e:4c:8a:00:17:78:fd:58:1c:c7:79:
60:c5:8a:37:db:27:e3:c3:1f:9c:e4:7f:9e:bb:05:cb:43:f7:
72:99:91:4e:d6:82:6e:34:c3:7a:c4:74:b6:d2:56:a7:1d:61:
d4:fa:9c:e0:7e:b5:5c:79:0d:84:da:17:38:22:64:72:09:32:
86:0c:51:24:2b:7a:25:63:71:ea:6b:65:8a:8a:93:ac:f7:2e:
d8:0c:ae:40:1d:11:24:26:76:79:a1:32:d5:eb:98:e2:10:6a:
c7:6d:cb:fa:54:34:3a:34:b2:19:4d:4e:9f:64:28:b4:bb:14:
b1:92:ff:c8:11:dc:01:1a:09:be:ba:8f:c6:b9:30:61:42:e2:
0d:e3:08:44:c0:b1:ec:05:81:eb:68:dd:5f:a1:8b:2e:be:1c:
d2:bc:0b:cd:47:da:e1:d2:46:b4:c5:44:52:f3:71:74:e9:00:
5f:39:41:28:64:34:c2:0f:e6:10:7d:66:fe:5a:15:96:48:aa:
e8:ae:25:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDC+1Ra5pN3bcxcatGUr5VZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OWQ4NmEzNTIzOGQ0ZjJlYjYwY2JkMjE0OTVmODFhMzU3
N2MxYTcwHhcNMjYwOTIxMDgwMDQ1WhcNMjYwOTIyMDgwMDQ1WjAzMTEwLwYDVQQD
Eyg5NGY4YzZlNWIxMjc1YTU3Yjk2YjE1MDZlMTM1ZTE2NWU1MjM3NzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dd23TGfe6rxEOV3Y4wQ4EAa3M+n
/ZM/wkyDLh1yb0O3M4yxaVAU1bLGJMqU1sqxseajYZxHvJFzCw0RLXHbWJq+ZkKr
Jl8pLKJmqTHvBajJGxdPsOduHCXQG3arUnkMC5AUScmlccd0/qbIAdig71gEItYk
V/4c908xE+H15xtRL+fm/mH4Xuhx5rhoxZAfQfGlmdcFNyXBOyQ3CLSgFMFX83eX
k0ySjxxKaMv+Q6iyB7+gF39ZNKeydd9ZtVXtkMsMpovT2f8NSJaLSn7XpXOwJDQE
GKDP9REgWmZviHaD3YW8YTxHl5J7acVWg641NeMpLPgnKFh3yh2gC1Xl1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJT4xuWxJ1pXuWsVBuE14WXlI3d7MB8GA1UdIwQY
MBaAFNmdhqNSONTy62DL0hSV+Bo1d8GnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9iNTBjMjgtYTRhNS00Yzk0LWFmYmEt
Mzc1N2QxMGQ4ODllLzEvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9iNTBjMjgtYTRhNS00Yzk0LWFmYmEtMzc1N2QxMGQ4ODll
LzEvMloyR28xSTQxUExyWU12U0ZKWDRHalYzd2FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvlKRjigS
+4Zhw71hOXeEtuaYEbEi5eq4cBpe3O9CMSTJCjRn7opqnHseXOamM+wKYn/sChQd
6cTHQaI3gH5MigAXeP1YHMd5YMWKN9sn48MfnOR/nrsFy0P3cpmRTtaCbjTDesR0
ttJWpx1h1Pqc4H61XHkNhNoXOCJkcgkyhgxRJCt6JWNx6mtlioqTrPcu2AyuQB0R
JCZ2eaEy1euY4hBqx23L+lQ0OjSyGU1On2QotLsUsZL/yBHcARoJvrqPxrkwYULi
DeMIRMCx7AWB62jdX6GLLr4c0rwLzUfa4dJGtMVEUvNxdOkAXzlBKGQ0wg/mEH1m
/loVlkiq6K4l+w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:25:49 2026 by rpki-client