Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
File: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft (raw, json)
Hash identifier: 2ssvHDtWfTNqos7eQJmG99GOJV1ajU9+8w+jjYSonTA=
Subject key identifier: 66:19:28:D6:4D:84:C6:70:C6:0C:F7:B6:D1:3F:3B:FF:96:BB:59:3C
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Certificate issuer: /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial: 019EBEED21DCF309CDA47477ADC44502BD64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
Manifest number: 0A0F
Signing time: Sat 13 Jun 2026 03:01:12 +0000
Manifest this update: Sat 13 Jun 2026 03:01:12 +0000
Manifest next update: Sun 14 Jun 2026 03:01:12 +0000
Files and hashes: 1: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl (hash: Ad9GZWrKJTJb6r2NQL9YdSOMq+cxETHb1EyEHR8Kv8Y=)
2: 48OS4sWYglwtZBn1YxiPqc26nTU.roa (hash: NBM10gWvuZSa38kRQAx40WjX3amxqFeb96LnMyUj85Q=)
3: HUZvsXoFqmpwitLw4aku7m5jYa8.roa (hash: rhpAJ7/RvlTCzRrbypi+sM57yT9OZ8RJ46KD4H90XuY=)
4: Rl0xX2L5u9e-WU3LxVTHfDCZoEQ.roa (hash: iB5ApjU6OfFGOZU2O/uqHAaYYGIEkIhRygeaclVc054=)
5: hih4fzkJ3O9yEk3BE5UpAZ6h-8Q.roa (hash: R7mk0homAMVaYBl/kyf6p+7Cu/DPi0srKaEKzzxe+Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:21:dc:f3:09:cd:a4:74:77:ad:c4:45:02:bd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Validity
Not Before: Jun 13 03:01:12 2026 GMT
Not After : Jun 14 03:01:12 2026 GMT
Subject: CN=661928d64d84c670c60cf7b6d13f3bff96bb593c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:24:78:ad:2e:c6:13:15:73:be:e3:b8:0d:a0:
0f:f8:51:97:be:95:e9:68:c7:58:d4:7f:a7:2a:5d:
e9:6d:31:d5:b8:80:77:72:0b:28:bf:b5:24:d8:56:
6d:a7:4b:7e:cc:5e:70:19:e1:b7:e5:97:76:84:c2:
c9:f6:e3:1e:3e:f5:49:ab:be:7e:9e:47:33:4a:3c:
d7:9b:bc:02:00:ef:4c:29:de:d1:d6:fd:f9:12:c1:
40:71:c1:22:68:1f:57:da:6c:c2:53:ab:ed:0c:5f:
81:70:6a:ac:f2:68:c2:2c:ee:05:aa:37:17:c5:f0:
34:25:db:57:ed:a6:7e:14:06:68:d2:ea:69:59:33:
e0:12:a8:39:17:87:c8:a5:6c:82:8b:57:84:50:2d:
d1:5f:b6:e3:0f:bd:12:fd:00:a4:6f:b1:c4:cc:f8:
91:d1:b3:e8:86:c6:07:b8:ed:54:d1:bd:1a:46:44:
89:9b:d6:80:a4:67:e0:d0:d0:dd:2c:a3:9b:7f:ca:
6d:4b:e0:a7:92:99:34:b9:05:7a:c0:ee:9f:99:29:
e7:0d:72:ec:26:a5:94:4d:a6:1e:7a:70:9f:63:74:
88:48:4a:e4:df:c1:4d:42:17:94:1e:31:05:5c:af:
0d:48:d1:d4:98:46:87:db:bc:39:b6:81:1f:1a:fb:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:19:28:D6:4D:84:C6:70:C6:0C:F7:B6:D1:3F:3B:FF:96:BB:59:3C
X509v3 Authority Key Identifier:
keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0b:3a:13:7d:18:34:cb:b2:24:bf:a9:10:31:dc:97:d4:8f:
26:50:fa:e7:c7:b9:80:71:c9:b1:af:13:a5:db:2b:9d:70:d8:
7c:3b:ef:62:ba:bd:9e:1c:90:29:f6:35:ee:01:9a:0b:56:15:
f0:59:d8:83:dd:0a:4f:04:30:a2:8b:bc:56:39:da:62:ac:5c:
5c:f4:02:6a:d8:87:5e:48:f2:5a:e0:4f:58:d4:4a:8c:c7:35:
28:d8:e4:c2:ac:2a:d8:9a:fe:3a:7d:e4:b5:3e:f5:3d:39:8b:
56:fb:3e:20:bd:7d:41:30:98:33:ac:d5:19:63:62:7a:1a:16:
ed:19:17:8a:3b:30:65:25:f7:dd:54:86:84:4c:34:f2:e1:62:
94:31:37:84:dd:9f:de:09:4d:4b:7c:03:1e:44:27:39:07:32:
9a:37:fd:d5:2c:dc:4d:85:58:d8:4f:1f:f9:22:f9:b0:04:fa:
b8:48:24:66:3f:9d:bb:bd:d7:f0:7a:a4:57:1c:28:20:46:d3:
ea:e2:f6:b5:85:46:c3:2a:fc:95:39:bf:4e:4d:43:e7:cb:f1:
bf:97:ac:a0:86:d5:15:5e:22:96:ad:db:9b:ca:63:13:81:43:
37:88:19:9a:05:cc:8d:c3:00:d8:67:6c:27:c4:37:69:11:74:
3b:1f:05:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:49:23 2026 by rpki-client