Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
File: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft (raw, json)
Hash identifier: bP9o+etDsAm+CyFjTyyujj5w81RFjKS3eqCH/Ox3ipw=
Subject key identifier: 58:12:BF:7A:47:9E:67:80:EC:DF:33:6C:6D:85:33:1B:41:9E:F1:17
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Certificate issuer: /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial: 01A1C179208251C650E928FAC6B97625C169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
Manifest number: 0B9E
Signing time: Mon 09 Nov 2026 18:01:42 +0000
Manifest this update: Mon 09 Nov 2026 18:01:42 +0000
Manifest next update: Tue 10 Nov 2026 18:01:42 +0000
Files and hashes: 1: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl (hash: zBvLflG7L70TpXavMBNsWC58rKDNEmgqbhP24lPxxmk=)
2: 48OS4sWYglwtZBn1YxiPqc26nTU.roa (hash: NBM10gWvuZSa38kRQAx40WjX3amxqFeb96LnMyUj85Q=)
3: HUZvsXoFqmpwitLw4aku7m5jYa8.roa (hash: rhpAJ7/RvlTCzRrbypi+sM57yT9OZ8RJ46KD4H90XuY=)
4: Rl0xX2L5u9e-WU3LxVTHfDCZoEQ.roa (hash: iB5ApjU6OfFGOZU2O/uqHAaYYGIEkIhRygeaclVc054=)
5: hih4fzkJ3O9yEk3BE5UpAZ6h-8Q.roa (hash: R7mk0homAMVaYBl/kyf6p+7Cu/DPi0srKaEKzzxe+Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:79:20:82:51:c6:50:e9:28:fa:c6:b9:76:25:c1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Validity
Not Before: Nov 9 18:01:42 2026 GMT
Not After : Nov 10 18:01:42 2026 GMT
Subject: CN=5812bf7a479e6780ecdf336c6d85331b419ef117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:99:29:58:e0:80:3f:3b:ca:42:81:cc:50:eb:
ee:b3:7d:05:04:b8:68:77:d5:85:3f:84:80:cc:eb:
22:0b:ed:80:5b:74:be:4e:b2:e6:9c:08:a2:ba:01:
93:76:6a:5b:a4:ae:e1:46:fc:a3:d5:a9:5d:7c:81:
56:f7:f4:2a:f3:91:c7:63:e4:6c:c2:8f:7a:9d:e7:
4a:23:2f:fe:d7:e2:ed:6e:a9:c1:8e:95:75:2d:a9:
0f:2d:35:f9:23:82:32:01:e6:6a:8e:3d:17:5c:0f:
c7:9a:0f:bb:be:12:b6:9c:e6:c0:a2:ab:18:2c:49:
52:8f:dd:a0:62:65:f2:41:58:4b:40:6d:48:9d:54:
1b:78:db:81:e9:42:a3:cd:fc:3c:47:d7:aa:da:18:
d3:b6:c0:96:4e:47:c6:24:4a:f5:93:66:04:92:8e:
9d:3d:82:53:b3:a3:cc:29:cd:7d:36:32:6c:eb:81:
f6:0d:0a:96:81:b2:37:9b:86:13:4e:18:52:ce:58:
59:76:e8:76:5c:ff:1b:56:6b:b6:6c:b8:5d:fb:6e:
3d:8c:8b:8d:ee:5d:33:0a:5b:66:99:71:7f:71:ac:
dd:7f:ab:b3:60:f2:bb:c3:a9:04:d7:ba:69:fe:8a:
f9:e7:ba:a2:42:4a:3d:1f:02:5e:3e:1c:7c:5b:b2:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:12:BF:7A:47:9E:67:80:EC:DF:33:6C:6D:85:33:1B:41:9E:F1:17
X509v3 Authority Key Identifier:
keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ea:b4:f8:a8:eb:48:b4:15:f1:4e:5c:37:05:00:31:50:05:
21:cd:dc:cf:24:8b:a8:1b:34:f6:ef:38:7a:7a:9e:2e:32:ea:
4b:85:23:7c:d0:8a:10:ce:9a:ea:ca:a9:c9:6d:93:81:fe:6b:
7a:b1:fb:1e:9f:c4:d2:2e:cf:57:a0:38:d9:a6:2f:23:76:e3:
99:b0:09:d6:6a:b9:1f:0f:f0:bc:b9:87:fe:a1:b2:d3:0e:9c:
b6:e4:94:94:87:df:11:80:44:fe:05:39:0e:3a:75:0a:3c:69:
07:75:99:ca:01:a1:c8:79:e2:ca:6d:38:d9:aa:29:42:61:57:
24:97:4a:3f:15:b4:b5:78:d0:74:bc:05:cc:cb:4f:1c:96:21:
ff:4f:d8:31:63:86:cf:13:5d:12:9a:46:32:c9:11:6d:b9:29:
ab:8a:66:18:4b:99:96:bb:94:79:2a:27:07:70:4a:40:9b:b9:
ab:90:de:6c:1a:07:87:8b:24:b7:b9:f4:1a:8a:fd:4c:8b:ad:
ca:45:b3:05:1e:c3:4d:73:9d:ea:4d:cf:27:9d:17:33:2e:ef:
e9:8a:3e:eb:0b:17:9d:e4:87:e8:67:c6:c5:b1:c5:8f:63:a0:
a8:97:3f:f7:fc:56:a1:f1:28:98:d2:22:cc:8d:28:34:e6:0e:
14:18:ae:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 23:49:47 2026 by rpki-client