Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
File: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft (raw, json)
Hash identifier: r8vNJi5YWoNTEzrWZkVaE19t8qTtnV8sta6YvsRSfDg=
Subject key identifier: 0A:28:C6:B8:A5:B6:F2:A7:84:FD:98:B5:BD:DE:9A:4A:2E:72:78:20
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Certificate issuer: /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial: 019CA7FD0B6C7A229B37D5C35F0A61F52A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
Manifest number: 08FA
Signing time: Sun 01 Mar 2026 06:01:44 +0000
Manifest this update: Sun 01 Mar 2026 06:01:44 +0000
Manifest next update: Mon 02 Mar 2026 06:01:44 +0000
Files and hashes: 1: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl (hash: N6yitCgjISfbmYEFWeIGLHiEw62U8Z1KArP2poM9Lp8=)
2: 48OS4sWYglwtZBn1YxiPqc26nTU.roa (hash: NBM10gWvuZSa38kRQAx40WjX3amxqFeb96LnMyUj85Q=)
3: HUZvsXoFqmpwitLw4aku7m5jYa8.roa (hash: rhpAJ7/RvlTCzRrbypi+sM57yT9OZ8RJ46KD4H90XuY=)
4: Rl0xX2L5u9e-WU3LxVTHfDCZoEQ.roa (hash: iB5ApjU6OfFGOZU2O/uqHAaYYGIEkIhRygeaclVc054=)
5: hih4fzkJ3O9yEk3BE5UpAZ6h-8Q.roa (hash: R7mk0homAMVaYBl/kyf6p+7Cu/DPi0srKaEKzzxe+Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fd:0b:6c:7a:22:9b:37:d5:c3:5f:0a:61:f5:2a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Validity
Not Before: Mar 1 06:01:44 2026 GMT
Not After : Mar 2 06:01:44 2026 GMT
Subject: CN=0a28c6b8a5b6f2a784fd98b5bdde9a4a2e727820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0a:77:ac:96:e1:23:a3:fe:4c:d8:ec:a2:d9:
98:3d:00:bd:35:66:ee:66:f9:9b:52:c1:4d:5e:8a:
14:86:57:ee:ac:f3:5c:5d:18:e0:5e:15:53:77:c7:
4f:b1:af:21:6f:e5:40:ca:30:b8:a3:13:a6:83:17:
04:1b:44:07:bb:c7:ef:8a:31:9b:3f:40:12:b7:ba:
09:76:b1:ae:27:70:d1:60:72:98:7d:40:f7:1c:30:
22:25:0f:b4:87:81:dd:bc:85:c7:3e:87:8f:62:15:
6a:31:21:ea:e8:b9:0e:b9:68:17:0b:ce:5d:b0:cc:
49:2e:b3:2b:26:c0:14:10:1d:81:a3:55:d1:50:4f:
81:2c:ce:99:6a:36:d5:f8:aa:96:5d:4d:db:5e:eb:
b9:f1:43:74:33:09:f5:77:bc:6e:9b:95:18:39:f4:
bc:9b:c2:06:b8:71:50:cb:ad:01:f6:de:73:4c:7d:
50:78:7b:fc:47:cf:bc:53:8e:7d:6a:a0:cc:22:c0:
27:c6:ab:d3:5e:4e:1d:ba:a6:89:6c:f6:bc:d0:87:
3e:ef:e1:41:8c:6a:9b:59:99:54:4d:c5:45:04:e6:
d1:65:af:2e:66:29:b2:ee:42:99:56:68:03:54:7d:
a8:40:be:f2:6e:95:80:4c:52:0b:3d:dd:d2:39:de:
0f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:28:C6:B8:A5:B6:F2:A7:84:FD:98:B5:BD:DE:9A:4A:2E:72:78:20
X509v3 Authority Key Identifier:
keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:60:e9:cb:5a:98:7f:77:cc:60:78:0a:ce:bf:49:5c:d7:72:
fa:65:c8:d3:2b:63:8d:bf:12:96:a5:09:6b:f9:c5:4e:d8:7e:
49:f6:b6:4c:7b:c5:2f:09:0d:e3:05:26:d1:b1:0d:49:13:8f:
c7:1c:4b:9b:b9:2a:78:77:db:e7:c7:2d:e9:e5:6d:92:89:2d:
eb:e8:78:f9:79:31:4c:05:d9:06:94:cb:6b:24:6c:61:76:e3:
44:8f:8f:6b:9c:ec:48:be:86:d6:6c:7e:8a:3f:f3:b0:fc:b2:
dd:15:be:93:42:f6:d3:d9:c9:02:f5:e8:e8:d0:5b:08:21:2f:
64:62:0c:35:9f:a9:d3:67:5d:29:4e:79:02:e6:50:59:c0:9c:
fe:df:5b:79:9f:70:c0:3a:f9:f7:3f:4c:70:10:6c:43:95:fc:
c1:6a:36:ae:17:0b:41:ef:5d:49:a9:22:71:42:7c:84:e6:63:
68:44:cd:55:22:48:7a:ae:17:63:07:05:ee:c5:3f:65:ea:f6:
88:fa:75:3b:14:cf:9b:2e:cc:35:b5:46:26:61:07:af:04:12:
b5:a2:37:92:6a:c3:00:ad:9e:50:c8:f8:65:7a:44:8b:e8:ad:
f2:ea:57:6c:77:30:a4:d1:4c:b8:c4:9a:2e:00:c7:d4:b6:5f:
cc:de:0b:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyn/QtseiKbN9XDXwph9So2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OWE0N2NkYzg5ZjQ2MzQyZjkwYjBkYTNjMzBkOWVjNWZk
NjMyMzgwHhcNMjYwMzAxMDYwMTQ0WhcNMjYwMzAyMDYwMTQ0WjAzMTEwLwYDVQQD
EygwYTI4YzZiOGE1YjZmMmE3ODRmZDk4YjViZGRlOWE0YTJlNzI3ODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwp3rJbhI6P+TNjsotmYPQC9NWbu
ZvmbUsFNXooUhlfurPNcXRjgXhVTd8dPsa8hb+VAyjC4oxOmgxcEG0QHu8fvijGb
P0ASt7oJdrGuJ3DRYHKYfUD3HDAiJQ+0h4HdvIXHPoePYhVqMSHq6LkOuWgXC85d
sMxJLrMrJsAUEB2Bo1XRUE+BLM6ZajbV+KqWXU3bXuu58UN0Mwn1d7xum5UYOfS8
m8IGuHFQy60B9t5zTH1QeHv8R8+8U459aqDMIsAnxqvTXk4duqaJbPa80Ic+7+FB
jGqbWZlUTcVFBObRZa8uZimy7kKZVmgDVH2oQL7ybpWATFILPd3SOd4PwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAooxriltvKnhP2Ytb3emkoucnggMB8GA1UdIwQY
MBaAFNmaR83In0Y0L5Cw2jww2exf1jI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlpwSHpjaWZSalF2a0xEYVBERFo3Rl9XTWpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kMzBlZWYtNDk1ZS00M2JkLTkxOWMt
YTJhMGUyZGI0OWQwLzEvMlpwSHpjaWZSalF2a0xEYVBERFo3Rl9XTWpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kMzBlZWYtNDk1ZS00M2JkLTkxOWMtYTJhMGUyZGI0OWQw
LzEvMlpwSHpjaWZSalF2a0xEYVBERFo3Rl9XTWpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGDpy1qY
f3fMYHgKzr9JXNdy+mXI0ytjjb8SlqUJa/nFTth+Sfa2THvFLwkN4wUm0bENSROP
xxxLm7kqeHfb58ct6eVtkokt6+h4+XkxTAXZBpTLayRsYXbjRI+Pa5zsSL6G1mx+
ij/zsPyy3RW+k0L209nJAvXo6NBbCCEvZGIMNZ+p02ddKU55AuZQWcCc/t9beZ9w
wDr59z9McBBsQ5X8wWo2rhcLQe9dSakicUJ8hOZjaETNVSJIeq4XYwcF7sU/Zer2
iPp1OxTPmy7MNbVGJmEHrwQStaI3kmrDAK2eUMj4ZXpEi+it8upXbHcwpNFMuMSa
LgDH1LZfzN4LVw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:27:47 2026 by rpki-client