Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
File: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft (raw, json)
Hash identifier: KT2m3FB/L/ut7W/rZTvhwZY0VBd0hEBjyX9FeSDwE4E=
Subject key identifier: 93:23:FB:61:24:CA:6E:B7:00:1A:B9:71:D2:08:94:A5:30:44:03:6F
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Certificate issuer: /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial: 019CA9EB14ED68A654B4D5ED53E7317149C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
Manifest number: 08FB
Signing time: Sun 01 Mar 2026 15:01:21 +0000
Manifest this update: Sun 01 Mar 2026 15:01:21 +0000
Manifest next update: Mon 02 Mar 2026 15:01:21 +0000
Files and hashes: 1: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl (hash: TMavsi7IWTFCHNwZtzJjwQGnFLwFYHm7DTiM8XJx7n4=)
2: 48OS4sWYglwtZBn1YxiPqc26nTU.roa (hash: NBM10gWvuZSa38kRQAx40WjX3amxqFeb96LnMyUj85Q=)
3: HUZvsXoFqmpwitLw4aku7m5jYa8.roa (hash: rhpAJ7/RvlTCzRrbypi+sM57yT9OZ8RJ46KD4H90XuY=)
4: Rl0xX2L5u9e-WU3LxVTHfDCZoEQ.roa (hash: iB5ApjU6OfFGOZU2O/uqHAaYYGIEkIhRygeaclVc054=)
5: hih4fzkJ3O9yEk3BE5UpAZ6h-8Q.roa (hash: R7mk0homAMVaYBl/kyf6p+7Cu/DPi0srKaEKzzxe+Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:14:ed:68:a6:54:b4:d5:ed:53:e7:31:71:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Validity
Not Before: Mar 1 15:01:21 2026 GMT
Not After : Mar 2 15:01:21 2026 GMT
Subject: CN=9323fb6124ca6eb7001ab971d20894a53044036f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e1:3a:f5:02:84:3e:1d:59:98:9d:cf:c5:93:
25:cc:bb:43:03:3d:8a:c3:6a:c6:00:17:03:d3:a3:
d7:08:18:14:12:2b:a3:5a:f1:72:54:1f:87:23:9d:
89:09:64:11:3d:39:1a:ea:42:f7:95:af:12:de:07:
c8:50:35:f2:d5:9f:53:15:79:d4:ec:cc:fb:43:96:
bd:94:24:72:02:27:ba:cf:8a:c0:4b:92:83:d0:fb:
19:47:2a:93:0b:cc:d5:76:c5:e3:47:a7:6f:b9:a6:
93:a8:9f:bc:09:fd:78:e0:d5:2f:f3:67:2a:70:90:
ec:b6:ac:fd:85:a1:86:f7:81:06:c1:cf:37:23:d2:
6b:f3:13:4f:1e:ab:75:a5:31:dd:c9:39:12:97:a9:
39:2f:79:3a:00:c3:e4:f4:ca:58:3d:ac:35:3f:dc:
fa:7c:80:de:8d:7c:e0:3a:f5:ab:ae:7e:62:e0:ef:
7e:45:78:00:b4:83:e8:e7:99:0c:95:54:f6:97:42:
29:4a:06:8e:f1:cf:1b:2a:d1:10:a6:6e:63:33:2c:
25:a8:7b:43:f6:c4:d6:65:94:57:d7:80:b8:34:cb:
f0:a0:66:1f:eb:da:3f:1a:4d:dd:20:96:e8:3d:7b:
95:d7:74:73:64:a3:c8:69:34:34:70:e1:0f:31:11:
b8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:23:FB:61:24:CA:6E:B7:00:1A:B9:71:D2:08:94:A5:30:44:03:6F
X509v3 Authority Key Identifier:
keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:65:62:45:13:29:e7:18:5c:83:f5:d0:b2:4c:00:ba:f4:8a:
17:3d:82:4f:01:9b:10:19:12:4b:58:9c:e9:fc:ac:df:ae:15:
3e:a9:8a:30:a7:33:c7:f0:60:cd:f8:cd:63:99:b1:0b:53:74:
50:cd:1f:00:4c:ff:56:61:27:be:43:6f:5c:4a:72:17:62:d7:
35:6f:49:9a:62:da:91:6a:54:72:a8:99:97:98:7c:10:e3:36:
63:4b:cd:79:41:4b:21:9c:aa:7f:db:f1:25:30:4a:6e:28:7f:
2f:13:bd:26:de:be:93:cd:a6:40:6b:48:01:ed:99:76:ef:d0:
58:02:40:e3:53:8f:f1:fb:89:21:8a:5b:4e:57:8c:7f:ed:1a:
9c:f4:cc:04:1a:35:39:ab:5e:56:fd:28:36:b8:87:cf:be:bf:
3d:e9:cd:4a:09:85:91:0c:83:6a:db:cd:2b:08:fa:88:4e:f8:
1e:6d:80:a2:87:aa:db:0d:da:ba:6c:41:42:87:9c:eb:99:82:
8b:c1:ee:9a:0d:8c:eb:ee:43:e7:07:0e:15:67:51:fc:f7:9d:
52:6c:c5:75:73:d0:e1:b2:c0:16:96:63:97:1c:ce:fb:fd:7c:
32:4f:8f:10:93:f1:b3:b2:a1:03:f9:41:11:1d:8c:66:f2:f6:
49:1f:ee:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:14:18 2026 by rpki-client