Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
File: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft (raw, json)
Hash identifier: HgSZY4jqXvxOkdEDykxOq7gQ/ZNr9oDyAh7NpsKQzjg=
Subject key identifier: EA:FF:91:4E:34:BB:6F:78:E9:BE:D0:AD:64:91:D2:85:CB:D7:FD:58
Authority key identifier: DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
Certificate issuer: /CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Certificate serial: 019EC44AE8C2F1A52E6D94798527FCBA9527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
Manifest number: 0129
Signing time: Sun 14 Jun 2026 04:01:43 +0000
Manifest this update: Sun 14 Jun 2026 04:01:43 +0000
Manifest next update: Mon 15 Jun 2026 04:01:43 +0000
Files and hashes: 1: 2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl (hash: lQXKOcqb6EgVVjfwC20zTZEE0KnnhjjbWLTyeuYGalM=)
2: naHckrSlqfOXoEYuqHvDFPuIvmo.roa (hash: uCJn/si164qQQhfXnZigQyT0DG1sXH4WEj+FDJ1eUtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:4a:e8:c2:f1:a5:2e:6d:94:79:85:27:fc:ba:95:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30dd246f42b7b366804ce8d8084ad393d21c63
Validity
Not Before: Jun 14 04:01:43 2026 GMT
Not After : Jun 15 04:01:43 2026 GMT
Subject: CN=eaff914e34bb6f78e9bed0ad6491d285cbd7fd58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:60:ec:d5:f8:72:bd:3c:90:8d:28:a4:ec:cb:
9f:34:10:1d:07:66:d0:3f:67:73:43:ed:a2:1d:7b:
b5:d9:ff:cd:6b:38:21:1c:c2:6a:86:1c:5a:c0:9c:
d2:3c:47:9a:24:5a:b4:2e:3c:08:d3:ea:81:2c:f7:
ba:76:6b:e5:13:12:44:72:8a:d1:5a:69:b8:08:61:
b0:71:7e:b8:b6:3c:77:9c:14:51:13:cc:8a:d0:99:
dd:a8:20:f2:c7:6c:12:b0:ab:2c:df:97:d6:98:ac:
08:fa:68:eb:b8:2f:24:51:00:02:53:32:3b:ca:9b:
07:d5:f1:30:f2:e3:b4:e1:a2:18:ce:49:1a:6f:29:
2e:aa:92:cc:4b:e3:a3:dc:f8:4b:29:61:49:0e:ab:
c8:06:c1:83:7b:60:99:2a:93:38:4a:41:63:a7:b2:
5a:6c:c1:a2:29:49:1c:6c:6c:cc:5c:1a:25:58:89:
fb:b0:86:c1:49:32:fe:ab:3a:5f:0d:39:6c:4a:bc:
13:20:46:f1:f7:6f:94:82:72:34:b6:26:de:79:0f:
ed:b9:26:ff:81:a2:6a:35:9f:89:97:86:6d:98:3a:
fd:16:da:03:ce:b3:ff:8d:76:db:d1:fb:b2:20:96:
38:03:99:50:95:1c:7a:55:8a:18:fe:4e:48:52:2e:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FF:91:4E:34:BB:6F:78:E9:BE:D0:AD:64:91:D2:85:CB:D7:FD:58
X509v3 Authority Key Identifier:
keyid:DB:30:DD:24:6F:42:B7:B3:66:80:4C:E8:D8:08:4A:D3:93:D2:1C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDdJG9Ct7NmgEzo2AhK05PSHGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5e8c5a-efd7-4037-8f0f-7b0ce326bdea/1/2zDdJG9Ct7NmgEzo2AhK05PSHGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8d:9b:b3:b7:86:c7:7b:a5:21:41:d3:09:32:1a:79:80:a2:
3c:41:44:f4:b9:f1:58:5d:b9:81:1c:08:7b:62:06:f0:5c:86:
77:11:11:52:44:a3:c1:6b:84:c9:8d:fd:c4:95:f7:3d:55:fd:
07:52:b0:00:74:91:c3:b7:94:89:a3:b3:59:f7:10:4e:4c:61:
7d:df:65:23:ec:35:3f:bf:87:63:11:71:b3:ae:27:49:84:87:
d8:6b:b0:27:a4:7f:d3:3f:2f:95:4b:0b:7b:a2:cb:22:cf:8a:
a3:29:f4:8b:1a:3a:85:f7:37:24:74:20:57:40:b2:da:0c:fe:
b5:1d:f0:84:5a:c6:60:e2:d6:45:1f:eb:5e:c0:af:5a:dd:85:
fd:12:36:c7:32:bb:c0:c7:82:f9:62:2b:4d:bc:91:ca:fd:82:
74:68:3f:13:aa:89:59:b9:8d:1a:6b:fe:11:36:8c:71:eb:55:
ad:28:52:58:7b:50:75:fe:3a:7b:26:4e:6f:da:e4:77:fb:e3:
be:84:72:1a:0f:b0:e3:74:ce:4d:1b:d8:0c:24:59:0e:1b:3e:
2e:b9:2f:86:f2:77:b8:17:5e:bc:ae:90:5c:73:10:84:b6:fe:
3b:54:9f:5c:09:c1:67:98:f8:6b:2c:3f:54:b0:44:81:59:97:
1d:ad:ca:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7ESujC8aUubZR5hSf8upUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMzBkZDI0NmY0MmI3YjM2NjgwNGNlOGQ4MDg0YWQzOTNk
MjFjNjMwHhcNMjYwNjE0MDQwMTQzWhcNMjYwNjE1MDQwMTQzWjAzMTEwLwYDVQQD
EyhlYWZmOTE0ZTM0YmI2Zjc4ZTliZWQwYWQ2NDkxZDI4NWNiZDdmZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWDs1fhyvTyQjSik7MufNBAdB2bQ
P2dzQ+2iHXu12f/NazghHMJqhhxawJzSPEeaJFq0LjwI0+qBLPe6dmvlExJEcorR
Wmm4CGGwcX64tjx3nBRRE8yK0JndqCDyx2wSsKss35fWmKwI+mjruC8kUQACUzI7
ypsH1fEw8uO04aIYzkkabykuqpLMS+Oj3PhLKWFJDqvIBsGDe2CZKpM4SkFjp7Ja
bMGiKUkcbGzMXBolWIn7sIbBSTL+qzpfDTlsSrwTIEbx92+UgnI0tibeeQ/tuSb/
gaJqNZ+Jl4ZtmDr9FtoDzrP/jXbb0fuyIJY4A5lQlRx6VYoY/k5IUi53AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOr/kU40u2946b7QrWSR0oXL1/1YMB8GA1UdIwQY
MBaAFNsw3SRvQrezZoBM6NgIStOT0hxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnpEZEpHOUN0N05tZ0V6bzJBaEswNVBTSEdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ZThjNWEtZWZkNy00MDM3LThmMGYt
N2IwY2UzMjZiZGVhLzEvMnpEZEpHOUN0N05tZ0V6bzJBaEswNVBTSEdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81ZThjNWEtZWZkNy00MDM3LThmMGYtN2IwY2UzMjZiZGVh
LzEvMnpEZEpHOUN0N05tZ0V6bzJBaEswNVBTSEdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMI2bs7eG
x3ulIUHTCTIaeYCiPEFE9LnxWF25gRwIe2IG8FyGdxERUkSjwWuEyY39xJX3PVX9
B1KwAHSRw7eUiaOzWfcQTkxhfd9lI+w1P7+HYxFxs64nSYSH2GuwJ6R/0z8vlUsL
e6LLIs+Koyn0ixo6hfc3JHQgV0Cy2gz+tR3whFrGYOLWRR/rXsCvWt2F/RI2xzK7
wMeC+WIrTbyRyv2CdGg/E6qJWbmNGmv+ETaMcetVrShSWHtQdf46eyZOb9rkd/vj
voRyGg+w43TOTRvYDCRZDhs+LrkvhvJ3uBdevK6QXHMQhLb+O1SfXAnBZ5j4ayw/
VLBEgVmXHa3KFw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 12:08:51 2026 by rpki-client