Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: QLOYGhRocQnz5EUYpzid6WM+XBpNgLQ9Mpq5pXT7J70=
Subject key identifier: 1C:21:40:A2:22:D5:A2:1D:A5:82:89:E3:F5:AE:66:27:65:6B:3B:2E
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 019F9247EBD71AE8E2FE268ADF5973C6CFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 091F
Signing time: Fri 24 Jul 2026 04:00:14 +0000
Manifest this update: Fri 24 Jul 2026 04:00:14 +0000
Manifest next update: Sat 25 Jul 2026 04:00:14 +0000
Files and hashes: 1: 16NNRYKcMtPO3l4tyItIrY8h2j0.roa (hash: n/D4QX4whPLnDcZV4Beurl7vINkWm+9qF/HLT546rMY=)
2: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: iodpUvlvLQ+0+CkWWqHZZ+n4Vtc1oqs2kHwcjYdeZIM=)
3: WEOXhVwqbIDcOCVVSfnUDKXKyCA.roa (hash: qTqoCsN4m9/gVAirsn6sBD2Gq5wSIm8Ih8LAi/O159Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:47:eb:d7:1a:e8:e2:fe:26:8a:df:59:73:c6:cf:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Jul 24 04:00:14 2026 GMT
Not After : Jul 25 04:00:14 2026 GMT
Subject: CN=1c2140a222d5a21da58289e3f5ae6627656b3b2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:72:fb:b5:f7:5b:69:bd:ea:58:72:09:0d:9b:
79:b8:ba:e2:a4:05:ec:af:96:46:94:ac:78:e5:d3:
ee:83:5a:47:bb:46:ed:78:c9:3f:50:2c:4e:45:1b:
65:33:30:97:e7:89:48:e9:99:36:cc:f9:e3:da:74:
32:aa:62:76:03:22:09:ae:99:91:68:b9:5c:59:c9:
44:81:96:94:28:96:0d:aa:a0:70:0d:7c:f0:01:9b:
5d:1b:42:b8:1b:9b:7b:ba:b5:8e:e3:2d:88:6f:7c:
f4:08:1b:cd:33:81:79:43:94:7e:7c:76:fd:6d:c0:
bf:89:ad:81:dd:6a:95:b2:dc:3c:6b:7c:48:9f:ad:
ab:e7:35:f7:62:0f:23:05:63:b3:96:d3:33:96:88:
dd:ca:30:35:bc:3b:98:bf:20:a5:5e:5c:12:37:00:
69:8d:7b:30:0b:6a:31:d0:02:3c:af:68:08:63:f5:
4d:8e:6c:27:0c:c1:24:5c:c0:50:73:f7:48:27:16:
89:23:42:2d:6a:fe:db:f8:56:82:7a:18:31:d5:bd:
78:c3:62:43:ee:9d:17:21:55:7d:14:18:fa:36:a2:
05:c9:ae:d1:55:e7:92:ed:1f:a4:78:d1:50:f9:47:
b3:60:15:75:e4:c5:f5:43:c1:76:6f:a7:e7:b2:8a:
b2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:21:40:A2:22:D5:A2:1D:A5:82:89:E3:F5:AE:66:27:65:6B:3B:2E
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7e:d7:ec:13:3b:39:b4:47:be:7e:c7:d8:3d:7d:06:c6:d9:
ab:4c:a9:5a:ab:15:d9:e2:99:36:28:f5:91:d0:78:82:7f:1a:
73:4a:b0:c2:37:98:72:5e:7b:9d:ac:a9:bc:5f:c3:15:89:27:
a0:4e:2c:80:00:31:a5:6b:5e:6e:a0:1e:7f:58:e5:68:63:3e:
1e:ed:42:7b:49:19:b7:02:2b:45:a6:97:fe:a2:6a:93:16:c4:
ca:ac:aa:12:b1:69:f1:a5:58:5a:25:bc:2c:f0:12:03:c7:1d:
6d:83:1d:ae:16:80:5d:31:43:4e:6e:c2:a8:48:8d:03:63:eb:
af:79:b3:b4:d7:a2:74:c4:2b:fd:ed:6f:99:4a:57:6c:4d:6b:
b4:7b:ad:7e:ff:62:a2:d4:06:b1:1a:db:6b:33:c2:9a:a0:4a:
d3:7a:c8:5c:11:c4:78:59:53:26:e0:2c:c0:8b:ae:aa:e7:6d:
87:ef:a0:7a:03:82:01:1a:36:93:04:c3:05:de:92:af:62:69:
a8:fb:e7:81:58:e1:16:87:4c:dd:2c:4f:ab:c7:82:4b:b1:21:
55:d8:0c:1c:b2:8a:c3:de:71:1a:38:9e:ad:13:34:fb:50:bd:
32:b6:88:6e:07:47:9d:b0:ce:b3:61:cb:83:80:cf:8b:08:78:
b3:b0:75:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:29:13 2026 by rpki-client