Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: C+OxcSeHlaCd4n8F4se7hm8FYuSRWQueoML4YP/rftc=
Subject key identifier: D3:8D:C3:A4:EE:4B:02:A8:EC:73:88:18:F9:F5:5F:F7:97:C6:D1:D1
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 019D284D4C472FAD40C81901A41E11809FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 07DF
Signing time: Thu 26 Mar 2026 04:00:47 +0000
Manifest this update: Thu 26 Mar 2026 04:00:47 +0000
Manifest next update: Fri 27 Mar 2026 04:00:47 +0000
Files and hashes: 1: 16NNRYKcMtPO3l4tyItIrY8h2j0.roa (hash: n/D4QX4whPLnDcZV4Beurl7vINkWm+9qF/HLT546rMY=)
2: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: x6CGM2rHnIapzk8LHad+XRptPWsz6F8dxJZ6uLDZcrA=)
3: WEOXhVwqbIDcOCVVSfnUDKXKyCA.roa (hash: qTqoCsN4m9/gVAirsn6sBD2Gq5wSIm8Ih8LAi/O159Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:4c:47:2f:ad:40:c8:19:01:a4:1e:11:80:9f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Mar 26 04:00:47 2026 GMT
Not After : Mar 27 04:00:47 2026 GMT
Subject: CN=d38dc3a4ee4b02a8ec738818f9f55ff797c6d1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:48:2d:3d:a1:26:54:df:91:f5:31:36:57:
74:35:83:eb:78:03:15:0c:49:8f:c8:24:62:0d:dc:
3c:7f:aa:f7:c4:f4:26:ea:ee:a0:5d:12:f3:14:4a:
08:13:62:35:ce:10:a1:13:35:7f:8c:49:c3:87:13:
ed:e9:4a:43:00:e7:88:be:8c:43:42:1a:fc:82:3c:
13:2e:9f:7a:53:b9:2a:86:04:82:a3:57:da:b1:8a:
db:37:39:86:74:40:d1:6a:32:db:de:81:eb:f6:f6:
e4:27:ea:9a:e5:98:44:82:6c:25:48:08:78:9d:64:
29:69:76:45:41:40:d2:db:38:b8:5e:45:41:a4:5b:
72:29:ed:84:ac:a0:03:2c:93:2f:11:fc:97:d8:57:
39:af:48:f0:56:db:66:3a:e3:cf:16:62:78:78:f8:
37:cd:5c:d9:09:93:fe:33:e0:17:94:4b:ac:7a:1c:
ea:5a:46:67:02:0d:c2:31:12:e6:ee:39:25:b2:93:
7d:4d:09:0c:35:10:30:3c:27:53:25:40:79:0f:99:
5d:cf:0d:e9:45:c1:29:46:56:cb:92:ef:4e:26:f5:
74:b6:c4:9a:11:49:26:f8:e2:58:ad:56:9b:34:a0:
c7:37:2d:90:d1:04:bd:ba:35:a9:27:34:bd:59:dd:
f2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:8D:C3:A4:EE:4B:02:A8:EC:73:88:18:F9:F5:5F:F7:97:C6:D1:D1
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:44:1e:37:dd:16:10:9e:65:eb:54:6b:a3:79:fa:d9:1a:13:
b7:08:f8:05:65:c0:6d:04:30:31:da:ce:b9:fb:18:1d:7a:d6:
af:5f:91:f3:b5:76:a9:49:ef:0c:95:83:e9:79:4a:fe:7a:42:
87:9c:d5:08:09:f7:b8:c2:62:8d:1a:ca:7d:19:24:68:7b:30:
bc:8a:54:c0:47:3c:b0:ac:db:d3:82:4a:6a:28:eb:e2:21:e1:
35:6a:62:d0:a8:92:86:ab:14:1d:8d:0f:fb:85:3e:8b:09:cd:
0d:a0:8f:a4:76:33:ef:59:74:63:03:5e:13:9f:7a:2b:31:b0:
98:2d:fe:37:d4:4c:73:8d:18:bb:4b:a6:02:20:97:b1:d6:59:
f4:8b:2f:ef:33:95:07:7c:e9:d4:1f:83:f0:ab:73:74:85:04:
ce:f4:6c:90:b3:7d:74:45:a3:38:06:52:3f:e4:f7:31:67:0f:
88:d8:75:13:c1:0c:be:a6:10:86:75:e6:98:cb:65:10:cf:aa:
a1:5a:a9:59:df:03:e7:d4:40:4a:3c:72:d3:b7:4c:3d:cd:b5:
7a:0b:bd:71:97:f2:21:ab:cb:f2:7e:37:56:d9:cc:8d:bc:65:
6c:a8:d1:2e:8a:59:08:8d:0f:c7:84:22:4e:dc:46:b0:fa:ec:
f2:47:89:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTUxHL61AyBkBpB4RgJ/oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMzBmMmZmZjRmZTEwYjFhNzljMTI3YTZhNGFkODJjYTUz
MjYwNjQwHhcNMjYwMzI2MDQwMDQ3WhcNMjYwMzI3MDQwMDQ3WjAzMTEwLwYDVQQD
EyhkMzhkYzNhNGVlNGIwMmE4ZWM3Mzg4MThmOWY1NWZmNzk3YzZkMWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp79ILT2hJlTfkfUxNld0NYPreAMV
DEmPyCRiDdw8f6r3xPQm6u6gXRLzFEoIE2I1zhChEzV/jEnDhxPt6UpDAOeIvoxD
Qhr8gjwTLp96U7kqhgSCo1fasYrbNzmGdEDRajLb3oHr9vbkJ+qa5ZhEgmwlSAh4
nWQpaXZFQUDS2zi4XkVBpFtyKe2ErKADLJMvEfyX2Fc5r0jwVttmOuPPFmJ4ePg3
zVzZCZP+M+AXlEusehzqWkZnAg3CMRLm7jklspN9TQkMNRAwPCdTJUB5D5ldzw3p
RcEpRlbLku9OJvV0tsSaEUkm+OJYrVabNKDHNy2Q0QS9ujWpJzS9Wd3yywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNONw6TuSwKo7HOIGPn1X/eXxtHRMB8GA1UdIwQY
MBaAFNsw8v/0/hCxp5wSempK2CylMmBkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iMGMwYWYtNjE5Yi00YWQ1LWI5NWYt
OTM3ZTI1MjNkNmY3LzEvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iMGMwYWYtNjE5Yi00YWQ1LWI5NWYtOTM3ZTI1MjNkNmY3
LzEvMnpEeV9fVC1FTEdubkJKNmFrcllMS1V5WUdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYkQeN90W
EJ5l61Rro3n62RoTtwj4BWXAbQQwMdrOufsYHXrWr1+R87V2qUnvDJWD6XlK/npC
h5zVCAn3uMJijRrKfRkkaHswvIpUwEc8sKzb04JKaijr4iHhNWpi0KiShqsUHY0P
+4U+iwnNDaCPpHYz71l0YwNeE596KzGwmC3+N9RMc40Yu0umAiCXsdZZ9Isv7zOV
B3zp1B+D8KtzdIUEzvRskLN9dEWjOAZSP+T3MWcPiNh1E8EMvqYQhnXmmMtlEM+q
oVqpWd8D59RASjxy07dMPc21egu9cZfyIavL8n43VtnMjbxlbKjRLopZCI0Px4Qi
TtxGsPrs8keJQQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:46:47 2026 by rpki-client