Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: OzYmtfhA74NLGtAsmxuZSjyFjTkTsykmRQ57k7OfyBA=
Subject key identifier: FC:00:6B:92:B6:1A:45:09:1F:55:EB:06:74:B7:AE:75:BA:9E:37:93
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 019E1D90CA3B5B418B7776B220749258F46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 085E
Signing time: Tue 12 May 2026 19:01:28 +0000
Manifest this update: Tue 12 May 2026 19:01:28 +0000
Manifest next update: Wed 13 May 2026 19:01:28 +0000
Files and hashes: 1: 16NNRYKcMtPO3l4tyItIrY8h2j0.roa (hash: n/D4QX4whPLnDcZV4Beurl7vINkWm+9qF/HLT546rMY=)
2: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: bDMzf+ru7M9CzMtO7Amk3dxtA42Xgk0IH7sSdpdNcdk=)
3: WEOXhVwqbIDcOCVVSfnUDKXKyCA.roa (hash: qTqoCsN4m9/gVAirsn6sBD2Gq5wSIm8Ih8LAi/O159Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:ca:3b:5b:41:8b:77:76:b2:20:74:92:58:f4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: May 12 19:01:28 2026 GMT
Not After : May 13 19:01:28 2026 GMT
Subject: CN=fc006b92b61a45091f55eb0674b7ae75ba9e3793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:57:4c:58:d8:f8:2c:a2:79:50:3f:34:7f:82:
c8:7f:d1:32:f7:be:bb:b3:84:1d:f2:81:16:5b:96:
33:72:71:e2:f2:67:32:55:e4:3c:45:09:e8:5a:39:
2b:2d:92:0c:28:7a:1e:1d:a8:66:9b:e2:2b:13:e2:
61:79:c9:53:56:2b:5c:a1:de:cc:77:19:7f:45:be:
1d:b6:8b:dd:81:10:3d:99:5d:95:de:08:69:ef:b9:
f2:ef:09:be:a0:41:7a:78:8b:c8:8a:08:98:78:0d:
55:ef:cc:9d:32:39:bf:c3:56:92:75:db:33:24:13:
51:1d:08:cb:13:0c:e7:f1:0d:5a:92:e4:3a:19:b3:
d3:0d:5b:fa:35:dc:35:56:b3:03:89:a6:39:57:52:
2d:36:4f:7e:5a:18:6f:fd:fd:46:f0:93:28:1e:4b:
51:f0:32:56:78:3f:bb:15:8b:db:93:7e:c3:d2:13:
0f:79:f5:2f:67:6c:42:31:31:49:80:9f:f0:5c:61:
50:4f:32:b2:90:55:50:45:34:45:a1:59:13:66:c0:
16:dc:bb:69:6e:92:e4:8b:5e:80:aa:e9:42:0c:a8:
55:e1:28:5d:f2:6d:38:24:d8:a8:62:c3:6d:b1:5c:
f9:37:8c:4e:ca:2e:05:32:4b:ed:17:bd:dd:6b:3b:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:00:6B:92:B6:1A:45:09:1F:55:EB:06:74:B7:AE:75:BA:9E:37:93
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:83:77:17:f9:89:a7:dc:85:64:01:e9:9f:2e:bb:0b:ec:3a:
9f:c6:3e:e5:3c:11:7c:b5:09:6c:54:e7:69:56:6d:d8:7d:2a:
e6:81:7e:38:f0:d4:a2:78:26:60:51:63:ff:90:f7:c7:3b:92:
5e:8e:71:cc:39:51:2f:72:c6:e4:01:4f:90:0a:4a:73:68:67:
78:ad:57:07:05:62:2a:8e:8b:5f:f1:b5:5b:7c:be:09:21:35:
78:01:9e:d6:c2:11:1f:0b:f5:16:2e:63:8e:51:6a:84:98:bf:
2d:ee:3d:02:85:74:6a:bb:ef:4c:90:a4:c0:27:01:09:c3:20:
83:a4:4a:bf:3c:49:0d:f9:b3:e8:0d:65:ee:00:6c:86:63:d3:
69:c2:bd:10:cf:9c:b8:c1:4d:a1:d3:f9:e2:1f:0c:27:5b:e3:
54:74:16:47:c0:13:71:e3:72:8a:17:d1:16:58:f6:06:5b:24:
43:ad:3a:6f:9b:4e:0e:10:59:96:83:aa:4e:91:e6:12:f6:be:
8f:a1:9e:99:91:68:90:d3:0b:66:21:1f:34:34:9a:24:1f:b4:
e4:4f:0b:4e:13:fe:58:fa:9e:f1:39:f8:ba:76:b2:33:6c:c1:
46:f3:99:84:8e:30:c9:d3:d9:3c:c1:3e:0f:cf:f2:cf:37:8d:
82:80:26:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:34 2026 by rpki-client