Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft (raw, json)
Hash identifier: vRL72RYqEjjfLxT563GMdKP30KsuqMbxjc5uoHb6vgE=
Subject key identifier: 00:59:5F:6C:A5:50:7D:89:99:1C:75:96:08:F8:6A:AB:67:5F:33:23
Authority key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Certificate issuer: /CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Certificate serial: 01A0CD110678E7131E22398DE7F6039213D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
Manifest number: 09C2
Signing time: Wed 23 Sep 2026 07:00:40 +0000
Manifest this update: Wed 23 Sep 2026 07:00:40 +0000
Manifest next update: Thu 24 Sep 2026 07:00:40 +0000
Files and hashes: 1: 16NNRYKcMtPO3l4tyItIrY8h2j0.roa (hash: n/D4QX4whPLnDcZV4Beurl7vINkWm+9qF/HLT546rMY=)
2: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl (hash: at7WGIKsEqOdHfmQB/O+rArEU0W5G6Pt/p31lZQ01ho=)
3: WEOXhVwqbIDcOCVVSfnUDKXKyCA.roa (hash: qTqoCsN4m9/gVAirsn6sBD2Gq5wSIm8Ih8LAi/O159Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:06:78:e7:13:1e:22:39:8d:e7:f6:03:92:13:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Validity
Not Before: Sep 23 07:00:40 2026 GMT
Not After : Sep 24 07:00:40 2026 GMT
Subject: CN=00595f6ca5507d89991c759608f86aab675f3323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b4:df:0b:49:16:9f:f1:0a:74:29:f7:d6:7f:
bc:49:0d:4d:6f:b7:49:a9:6b:e6:b6:ff:93:a5:85:
d6:14:b7:8b:2d:fe:86:64:45:e4:00:41:e3:4f:d2:
b2:9d:3d:1f:e7:0b:56:67:35:96:cb:5a:e2:52:58:
05:1e:c9:9e:6f:10:f6:64:82:28:9a:ec:7e:a7:df:
4e:32:c8:62:28:55:7d:85:12:7d:6a:1f:e4:f2:4a:
65:ba:83:98:ca:07:d9:59:d2:37:69:dd:c1:1f:bf:
d5:8c:8e:f6:78:98:89:1a:00:1c:22:3f:2e:b8:13:
db:72:69:cf:69:55:a1:99:d7:43:d3:ce:21:41:ab:
ef:d1:25:a1:cf:c9:f5:28:30:d4:f3:5f:ee:28:f3:
64:b9:e1:e1:61:c5:27:80:8c:9c:66:dd:f5:17:e7:
ff:41:30:b1:cd:a4:db:cf:34:8f:11:14:3b:a3:a2:
db:63:02:4e:b9:49:f2:3d:54:06:d8:95:e6:f9:32:
ee:14:b8:77:27:d7:86:a7:d4:96:36:92:9e:c2:2f:
9d:e1:f1:3c:29:f0:e1:a0:4e:61:cc:c3:6e:47:e5:
14:5f:43:84:41:70:0d:8a:55:11:13:21:6f:86:d4:
1c:58:36:58:cd:0a:c8:33:fe:4e:7b:e9:e8:11:12:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:59:5F:6C:A5:50:7D:89:99:1C:75:96:08:F8:6A:AB:67:5F:33:23
X509v3 Authority Key Identifier:
keyid:DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:73:e7:ae:d6:4c:1a:e1:61:5f:5d:d7:d4:28:b7:df:7e:b4:
69:bc:ea:4b:e9:fa:35:f1:71:a2:8d:0a:9a:8a:21:a8:b3:d0:
2b:9c:84:46:dd:c0:d5:73:29:f5:bd:e8:e2:37:df:cc:41:ca:
0a:cf:d7:80:7c:98:e2:b8:99:cc:64:6c:e5:13:b7:f3:b6:1e:
43:ef:98:e1:a2:d4:05:d6:7b:97:a7:4c:24:ae:ec:49:fa:8d:
82:c0:09:9c:97:74:74:d7:4f:11:9f:f7:51:80:fe:dc:c6:55:
3d:9f:a7:f7:9e:e6:5b:dc:78:21:d0:c0:5a:dc:e3:c5:08:0a:
2c:d6:fe:fb:95:19:f8:1b:ba:a8:45:43:82:81:a0:79:85:9f:
a4:cb:d3:f7:eb:47:2b:6c:e4:11:dc:97:1f:58:0b:f2:24:61:
05:1b:c2:82:7e:a4:3f:1c:35:76:d2:26:0e:92:71:2e:9e:a7:
d1:f1:be:d7:18:b9:67:12:0f:04:6e:b4:75:6c:8e:b8:ec:25:
5f:74:20:d5:3c:16:2d:b0:ee:35:e8:cd:5e:a0:23:be:bf:4e:
99:9b:6e:65:51:54:80:30:83:37:6a:f9:39:6d:2b:a6:dd:42:
46:fe:0d:27:4b:ce:0c:8a:60:20:ad:eb:10:87:42:56:a8:43:
bf:c7:87:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:59:52 2026 by rpki-client