Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: zpz3m8C9eoX/SUqq4p/++Bs2Ou3BYvFuR8yEtHF1q2o=
Subject key identifier: 67:7C:74:55:F7:91:47:0E:9E:62:3C:F8:D4:6F:3E:EE:75:5D:66:DF
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 019D27DF7D3B38090A7459BC9AE87C335815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 07BC
Signing time: Thu 26 Mar 2026 02:00:51 +0000
Manifest this update: Thu 26 Mar 2026 02:00:51 +0000
Manifest next update: Fri 27 Mar 2026 02:00:51 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: Na6wt57Lqw/YMAM2AOIALVxQvTHAtDYSIQqpxzLmaAk=)
2: UbKp8SZhnSoZXvXI5ekDZVISvJ0.roa (hash: Qzbo1YF+7OuM7vfSmLC+YBsyPpRh0JaNoTJmEXBDYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:7d:3b:38:09:0a:74:59:bc:9a:e8:7c:33:58:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Mar 26 02:00:51 2026 GMT
Not After : Mar 27 02:00:51 2026 GMT
Subject: CN=677c7455f791470e9e623cf8d46f3eee755d66df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d3:e8:86:96:7c:10:c4:ce:b6:35:cd:c2:27:
00:a4:36:b1:a2:37:e4:f7:79:4a:8b:df:36:38:a2:
a1:a1:d8:c0:5a:4c:08:df:83:09:df:a7:f8:ed:e6:
fd:69:10:e9:2f:89:1b:ab:c4:59:1f:02:ea:59:98:
15:ca:a1:2a:1f:73:40:d9:03:04:b0:fd:bc:f2:38:
c9:42:61:4e:ba:47:22:ab:02:a2:28:e4:96:3f:ad:
cf:4c:b4:19:60:66:6c:e1:79:6a:74:25:70:01:27:
d5:64:0a:83:0e:ea:ed:d9:cb:61:5d:7d:cf:85:9e:
40:99:5f:de:f3:9a:fe:bb:66:6d:69:0b:cb:ad:39:
92:7d:e7:7e:c3:39:11:c4:8c:7e:96:44:8f:32:04:
b0:ea:7f:f5:35:0e:9f:5f:df:64:79:46:0f:e8:b6:
0d:be:de:82:ca:86:74:a8:79:dd:47:fa:38:ca:01:
dc:34:d7:bb:1d:81:d9:f1:98:10:5e:18:ad:c1:5a:
90:85:f4:22:2e:12:62:4d:a0:f5:50:5f:8b:67:ce:
06:30:af:6d:7f:26:ae:60:b3:d4:57:a0:8b:38:1d:
95:e4:3e:47:7d:f8:b4:da:46:3b:bd:b6:c4:41:bc:
6a:a0:c9:8f:b7:03:e8:8a:80:67:7a:5a:f3:d7:53:
85:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:7C:74:55:F7:91:47:0E:9E:62:3C:F8:D4:6F:3E:EE:75:5D:66:DF
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:76:f1:32:e5:17:ae:01:db:fb:09:8b:f8:cc:fa:e9:d2:9e:
b8:17:f4:6b:f5:01:f0:a7:6a:60:cc:c1:f7:b6:c6:da:0d:f2:
f9:be:b7:a7:75:71:ca:d4:06:1f:ca:6d:3f:22:9a:bc:c9:f2:
83:2e:ad:da:5e:b9:1d:1a:d7:99:24:30:3e:47:db:6c:33:41:
57:82:a8:ce:fa:92:a3:e9:62:87:37:82:d5:d4:9f:b8:c3:0e:
33:06:b4:88:96:ad:49:28:bc:cf:0b:08:28:94:3f:51:05:c4:
d3:c2:94:05:3a:3b:fa:16:92:9a:9f:7b:b3:b3:ab:10:d9:0f:
f4:39:52:7a:8b:c9:fe:0c:a4:d7:36:00:d6:f9:64:fb:03:15:
60:78:66:5a:ac:bf:45:0f:61:d1:63:08:10:f9:33:d4:68:3a:
95:b6:ec:f1:68:6a:96:63:2a:ac:a0:99:bd:26:b4:dc:8a:d2:
9c:7b:19:09:e7:ab:55:f4:76:a5:b7:5e:ce:f2:33:46:1f:6d:
84:a4:93:7b:3b:8e:e3:44:e2:a8:84:8a:44:98:21:94:b4:d9:
98:fd:00:31:78:9d:07:cf:eb:3e:bc:d5:e3:25:17:79:7f:16:
f6:52:da:09:68:2e:8f:f1:fb:91:c1:a6:a3:a4:e5:7a:48:43:
9a:cb:82:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:11 2026 by rpki-client