Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
File: 2Z2Go1I41PLrYMvSFJX4GjV3wac.mft (raw, json)
Hash identifier: IXd12U/SM9XRj0C/xQt+U7BKQisGEbXgOUj1juaoPjQ=
Subject key identifier: DF:22:35:4F:46:CA:8D:04:64:94:0F:8D:9E:CC:B4:0C:2D:CB:A7:61
Authority key identifier: D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
Certificate issuer: /CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Certificate serial: 01A0D45D37A9D4790DD157E3AC46D22D7950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
Manifest number: 09A3
Signing time: Thu 24 Sep 2026 17:01:13 +0000
Manifest this update: Thu 24 Sep 2026 17:01:13 +0000
Manifest next update: Fri 25 Sep 2026 17:01:13 +0000
Files and hashes: 1: 2Z2Go1I41PLrYMvSFJX4GjV3wac.crl (hash: 0hqcbMKfskXHE661sf0eO5t5k0IA5AkoBy3vsgdSP5g=)
2: UbKp8SZhnSoZXvXI5ekDZVISvJ0.roa (hash: Qzbo1YF+7OuM7vfSmLC+YBsyPpRh0JaNoTJmEXBDYdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:37:a9:d4:79:0d:d1:57:e3:ac:46:d2:2d:79:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99d86a35238d4f2eb60cbd21495f81a3577c1a7
Validity
Not Before: Sep 24 17:01:13 2026 GMT
Not After : Sep 25 17:01:13 2026 GMT
Subject: CN=df22354f46ca8d0464940f8d9eccb40c2dcba761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:83:86:a6:dc:cb:b8:73:9d:56:fe:bd:a1:9b:
75:dd:6a:cf:be:be:0a:67:c9:af:10:00:d0:2d:f1:
e3:8e:e9:a7:15:8d:c2:c1:ec:43:6c:db:6b:37:72:
06:b8:cd:e7:f0:62:57:0a:be:eb:c1:10:44:aa:d1:
bf:3e:30:de:94:39:8a:21:cd:2c:8f:10:f9:0a:9a:
58:dd:2b:9b:de:38:52:71:cb:63:4a:ab:09:be:a9:
2b:88:58:92:aa:35:9e:5a:b6:e8:9f:67:54:ae:d7:
39:f9:42:a7:53:c3:3e:b6:b6:78:84:c0:25:c7:23:
b4:d0:d5:3e:60:f3:36:45:eb:1e:24:5d:3f:cd:a8:
ef:5d:0a:7f:34:4d:54:57:07:fe:d7:60:2e:5c:d6:
73:e1:e9:25:77:fa:10:e8:38:6e:0e:58:e7:47:19:
f6:31:d2:0c:8f:c3:df:48:d8:ae:28:e8:57:fd:a5:
76:1a:c7:08:a5:28:f8:79:ce:de:3d:03:d9:72:8f:
eb:36:ad:40:43:2f:7b:c2:e8:2d:03:f2:14:59:d3:
8b:eb:44:49:39:d5:ce:93:61:6d:18:32:c5:3b:78:
24:84:16:c4:c1:a2:70:01:9b:5a:6f:a6:25:fe:ec:
b3:ba:34:3b:e6:26:72:83:8a:8f:01:b3:94:a3:dc:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:22:35:4F:46:CA:8D:04:64:94:0F:8D:9E:CC:B4:0C:2D:CB:A7:61
X509v3 Authority Key Identifier:
keyid:D9:9D:86:A3:52:38:D4:F2:EB:60:CB:D2:14:95:F8:1A:35:77:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Z2Go1I41PLrYMvSFJX4GjV3wac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b50c28-a4a5-4c94-afba-3757d10d889e/1/2Z2Go1I41PLrYMvSFJX4GjV3wac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:c9:a1:f8:6d:5f:64:54:0f:e8:62:77:9b:50:30:1a:5d:b5:
cb:b8:de:af:e0:de:5b:76:3b:99:6d:31:b0:20:3e:ce:59:cc:
20:53:70:5e:11:e0:99:c2:f0:1a:79:5d:40:b8:13:48:fa:b3:
cb:a9:5d:4a:6b:9b:02:59:7a:e2:3b:1e:70:07:a7:68:41:4b:
0a:f2:25:75:43:bb:ee:c0:3d:4f:31:96:3e:c3:bf:1d:a3:05:
87:2a:fd:82:dd:1e:c1:7f:c4:a9:b3:7c:4f:22:81:8d:50:7e:
98:bb:05:ca:9d:37:22:da:55:21:69:25:fb:7c:61:3a:45:88:
29:e5:41:83:f0:1b:9b:e6:2e:cf:f7:8d:fc:1f:28:26:76:22:
c4:b4:f7:9b:4f:a3:b9:6e:4b:c0:a2:ca:1d:72:5f:33:e7:ad:
3a:63:ab:c4:6b:ee:92:73:31:41:3a:dd:a3:33:59:dd:94:37:
1e:89:bf:ce:03:5f:63:df:05:75:1a:e9:4a:da:94:11:1a:92:
18:13:33:63:f8:7a:81:bf:7e:7d:3d:76:fd:8d:81:2b:e0:17:
0a:16:76:34:cc:be:e7:49:11:21:55:1b:e5:90:f2:ee:e8:f9:
c8:16:c3:94:4e:84:7d:44:24:9d:bc:7e:43:0b:b1:d4:15:fa:
03:be:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:40:03 2026 by rpki-client