
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
File: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft (raw, json)
Hash identifier: mW07xfA3Nm3g66X7/jeWDJ+W5fs/2L6GC1ad8oeYsLs=
Subject key identifier: 6F:DE:E4:D7:0A:2F:9A:17:8F:C6:76:FE:6B:5C:3C:39:77:84:27:E7
Authority key identifier: D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
Certificate issuer: /CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Certificate serial: 01A0CC35BBDC29E077FAA4846113A6B5FE22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
Manifest number: 0B1F
Signing time: Wed 23 Sep 2026 03:01:08 +0000
Manifest this update: Wed 23 Sep 2026 03:01:08 +0000
Manifest next update: Thu 24 Sep 2026 03:01:08 +0000
Files and hashes: 1: 2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl (hash: ltvQjlOO0l/GfRL3in2cGSSOFxOVSE/r1dui24mGUy8=)
2: 48OS4sWYglwtZBn1YxiPqc26nTU.roa (hash: NBM10gWvuZSa38kRQAx40WjX3amxqFeb96LnMyUj85Q=)
3: HUZvsXoFqmpwitLw4aku7m5jYa8.roa (hash: rhpAJ7/RvlTCzRrbypi+sM57yT9OZ8RJ46KD4H90XuY=)
4: Rl0xX2L5u9e-WU3LxVTHfDCZoEQ.roa (hash: iB5ApjU6OfFGOZU2O/uqHAaYYGIEkIhRygeaclVc054=)
5: hih4fzkJ3O9yEk3BE5UpAZ6h-8Q.roa (hash: R7mk0homAMVaYBl/kyf6p+7Cu/DPi0srKaEKzzxe+Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:bb:dc:29:e0:77:fa:a4:84:61:13:a6:b5:fe:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d99a47cdc89f46342f90b0da3c30d9ec5fd63238
Validity
Not Before: Sep 23 03:01:08 2026 GMT
Not After : Sep 24 03:01:08 2026 GMT
Subject: CN=6fdee4d70a2f9a178fc676fe6b5c3c39778427e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:a9:26:01:1c:bd:de:45:c7:7d:db:fb:52:
d0:b2:83:f0:ba:29:ff:94:b7:6c:aa:d9:bb:f3:3d:
4e:d4:69:31:ee:8e:e8:02:9b:93:41:22:cc:01:7f:
e6:bc:6a:a6:16:a2:9c:6e:4a:54:ca:64:2f:83:28:
4a:0f:0e:17:db:c2:25:26:c4:f9:44:1b:d3:e9:cf:
79:f7:2a:f9:c5:78:84:10:8e:f0:ae:f1:49:d3:8f:
b7:3a:a2:d7:86:7e:4b:74:72:59:92:08:e2:1d:5a:
d6:2c:5f:9c:6e:b7:f4:a0:19:4b:f9:0a:73:25:1e:
b5:89:65:2a:4d:ed:a1:4c:96:51:49:c5:4d:bd:b4:
b8:9b:21:af:08:18:c0:35:58:d2:7b:7a:28:61:21:
bd:9c:59:a2:f0:40:b1:a9:b7:55:54:ea:56:bc:3d:
37:de:89:12:d8:3b:d4:be:ba:5f:c0:91:f2:90:32:
fd:21:3e:11:52:47:da:41:34:d6:b1:86:eb:b2:77:
f9:45:35:26:2e:4a:0b:2a:0d:4e:7f:2a:44:37:d6:
3a:f9:58:1b:8c:12:63:8c:52:48:7a:c9:f8:72:65:
79:68:8f:6b:f8:8a:8e:94:2d:39:e7:5d:2b:b7:b7:
4c:6f:4d:46:87:c5:48:e9:2a:2a:c6:01:5a:ea:1f:
f0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DE:E4:D7:0A:2F:9A:17:8F:C6:76:FE:6B:5C:3C:39:77:84:27:E7
X509v3 Authority Key Identifier:
keyid:D9:9A:47:CD:C8:9F:46:34:2F:90:B0:DA:3C:30:D9:EC:5F:D6:32:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d30eef-495e-43bd-919c-a2a0e2db49d0/1/2ZpHzcifRjQvkLDaPDDZ7F_WMjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:b3:df:b9:ee:18:9b:b4:c6:af:40:85:0c:eb:f8:df:2f:cc:
a7:2f:d7:b5:a7:a2:54:d9:0a:df:a4:79:58:dc:0f:46:3f:13:
74:bc:b3:0b:21:79:4c:cd:46:bb:01:29:39:93:10:fa:86:4f:
06:ee:50:aa:85:3b:ed:44:0d:5c:ba:04:54:da:46:b9:e8:ce:
fa:e4:5c:f7:5b:ab:32:6f:c0:a7:34:c6:8b:d3:8e:31:ec:d3:
f8:b0:25:75:b0:28:04:99:f8:66:b0:e7:a1:d1:1c:93:ba:d8:
71:c6:17:db:20:3b:42:48:6c:f8:a7:a4:2a:98:ae:e3:57:a8:
9f:5e:79:5f:42:e7:9c:d5:51:d7:58:d5:57:55:32:37:3e:1c:
04:7b:8f:45:68:c3:1e:12:2a:ef:36:b4:ce:d1:9e:c9:d3:87:
ba:72:50:bb:6e:11:3b:62:f4:52:d9:69:f2:f8:7b:0c:bd:75:
38:59:ae:d0:d7:18:e0:f2:b0:d3:97:d1:c5:77:10:07:24:7e:
15:da:7d:17:f5:6e:a0:3f:36:3d:a6:3f:45:37:55:9e:9c:0b:
d2:d8:a8:90:4f:e9:73:9b:ee:59:20:0a:d8:58:28:6d:de:41:
cb:1a:c5:f1:6b:f5:61:d1:6b:96:d6:43:3d:21:5f:41:3d:aa:
e0:27:2e:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNbvcKeB3+qSEYROmtf4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OWE0N2NkYzg5ZjQ2MzQyZjkwYjBkYTNjMzBkOWVjNWZk
NjMyMzgwHhcNMjYwOTIzMDMwMTA4WhcNMjYwOTI0MDMwMTA4WjAzMTEwLwYDVQQD
Eyg2ZmRlZTRkNzBhMmY5YTE3OGZjNjc2ZmU2YjVjM2MzOTc3ODQyN2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmSpJgEcvd5Fx33b+1LQsoPwuin/
lLdsqtm78z1O1Gkx7o7oApuTQSLMAX/mvGqmFqKcbkpUymQvgyhKDw4X28IlJsT5
RBvT6c959yr5xXiEEI7wrvFJ04+3OqLXhn5LdHJZkgjiHVrWLF+cbrf0oBlL+Qpz
JR61iWUqTe2hTJZRScVNvbS4myGvCBjANVjSe3ooYSG9nFmi8ECxqbdVVOpWvD03
3okS2DvUvrpfwJHykDL9IT4RUkfaQTTWsYbrsnf5RTUmLkoLKg1OfypEN9Y6+Vgb
jBJjjFJIesn4cmV5aI9r+IqOlC05510rt7dMb01Gh8VI6SoqxgFa6h/wHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/e5NcKL5oXj8Z2/mtcPDl3hCfnMB8GA1UdIwQY
MBaAFNmaR83In0Y0L5Cw2jww2exf1jI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlpwSHpjaWZSalF2a0xEYVBERFo3Rl9XTWpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kMzBlZWYtNDk1ZS00M2JkLTkxOWMt
YTJhMGUyZGI0OWQwLzEvMlpwSHpjaWZSalF2a0xEYVBERFo3Rl9XTWpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9kMzBlZWYtNDk1ZS00M2JkLTkxOWMtYTJhMGUyZGI0OWQw
LzEvMlpwSHpjaWZSalF2a0xEYVBERFo3Rl9XTWpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYLPfue4Y
m7TGr0CFDOv43y/Mpy/XtaeiVNkK36R5WNwPRj8TdLyzCyF5TM1GuwEpOZMQ+oZP
Bu5QqoU77UQNXLoEVNpGuejO+uRc91urMm/ApzTGi9OOMezT+LAldbAoBJn4ZrDn
odEck7rYccYX2yA7Qkhs+KekKpiu41eon155X0LnnNVR11jVV1UyNz4cBHuPRWjD
HhIq7za0ztGeydOHunJQu24RO2L0Utlp8vh7DL11OFmu0NcY4PKw05fRxXcQByR+
Fdp9F/VuoD82PaY/RTdVnpwL0tiokE/pc5vuWSAK2Fgobd5ByxrF8Wv1YdFrltZD
PSFfQT2q4CcuQw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:14:44 2026 by rpki-client