Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
File: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json)
Hash identifier: rWQ/hjErvC2N4+AE+2y3GGJgy0IkrbOiOmKq+QquLj8=
Subject key identifier: 12:B8:AD:2D:D3:66:EA:AC:B1:AA:19:3C:72:C9:B9:B7:89:03:57:43
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial: 019CAAC6A63B70D6428851651C7E3BEB6214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
Manifest number: 1243
Signing time: Sun 01 Mar 2026 19:01:11 +0000
Manifest this update: Sun 01 Mar 2026 19:01:11 +0000
Manifest next update: Mon 02 Mar 2026 19:01:11 +0000
Files and hashes: 1: 07j9_n6AVXDopfWR8BaInw48NMc.roa (hash: WakDlcBYUCEpu1IOY+fCJocQGM48pGFR8nk3j6rRYQM=)
2: 2agacPd_HSeo5iWC2CnXaC2xZe8.roa (hash: YHI/nftFWmJRoE6pDGv7uv3rVMoTsI26akPX3i6AVgc=)
3: 3tDgZldpwVKudiZgfUwgKb4zld4.roa (hash: kPvU5pGV0e7Ywu28DoML3GY9UgWxXdJkZJTnwzyFHKc=)
4: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: AZIFgO9EV9YuP2kYcIKEWsjPiDc5k7nWdD3Vsq58dKs=)
5: bMpmoetZ6thuISe4pMSH_gzG5_0.roa (hash: Z0iA9uRqcsuyxbdf8SH9tPOJ9Xmro4LCj/1NhGY5J7c=)
6: ioNRHlUjrXZXGwM3yHXyNTZdMx0.roa (hash: BWD5RHei2js3p7ixFJ0GF6nZuII80HgQOTS+8kZsqzo=)
7: pXJZQxbSBDqofTDE9vannCeqPHU.roa (hash: ukAqHZV/xMM8uN5SZsafy/GsPc0EqLT+NakATV+Zg88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:a6:3b:70:d6:42:88:51:65:1c:7e:3b:eb:62:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Validity
Not Before: Mar 1 19:01:11 2026 GMT
Not After : Mar 2 19:01:11 2026 GMT
Subject: CN=12b8ad2dd366eaacb1aa193c72c9b9b789035743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9f:eb:a7:75:7f:bd:60:d5:1d:d3:9c:c2:6a:
82:84:3f:bd:b5:86:27:f9:34:a7:7b:92:7d:1d:01:
4c:32:d9:3b:95:a2:f7:8f:c7:ae:69:5f:60:51:84:
f4:7a:ba:00:25:b7:b4:21:07:df:d8:a9:2e:d1:e9:
10:3b:10:91:30:1a:a5:1e:b0:34:a5:b7:9a:2f:50:
4d:81:bd:39:a2:0e:1a:12:81:06:ec:07:55:db:27:
d0:82:89:14:25:2b:75:a7:e8:5c:95:0a:f5:db:ec:
74:7e:de:ed:46:45:62:c1:7e:6b:3a:c3:22:ce:bb:
ad:13:0a:2a:09:ff:50:36:0d:4f:dc:ad:4e:80:e7:
5a:a0:58:be:9a:cf:06:22:35:b0:5f:27:05:21:c1:
94:4a:13:b8:e2:be:b2:cf:c4:36:1c:6d:bf:1c:69:
d9:81:f2:24:1e:54:31:6e:bf:51:cf:67:2b:82:37:
6c:c1:57:97:1b:dc:fb:84:5a:ac:52:b2:95:61:ec:
62:bb:e8:f8:a9:a1:ba:82:9d:f1:ae:aa:31:1a:a2:
2d:97:e2:c3:dd:f1:26:ed:87:97:f9:d3:99:fe:54:
65:aa:08:aa:32:b4:2f:bb:84:ef:9b:42:3c:7c:67:
c7:bf:62:3e:3d:4f:cd:2c:ac:e5:ab:6a:63:ff:1e:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B8:AD:2D:D3:66:EA:AC:B1:AA:19:3C:72:C9:B9:B7:89:03:57:43
X509v3 Authority Key Identifier:
keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:35:f0:d0:1a:ae:2c:f0:76:38:68:32:98:62:d9:1f:b2:ad:
34:58:e2:62:bc:f0:ea:bd:87:a3:11:a7:92:07:eb:1f:4a:f9:
d6:f3:80:6c:28:97:c1:70:ae:e8:b5:e6:d0:10:df:ba:e7:c5:
29:5f:0c:b6:20:38:55:10:56:19:4e:f2:22:ff:70:8a:31:11:
43:0c:42:14:aa:14:ef:f8:0c:d7:70:9d:fe:9c:e6:66:21:3a:
85:41:2b:bb:1c:3e:85:06:87:12:1a:b5:6a:8d:97:8c:01:cc:
bc:66:12:37:36:13:41:90:58:29:12:4c:b0:d5:ac:18:d3:6d:
92:94:d5:53:95:af:37:8f:c8:cc:9e:39:7f:51:e8:ee:a5:94:
34:10:29:ca:18:00:81:52:73:e7:00:d5:a5:be:da:ed:65:08:
eb:44:e6:ee:86:e9:fe:1d:40:c0:c4:a6:b7:d9:9d:ab:cd:48:
fd:e0:76:f5:8d:7e:90:ab:66:83:8b:17:f2:aa:50:28:c2:4c:
3b:69:a7:8a:d6:ff:0b:2a:46:34:2e:ae:b7:5c:05:61:38:2e:
68:24:f8:05:78:5d:8d:76:2e:da:5b:28:60:3d:a8:61:03:02:
b6:b7:1a:41:db:2b:28:8b:3a:a4:e5:05:36:17:16:9c:76:0d:
6f:7e:76:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxqY7cNZCiFFlHH4762IUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOTkxOGVkMjE5ZTdkM2Q5MjI3MzdlY2RjNzMxZjBjYTYw
YTY4YjgwHhcNMjYwMzAxMTkwMTExWhcNMjYwMzAyMTkwMTExWjAzMTEwLwYDVQQD
EygxMmI4YWQyZGQzNjZlYWFjYjFhYTE5M2M3MmM5YjliNzg5MDM1NzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p/rp3V/vWDVHdOcwmqChD+9tYYn
+TSne5J9HQFMMtk7laL3j8euaV9gUYT0eroAJbe0IQff2Kku0ekQOxCRMBqlHrA0
pbeaL1BNgb05og4aEoEG7AdV2yfQgokUJSt1p+hclQr12+x0ft7tRkViwX5rOsMi
zrutEwoqCf9QNg1P3K1OgOdaoFi+ms8GIjWwXycFIcGUShO44r6yz8Q2HG2/HGnZ
gfIkHlQxbr9Rz2crgjdswVeXG9z7hFqsUrKVYexiu+j4qaG6gp3xrqoxGqItl+LD
3fEm7YeX+dOZ/lRlqgiqMrQvu4Tvm0I8fGfHv2I+PU/NLKzlq2pj/x5npwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBK4rS3TZuqssaoZPHLJubeJA1dDMB8GA1UdIwQY
MBaAFPGZGO0hnn09kic37NxzHwymCmi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzIt
MzEzZWZlYjBiMTlkLzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzItMzEzZWZlYjBiMTlk
LzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzXw0Bqu
LPB2OGgymGLZH7KtNFjiYrzw6r2HoxGnkgfrH0r51vOAbCiXwXCu6LXm0BDfuufF
KV8MtiA4VRBWGU7yIv9wijERQwxCFKoU7/gM13Cd/pzmZiE6hUEruxw+hQaHEhq1
ao2XjAHMvGYSNzYTQZBYKRJMsNWsGNNtkpTVU5WvN4/IzJ45f1Ho7qWUNBApyhgA
gVJz5wDVpb7a7WUI60Tm7obp/h1AwMSmt9mdq81I/eB29Y1+kKtmg4sX8qpQKMJM
O2mnitb/CypGNC6ut1wFYTguaCT4BXhdjXYu2lsoYD2oYQMCtrcaQdsrKIs6pOUF
NhcWnHYNb352Sw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:53 2026 by rpki-client