Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier: vvH9HjFqhdYqFZEw0DAS6hiVhfNCNgZhUfDfNzrmOgc=
Subject key identifier: 9E:DE:43:F1:5C:C6:D3:7C:D7:06:16:DF:28:65:9C:46:44:B6:1D:F2
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial: 019CABD9F6BDDC1577E3B931BC18289D152B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:01:54 +0000
Manifest this update: Mon 02 Mar 2026 00:01:54 +0000
Manifest next update: Tue 03 Mar 2026 00:01:54 +0000
Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: 4uSQF9PsiZr8AH9buPzS5KuZTcvAuWBI5RDLbv3YAZQ=)
2: tEiznCRaCEXuSiqwVe-1WIaGDGU.roa (hash: pOXbDIJbSmZy8KsnI5uOSVFdRgYoW3ngwx0TRZi2I7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f6:bd:dc:15:77:e3:b9:31:bc:18:28:9d:15:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Validity
Not Before: Mar 2 00:01:54 2026 GMT
Not After : Mar 3 00:01:54 2026 GMT
Subject: CN=9ede43f15cc6d37cd70616df28659c4644b61df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:80:db:30:04:e5:df:a0:2b:dc:d5:14:6b:
c8:56:ec:96:a9:dd:77:ca:32:24:a1:85:bd:b1:4c:
7d:99:76:f9:ba:1f:04:bc:2d:89:c0:61:e5:1c:96:
6e:8d:0c:3a:ff:88:56:26:b6:a9:8e:e6:93:69:3a:
d3:d9:74:63:22:7e:5d:83:32:1c:cd:1f:f0:8b:ec:
0b:6a:3b:67:2e:cf:e9:7d:45:94:6b:27:76:00:16:
78:18:ae:42:9f:f3:17:c8:8b:95:fb:03:f3:68:87:
71:29:fb:c2:7f:76:46:3c:a9:0d:b7:9e:42:0b:b9:
ef:6c:77:18:9c:90:79:46:b7:9c:b0:fa:f6:6e:a5:
43:55:e4:02:a1:cf:48:43:08:96:ca:c2:de:d7:7e:
ef:e0:1c:12:20:90:75:f3:9b:38:fa:4e:5e:62:1e:
29:9f:d8:6a:c2:a4:5d:e4:2b:a2:13:6b:53:86:b4:
ff:26:69:fc:55:75:0c:6f:a5:ca:f0:5b:f3:46:98:
20:3b:dd:04:f5:0c:94:8e:dd:ee:ad:ec:a2:f0:0b:
d4:b7:88:1b:80:4c:9f:f1:ea:08:86:4a:64:df:50:
c2:d5:97:bc:30:23:18:5d:d7:eb:7b:c6:d2:05:0f:
ee:57:90:38:c9:74:76:a1:0d:57:ed:0d:2f:c4:e5:
80:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DE:43:F1:5C:C6:D3:7C:D7:06:16:DF:28:65:9C:46:44:B6:1D:F2
X509v3 Authority Key Identifier:
keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b9:63:a7:49:89:b0:ce:ff:c5:4c:eb:b3:1b:ee:63:1d:86:
50:58:a2:d5:4d:8c:53:62:2e:53:c1:bd:2c:90:24:7f:c0:8d:
be:f8:7d:5e:a1:42:1a:c1:69:40:d5:53:ba:1c:1e:29:ab:27:
c6:a4:7e:ec:de:60:d7:0b:b0:c3:e6:59:6a:7e:a4:6e:0e:87:
dd:43:21:25:05:6d:02:fc:6c:c0:0c:7f:eb:f8:99:91:3a:92:
fb:c1:0c:b8:b6:33:9e:26:4c:c2:12:a0:65:ad:a3:b7:e7:66:
89:63:8e:8a:cc:cc:1f:6c:6c:36:ca:15:88:32:7f:9f:a3:8a:
3e:8d:0e:dd:0f:97:2d:ce:7b:e0:ac:55:59:e1:bc:d2:3b:f1:
ee:cd:9d:e0:65:95:fc:b5:0a:73:cb:6a:fc:68:40:2d:a2:c4:
8c:ad:77:f9:96:8f:11:82:88:27:46:b5:e8:da:da:5e:90:5a:
9c:89:16:8a:67:90:43:bd:8b:aa:6e:b2:7f:c4:68:08:db:04:
9e:7a:7a:f0:82:6a:04:eb:f8:d2:2f:89:0a:e5:1c:8f:ea:7a:
9c:f6:3d:30:fd:d8:5d:b7:9c:44:26:46:03:5e:e0:f3:31:a3:
f9:6a:ea:cf:49:f6:0c:a0:21:f6:89:1b:7a:d6:73:e8:03:0e:
12:98:27:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:45 2026 by rpki-client