Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: uAfYecglSbZDG/yCEBgOAIxG/pfuCsNti3FSZvQoQZo=
Subject key identifier: 08:A5:5F:6D:B5:CD:06:B0:CF:47:C2:38:D4:3A:71:52:D6:99:F6:6F
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 019D9A070717205569EA4637048BCACCF2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 06:00:45 +0000
Manifest this update: Fri 17 Apr 2026 06:00:45 +0000
Manifest next update: Sat 18 Apr 2026 06:00:45 +0000
Files and hashes: 1: 1-z0ycl8G0c1rEni_Vsqg-AmZtoM.roa (hash: MhYBDQjEGU5d72clowp4LieZVsR3hSZE1uwIFiaaRFU=)
2: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: ey9NZRJXT/cYyiU/TYd31Ckjl832VmUco9aikkRTpas=)
3: KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa (hash: d0nit13az+nF5T9ApCvkfJ3swzvKAkAdbSMfvb/nFGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:07:17:20:55:69:ea:46:37:04:8b:ca:cc:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Apr 17 06:00:45 2026 GMT
Not After : Apr 18 06:00:45 2026 GMT
Subject: CN=08a55f6db5cd06b0cf47c238d43a7152d699f66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:f6:0a:24:d6:7c:10:6d:1b:78:36:f4:e7:
50:59:f1:5d:90:2e:ed:c2:50:ba:32:0f:2c:ec:fb:
1c:c7:78:20:34:52:91:d8:4d:24:fa:40:46:cf:01:
ef:61:61:38:55:3b:ea:f9:93:c8:b0:2f:df:da:69:
e9:a8:2f:be:c3:31:2a:15:0a:cc:d6:f5:1f:3e:88:
58:24:63:f4:c6:dc:40:cf:31:1c:ee:b2:92:2f:2a:
bd:aa:7c:61:38:60:c5:14:87:1c:13:13:5c:2e:ff:
d5:5a:e8:2f:33:f4:e9:c4:4b:a2:d2:b8:3f:8b:8b:
7f:9a:56:fe:78:6b:ab:59:09:af:7e:0c:dc:99:c2:
4e:1f:1c:10:ac:df:99:72:ce:41:41:76:46:a5:dc:
5e:91:f0:58:60:34:df:5f:64:7a:88:89:1b:36:1b:
85:fb:b5:5b:1e:d6:28:c1:48:be:c8:d6:12:66:6b:
0d:34:9d:b8:23:97:67:2d:1f:4f:af:47:b1:02:9e:
a2:ac:8d:f4:eb:38:31:8e:43:8d:ae:ea:a9:5a:74:
8b:9c:0b:1c:dd:84:f6:a7:40:fa:ca:0e:93:9a:89:
38:f4:fc:f5:31:a9:f6:04:c8:38:4e:a6:ff:51:a7:
b6:d5:87:dd:7b:38:dc:3e:35:0e:80:57:04:ad:8b:
95:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A5:5F:6D:B5:CD:06:B0:CF:47:C2:38:D4:3A:71:52:D6:99:F6:6F
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:f1:0c:a2:86:8a:33:5d:6d:19:f2:3f:e4:ac:d2:be:ca:73:
6c:d7:90:a9:bc:1d:64:51:f9:40:b5:08:57:bd:c2:fe:ad:b9:
fc:c9:33:0e:2a:68:22:9b:e5:32:2a:69:72:92:b9:3a:7d:60:
6b:67:01:ae:bb:6c:2b:f4:c0:0f:21:e8:71:f0:8a:d1:f4:78:
e2:11:5b:bc:ed:ca:70:5d:36:fc:66:a8:fb:ae:41:bc:c2:7a:
1a:ef:f0:3a:10:f8:1b:4c:05:1c:e0:e9:51:3a:21:88:68:cf:
66:c1:9b:c4:1d:2a:9b:f1:e7:8c:2e:b9:95:88:fa:a0:05:99:
87:de:fe:83:60:e2:f7:27:b7:5d:c1:d7:a1:59:2b:d9:01:0e:
35:5d:4c:95:5d:af:83:86:f2:48:45:85:8a:fd:a8:b9:61:91:
80:c8:54:ad:28:91:d2:54:2d:9d:97:85:06:67:30:f8:9c:f4:
59:d8:bd:d0:64:12:a9:8e:bd:49:06:52:bc:69:45:11:e3:d8:
5c:c4:29:3b:2d:fd:55:29:ba:c3:63:ad:39:f8:73:0d:e4:23:
56:3f:8d:77:81:43:e1:2d:76:58:88:6c:2d:33:24:d3:6a:df:
c6:e2:45:47:1d:df:1a:07:6c:b3:b4:08:1f:34:4d:d4:03:4f:
11:66:f0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:50:36 2026 by rpki-client