Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: HLkBtWIgynCapyJLHMcQTbkxyG9rfUMrc8MxeQOTwtE=
Subject key identifier: F1:35:17:84:94:C6:A9:8F:2C:FD:12:B1:4B:73:EE:62:A1:BC:0B:0C
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 019CAC7DBEC856685C9F38B42818083B3609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 03:00:47 +0000
Manifest this update: Mon 02 Mar 2026 03:00:47 +0000
Manifest next update: Tue 03 Mar 2026 03:00:47 +0000
Files and hashes: 1: 1-z0ycl8G0c1rEni_Vsqg-AmZtoM.roa (hash: MhYBDQjEGU5d72clowp4LieZVsR3hSZE1uwIFiaaRFU=)
2: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: iZ+Z6QRNmrhK8npKnkPnzwubNK3IrwwiqEdgJvP5O9k=)
3: KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa (hash: d0nit13az+nF5T9ApCvkfJ3swzvKAkAdbSMfvb/nFGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:be:c8:56:68:5c:9f:38:b4:28:18:08:3b:36:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Mar 2 03:00:47 2026 GMT
Not After : Mar 3 03:00:47 2026 GMT
Subject: CN=f135178494c6a98f2cfd12b14b73ee62a1bc0b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:34:ae:44:78:23:b9:9a:6b:14:ec:e9:b6:e9:
98:f3:08:65:ae:a6:e2:84:58:6f:1c:a1:72:bb:9a:
f6:ce:7a:fb:b0:ba:2c:02:d9:32:c6:4b:a7:75:c9:
aa:63:2d:e0:7e:88:18:f5:b7:44:f4:28:a8:5d:b3:
fd:e1:58:e3:28:02:17:6c:d1:92:fd:8b:46:ae:05:
fb:8c:bc:9b:7e:e7:c7:0d:c8:e8:34:1d:c8:ba:a7:
da:68:e4:8f:85:68:e9:6f:ce:ab:0f:43:54:5e:92:
95:65:71:47:fa:76:1f:eb:ed:b5:40:2a:2d:05:45:
9d:76:04:af:43:28:df:b5:71:e2:2e:b7:eb:47:8b:
2d:bd:41:71:f2:8c:80:a2:e4:61:5a:8b:29:ef:94:
0b:b9:51:4d:53:e3:00:73:cf:67:73:80:03:64:e3:
79:4c:c2:ac:70:23:85:f9:5b:fc:57:98:5f:6f:99:
60:8b:53:5a:2b:95:dc:67:cb:46:5d:3d:ed:6a:1c:
6d:e0:63:6d:a9:25:06:47:28:17:71:6c:57:7f:35:
ae:92:8d:bf:af:8e:e9:bc:07:54:75:c2:78:d1:23:
c2:7a:0e:03:e0:e1:2a:96:2a:af:b6:8a:e2:ef:62:
7e:23:17:be:24:81:ae:d5:cb:3a:b0:54:a6:8d:85:
3b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:35:17:84:94:C6:A9:8F:2C:FD:12:B1:4B:73:EE:62:A1:BC:0B:0C
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:45:96:fe:bf:01:3a:9b:74:78:0a:4f:df:d6:0e:a5:7a:fc:
8e:b6:0b:9a:ad:23:07:85:3a:2f:79:92:5f:9e:8e:d6:eb:21:
72:10:d4:6e:2a:5d:ee:db:bf:0c:59:9c:7b:fa:06:96:fe:3a:
c1:9d:85:23:09:92:51:4f:d6:fe:fb:e1:fe:0e:d7:d8:f1:20:
c7:76:77:85:71:15:c0:43:19:05:80:00:77:a4:cc:91:54:5a:
79:99:33:fa:07:71:a4:22:21:c6:b6:a8:e7:43:0b:14:12:04:
95:72:f7:21:a7:f4:25:55:d4:e1:31:5b:af:82:d5:dd:be:86:
e7:88:0b:37:23:d5:74:6c:0c:d0:06:8f:a4:0f:23:e3:62:83:
e9:32:42:1b:e2:79:62:9c:b4:b0:dd:a6:54:8b:be:85:23:23:
cc:12:28:bc:42:d8:9b:ef:e3:ef:60:7f:40:23:05:8c:8e:88:
71:c9:6e:fb:f4:61:da:de:10:72:a3:9b:b5:28:4c:9d:6f:ca:
69:bb:57:bc:39:e9:d1:7a:ac:3f:c0:ce:c1:d4:47:28:8e:ef:
01:4f:54:9a:e6:24:e1:ef:ad:d9:58:c3:a3:9a:7f:4b:57:1e:
c1:48:9c:de:53:f5:6f:c7:99:a0:7f:34:fb:dc:3a:71:b1:86:
c4:af:ec:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:22:04 2026 by rpki-client