Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: g4FMb9fSq+zXgcRVvFXBTToQZGmcyPgtikxuOXYYHBU=
Subject key identifier: 78:CE:BC:44:CB:2D:8A:46:0E:2E:55:3B:9B:AB:00:4C:4F:E7:E8:5A
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 01A138FFE252387130546CA17920C8370D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 1AA1
Signing time: Wed 14 Oct 2026 06:00:56 +0000
Manifest this update: Wed 14 Oct 2026 06:00:56 +0000
Manifest next update: Thu 15 Oct 2026 06:00:56 +0000
Files and hashes: 1: 1-z0ycl8G0c1rEni_Vsqg-AmZtoM.roa (hash: MhYBDQjEGU5d72clowp4LieZVsR3hSZE1uwIFiaaRFU=)
2: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: d3+heJtMkATiF/0faYMpLEL1i/j7crtjPEFE+jmZvXY=)
3: KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa (hash: d0nit13az+nF5T9ApCvkfJ3swzvKAkAdbSMfvb/nFGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:ff:e2:52:38:71:30:54:6c:a1:79:20:c8:37:0d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Oct 14 06:00:56 2026 GMT
Not After : Oct 15 06:00:56 2026 GMT
Subject: CN=78cebc44cb2d8a460e2e553b9bab004c4fe7e85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c2:b9:cc:c8:50:70:13:d8:b2:85:95:34:82:
c5:b9:a3:b5:8f:84:5d:84:05:ff:8e:8e:29:16:2e:
fe:e0:f5:fd:b7:2e:9b:4a:4c:7c:50:7b:58:4f:a4:
17:6e:ea:4c:8a:ff:fe:42:39:0a:10:3a:06:59:72:
66:4a:5e:2f:ec:8f:2d:23:6f:6c:e5:e2:c5:be:3d:
2f:be:93:5b:fb:7e:16:8f:45:eb:43:84:16:5c:14:
5e:cf:79:f2:a8:a2:78:3a:73:81:49:3d:0a:3e:0e:
12:24:95:ea:31:78:a2:8e:04:06:c3:d7:62:2f:1b:
bb:93:ac:8d:66:f6:76:2f:57:7e:ed:68:65:48:77:
26:98:27:97:04:51:35:70:10:1a:7f:94:c9:bf:a7:
04:d1:6d:44:fa:42:39:75:13:76:c1:cf:26:33:63:
59:4a:a0:5a:c0:d3:57:78:c8:0a:12:4f:dc:c9:08:
be:c7:62:7c:8f:9d:bd:c2:9b:00:16:f5:b9:91:ce:
e1:69:a5:9c:e0:98:52:ff:c7:fa:2a:b4:fc:ce:ff:
18:67:69:18:35:aa:04:5b:42:9b:7e:2e:90:87:85:
aa:8b:dd:52:bc:2a:ed:a7:58:01:ee:55:a2:f7:43:
6a:0a:66:99:dd:86:aa:1d:d5:20:38:6f:6c:ce:7e:
38:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:CE:BC:44:CB:2D:8A:46:0E:2E:55:3B:9B:AB:00:4C:4F:E7:E8:5A
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:8a:0d:50:bd:9b:2c:ba:f6:08:40:dd:e9:24:c9:3a:d8:fa:
66:53:60:c9:be:6a:8d:f1:85:e8:18:5b:c5:f4:c3:3b:b2:6d:
38:72:69:07:9e:f6:9a:65:b1:1d:ad:9f:93:96:8b:1b:33:9c:
bd:e5:a3:7f:da:3d:1f:b4:7c:54:6b:ba:b5:3e:de:d9:06:d2:
56:01:4a:b0:3a:7d:9b:a9:0e:2a:eb:02:96:95:25:6b:17:20:
0b:7b:96:63:01:27:a6:b3:3b:a6:8e:2a:08:04:5a:83:3c:bc:
86:c5:08:6b:d9:61:4d:ba:fb:3c:36:49:2f:6b:69:ab:44:94:
e5:2a:1e:5e:e1:c7:04:cd:b3:40:19:e2:d9:13:32:bb:d5:7e:
37:91:3d:9a:93:78:8b:4d:57:b2:96:45:d1:8f:63:d7:63:42:
05:39:0c:0e:11:7e:ea:16:f4:99:6b:ac:0c:05:33:0f:13:4a:
df:f4:a2:d9:53:a1:7c:0d:e3:1a:bb:a4:9d:33:c9:b5:3c:62:
16:21:2b:5e:7e:a4:e4:70:06:d7:60:87:b9:7a:4d:0d:7d:23:
2d:6c:03:bd:70:7f:42:9a:ff:8d:b1:04:57:9d:e3:31:43:ba:
1d:e5:e7:be:ba:1a:59:47:38:d9:88:86:cb:dc:3b:04:09:26:
c8:97:3e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:28:37 2026 by rpki-client