Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
File: mz8p_56nGzw9wfWvBUtBZHyRr5g.mft (raw, json)
Hash identifier: z3VieWMhCRruxjtp2NfYGk6FVCijeG+snSOUP9QG+1k=
Subject key identifier: 08:6B:2F:88:09:78:5D:1E:66:CD:95:4D:32:F5:3A:5F:BC:04:8F:00
Authority key identifier: 9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
Certificate issuer: /CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Certificate serial: 01A13D1381A68512B4AA8AF0B1A247E18BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
Manifest number: 1AA9
Signing time: Thu 15 Oct 2026 01:00:50 +0000
Manifest this update: Thu 15 Oct 2026 01:00:50 +0000
Manifest next update: Fri 16 Oct 2026 01:00:50 +0000
Files and hashes: 1: 8ZLVcQSbNPNVDWuXCmGCr0G7x1M.roa (hash: R8MpU4UMaGBrjPkl0XC57+1S995gBZY7N8nvDLObasM=)
2: mz8p_56nGzw9wfWvBUtBZHyRr5g.crl (hash: aCisze6IfdLtQUE/8WF9aCVJ4aPbx0ljoTOkhtIArOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:81:a6:85:12:b4:aa:8a:f0:b1:a2:47:e1:8b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b3f29ff9ea71b3c3dc1f5af054b41647c91af98
Validity
Not Before: Oct 15 01:00:50 2026 GMT
Not After : Oct 16 01:00:50 2026 GMT
Subject: CN=086b2f8809785d1e66cd954d32f53a5fbc048f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:99:f7:fd:7d:de:a6:be:31:37:74:f0:2a:1a:
d1:fa:c1:f9:17:d3:49:35:71:d9:82:22:dc:f1:53:
38:57:f4:36:0e:0b:e8:15:75:2f:d6:ae:df:ca:f9:
2f:f9:c8:48:12:98:b6:bf:8c:67:0e:95:3d:40:99:
eb:13:90:0a:79:45:e4:7e:bb:36:76:a7:19:6e:4b:
39:da:46:fe:f1:37:f0:bb:44:33:05:43:59:95:dd:
b3:f7:c0:bb:a4:74:b4:fe:72:55:ea:eb:8d:65:c1:
8e:4b:e5:d9:28:64:fa:00:53:88:d4:9b:d0:94:d9:
54:05:05:22:8b:f7:b9:c6:30:9a:85:10:bb:28:a5:
89:04:54:e2:5b:d9:a9:7f:99:a6:98:bd:ed:c8:3b:
ee:0a:d5:2a:7b:9b:ed:b3:82:5a:bd:ce:f0:45:14:
56:ad:2d:af:6f:c7:26:79:f5:4f:33:ff:8c:4e:96:
b4:f9:d5:65:b1:61:9d:88:43:40:b9:82:28:d0:73:
cb:0b:01:31:d7:69:09:68:a5:3d:8a:46:51:68:dd:
d6:e8:10:12:d6:31:f1:c7:c3:59:ca:23:17:cb:50:
13:cb:a8:eb:62:75:2d:b0:2e:0a:4c:98:79:81:a5:
3d:97:65:52:ee:2b:af:59:1d:9d:ea:0c:7f:e8:4f:
05:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6B:2F:88:09:78:5D:1E:66:CD:95:4D:32:F5:3A:5F:BC:04:8F:00
X509v3 Authority Key Identifier:
keyid:9B:3F:29:FF:9E:A7:1B:3C:3D:C1:F5:AF:05:4B:41:64:7C:91:AF:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mz8p_56nGzw9wfWvBUtBZHyRr5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1aa2d8-6106-4808-8c97-f46224b0d161/1/mz8p_56nGzw9wfWvBUtBZHyRr5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:b9:f1:cc:b3:44:a1:94:f0:3d:2b:fc:ea:c2:15:9e:3e:e0:
b9:86:61:7a:ee:74:68:75:5a:44:c9:3c:a8:22:7b:e1:3a:9d:
d2:77:8a:1a:1f:44:b8:13:93:a4:94:27:a3:80:e9:09:4c:cb:
ca:c6:1e:2d:cf:8b:89:39:0f:99:e4:6b:c7:5f:6b:e4:ae:49:
a6:13:0d:2c:ea:59:68:f4:6e:2f:3e:27:4b:79:a1:c8:51:d1:
9d:48:cc:2b:c2:a0:1f:a8:51:3b:17:ff:8c:ba:ad:a0:fa:35:
7b:4e:20:75:a1:7b:95:0b:07:04:e4:4d:c4:58:46:be:17:5b:
fd:58:bc:50:49:f0:ef:0d:fd:ee:fa:b8:d4:62:0b:66:84:e4:
be:36:d1:55:05:66:85:64:0c:6e:ef:c9:09:3c:b7:f8:e4:c2:
a3:47:c5:d8:a2:a6:5e:a9:a1:6d:64:8f:95:83:6f:92:e2:1b:
05:c9:fd:ef:07:da:d7:d7:59:62:6d:77:19:55:bc:a3:1b:a4:
e4:b8:2c:72:e8:98:1b:4e:de:3b:42:de:68:50:d0:18:25:7e:
bc:d9:cc:c4:05:0c:ae:c7:be:c1:02:1c:33:4a:b9:c6:7e:ce:
26:77:e9:9d:80:e9:ac:a4:46:b0:0d:86:1b:8a:b8:76:41:68:
7f:36:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:04:36 2026 by rpki-client