Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
File: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json)
Hash identifier: bTicIa73FyPEOH/9JFu8xTbZgUSyx2cQpmL9kwHnOYY=
Subject key identifier: A1:27:8A:89:CF:E3:BA:02:43:89:9A:01:96:20:2B:89:58:31:C3:88
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial: 019D352CCCA840BB91C338E104223EDFDB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
Manifest number: 128C
Signing time: Sat 28 Mar 2026 16:00:21 +0000
Manifest this update: Sat 28 Mar 2026 16:00:21 +0000
Manifest next update: Sun 29 Mar 2026 16:00:21 +0000
Files and hashes: 1: 07j9_n6AVXDopfWR8BaInw48NMc.roa (hash: WakDlcBYUCEpu1IOY+fCJocQGM48pGFR8nk3j6rRYQM=)
2: 2agacPd_HSeo5iWC2CnXaC2xZe8.roa (hash: YHI/nftFWmJRoE6pDGv7uv3rVMoTsI26akPX3i6AVgc=)
3: 3tDgZldpwVKudiZgfUwgKb4zld4.roa (hash: kPvU5pGV0e7Ywu28DoML3GY9UgWxXdJkZJTnwzyFHKc=)
4: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: JSajeNrVYfeAnmkbfJONxqiFB672MWHUhxET5CDVf6g=)
5: bMpmoetZ6thuISe4pMSH_gzG5_0.roa (hash: Z0iA9uRqcsuyxbdf8SH9tPOJ9Xmro4LCj/1NhGY5J7c=)
6: eB4uOT6yIJ90-7WQMq3rRaWige0.roa (hash: 0bN90UYrI/jqLeHoVlUJEcwKG5W/ZPrQB/kL7FwjFBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 16:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:2c:cc:a8:40:bb:91:c3:38:e1:04:22:3e:df:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Validity
Not Before: Mar 28 16:00:21 2026 GMT
Not After : Mar 29 16:00:21 2026 GMT
Subject: CN=a1278a89cfe3ba0243899a0196202b895831c388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:07:c9:ac:9a:32:32:0c:99:90:23:80:46:87:
8d:c3:4a:b4:c5:0a:dd:c0:48:1b:9e:db:bb:c3:04:
e7:b8:6a:10:05:0a:dc:64:41:2c:a8:d9:d3:fb:81:
4b:ae:c2:6c:2b:04:0e:e3:76:61:2f:f5:40:a6:eb:
35:da:e2:58:d3:89:78:f6:13:63:eb:40:ef:fc:d1:
85:d5:dc:fc:78:00:ce:d6:a0:b9:4b:47:e1:73:f0:
bb:7a:42:a2:2c:9d:93:3b:66:71:b9:6e:5d:35:6f:
64:fc:93:d9:ba:15:6a:1d:fa:b4:44:1f:3d:d9:13:
ef:d6:50:49:20:35:9b:61:82:01:f8:f1:f3:6b:16:
4b:ec:a4:3b:29:62:a7:89:e2:e0:16:cd:54:3f:85:
db:49:41:07:29:05:23:c5:9f:13:3b:56:06:66:bf:
7c:75:98:0e:72:99:2b:db:bb:7e:64:56:1d:d2:36:
65:44:ad:2c:cd:80:31:a3:cd:f4:ac:14:64:38:c9:
2a:dc:62:16:d7:51:db:c2:3f:44:53:28:6f:16:53:
6c:db:68:66:fe:85:35:85:c6:4f:86:c2:82:e7:7d:
0d:a3:00:f0:93:3d:09:f4:a0:3f:cb:c1:38:b9:94:
57:1e:df:58:5b:3f:82:ad:e7:58:8e:13:e0:ed:2a:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:27:8A:89:CF:E3:BA:02:43:89:9A:01:96:20:2B:89:58:31:C3:88
X509v3 Authority Key Identifier:
keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:3a:7b:b8:46:6e:17:a5:c4:52:4a:b8:a2:b2:44:c4:fb:0d:
0f:79:1f:47:15:09:65:e6:91:d1:c3:78:9e:b2:b7:38:5d:fc:
82:ec:24:90:6e:0a:70:4b:09:08:3b:b2:b9:6a:ed:3e:ee:24:
e7:33:cc:35:12:e8:ce:8d:95:e4:9b:4e:c7:76:d8:2b:81:06:
77:e8:8c:7c:e7:03:11:24:08:bd:86:c1:e9:93:80:6f:3c:be:
0d:a5:1b:84:e4:cd:de:cd:99:40:aa:78:f7:3d:de:f0:96:03:
ca:b8:26:bb:3d:c2:d6:ad:b4:aa:c3:89:cb:2d:02:61:61:d4:
c1:fe:4e:34:58:a5:3d:e0:ac:25:3d:45:ca:2b:59:87:27:24:
a2:38:2b:30:0e:be:84:0b:a6:12:e9:db:35:77:18:bc:01:5a:
50:2f:69:91:b9:3e:7b:aa:66:d9:2a:23:80:27:d7:5e:8b:de:
b4:fc:f4:35:69:42:41:7c:b5:03:43:66:37:1c:e7:b9:ab:75:
9b:cb:4a:ae:a6:ad:c2:85:f6:22:49:c1:f4:1d:b1:69:5e:85:
3b:0d:c7:6f:a2:f3:58:8b:20:30:43:11:30:02:61:df:ab:6b:
d4:1f:de:55:64:3f:39:b8:b4:be:63:cd:b5:db:d4:65:37:08:
ca:6b:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 01:47:34 2026 by rpki-client