Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
File: fZK2dHUnB1UTaoo8qALKEsisfnc.mft (raw, json)
Hash identifier: FSzEGKSXG1TrhX9gauURZ+DLS9sfeZVkjaF5jq9SWbY=
Subject key identifier: AE:E9:E8:07:2E:E8:11:E2:32:3A:5F:4D:4F:B2:97:30:6C:B2:88:2D
Authority key identifier: 7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
Certificate issuer: /CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Certificate serial: 01A03C3A861282298B38B52BE33470FA4D9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
Manifest number: 1148
Signing time: Wed 26 Aug 2026 04:01:03 +0000
Manifest this update: Wed 26 Aug 2026 04:01:03 +0000
Manifest next update: Thu 27 Aug 2026 04:01:03 +0000
Files and hashes: 1: Q69BGamqP9_WoNnMCdnt1bm0Zuk.asa (hash: vaww5N01JjWWsrnL1Alu05fhe0e30iMVsw9GtNm8F+s=)
2: ecJkAb9L5BLrJG4sRdndteYMNv8.roa (hash: wE2gGvfsffXq2etxDqbfTLucpqrE1NBT6xi3whuXMTQ=)
3: fZK2dHUnB1UTaoo8qALKEsisfnc.crl (hash: 1F18rRilt18D6wi8VdGV26IckU4VifECUAsFBh/ge9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:3a:86:12:82:29:8b:38:b5:2b:e3:34:70:fa:4d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d92b67475270755136a8a3ca802ca12c8ac7e77
Validity
Not Before: Aug 26 04:01:03 2026 GMT
Not After : Aug 27 04:01:03 2026 GMT
Subject: CN=aee9e8072ee811e2323a5f4d4fb297306cb2882d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:86:12:38:13:00:7e:0c:06:2e:99:ae:99:
3a:6d:7f:96:fd:dd:4e:3a:b1:0b:4e:70:be:52:87:
dc:c6:80:e0:46:ee:ae:db:11:a5:64:0c:f1:98:b7:
4b:32:4f:a4:27:58:e4:fa:48:24:c9:fe:89:06:92:
c3:47:28:ff:78:4a:6d:be:e2:23:2e:82:98:2a:c0:
0b:62:c0:f6:d9:84:ef:28:39:40:67:6f:66:7b:87:
8e:28:be:8c:4b:f6:4b:e0:f5:28:e4:b0:62:6c:72:
0c:bf:df:e4:f7:b1:43:f0:85:24:f7:aa:80:80:ad:
d6:ce:98:e8:34:9e:47:5e:59:4f:9d:32:b2:38:11:
d1:10:c8:16:05:e7:10:39:2d:47:5f:50:9a:00:67:
84:a2:0b:6b:13:79:60:36:1a:7e:9b:ca:3e:aa:c0:
b6:e5:ed:a5:3c:1d:f2:0f:c9:00:e3:08:e1:e6:7a:
a5:a8:9b:8e:d0:d5:5d:13:73:e2:14:6d:ae:89:91:
57:11:99:ed:fd:52:2f:5e:16:62:ec:10:41:14:4f:
c6:ba:85:79:66:d3:76:66:ed:03:15:66:14:3e:f7:
91:db:46:f9:95:e8:58:7d:d4:b5:ca:b8:ae:4e:bd:
41:e0:cc:86:0d:da:7d:29:81:c6:43:db:2d:f6:a6:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E9:E8:07:2E:E8:11:E2:32:3A:5F:4D:4F:B2:97:30:6C:B2:88:2D
X509v3 Authority Key Identifier:
keyid:7D:92:B6:74:75:27:07:55:13:6A:8A:3C:A8:02:CA:12:C8:AC:7E:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fZK2dHUnB1UTaoo8qALKEsisfnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/05e814-cac4-41a8-875e-410c671e7577/1/fZK2dHUnB1UTaoo8qALKEsisfnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:44:55:04:b8:4d:2b:03:d3:06:60:82:a2:09:85:58:54:ae:
d6:62:79:f5:3f:58:4b:8a:d2:7b:30:c0:9c:1b:e0:b0:b1:87:
41:23:ca:9e:59:58:92:e1:ba:d7:96:8a:11:9d:f0:61:34:fa:
e0:76:96:d9:10:ac:fe:2c:86:af:c0:bb:1e:0e:24:73:3c:f0:
32:f7:3d:46:a0:ad:c0:d2:dc:f5:60:5c:4e:95:40:51:d9:2f:
28:47:28:8b:92:a9:10:7e:c7:82:33:20:c1:8e:b7:c5:9b:d1:
c3:c7:bc:79:5a:bc:81:86:e0:ac:ff:66:4b:91:a7:42:38:6c:
b6:05:1b:f6:b9:cd:a8:44:14:af:2c:02:48:56:8e:a6:5e:16:
73:26:d0:d9:f5:d1:c5:8f:c1:4f:c5:8f:3b:d7:37:00:f4:a1:
a3:ad:fe:00:ed:b3:e3:92:c8:c8:82:48:1f:4e:d6:df:c1:0d:
32:f2:1a:6c:d9:51:f3:ef:67:4d:c0:0a:1c:73:f2:0e:a0:ed:
55:87:15:79:55:1c:42:29:b9:48:cf:d5:e2:ed:93:81:d9:50:
0d:4a:9f:5e:0e:b8:05:84:5e:6c:6f:f7:a8:74:01:2e:72:9c:
41:bc:ca:d4:c2:41:65:0a:74:19:86:8d:09:8d:8b:33:b8:0f:
ca:4c:dc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 08:05:18 2026 by rpki-client