Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier: VlxOtimikQwmAhh+P5+ryjYcPuDcYC+enuydPqx3Lzg=
Subject key identifier: 05:08:7D:B8:8B:22:67:46:A0:A8:01:6C:21:05:2C:4D:12:E7:9D:86
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial: 019E31F2C7CEBCDCEA0A6820999BB39AB420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number: 1912
Signing time: Sat 16 May 2026 18:00:54 +0000
Manifest this update: Sat 16 May 2026 18:00:54 +0000
Manifest next update: Sun 17 May 2026 18:00:54 +0000
Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: oKnnWDUunBpnmQP1ATtHHZgSgVeWpaEgCJmAhIfITIc=)
2: tEiznCRaCEXuSiqwVe-1WIaGDGU.roa (hash: pOXbDIJbSmZy8KsnI5uOSVFdRgYoW3ngwx0TRZi2I7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:c7:ce:bc:dc:ea:0a:68:20:99:9b:b3:9a:b4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Validity
Not Before: May 16 18:00:54 2026 GMT
Not After : May 17 18:00:54 2026 GMT
Subject: CN=05087db88b226746a0a8016c21052c4d12e79d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:63:4b:25:3f:3e:d8:74:59:81:3a:8a:ca:e0:
ee:c2:12:45:21:43:80:58:89:e9:7f:4f:9d:1d:da:
d4:e3:ee:5a:60:72:fa:1a:98:50:32:b5:5b:38:9e:
47:ee:c4:dd:e9:73:66:bb:b2:c9:af:97:6f:37:e2:
d6:ec:ba:1d:cb:cd:86:99:4b:91:b5:68:47:d3:0c:
67:29:fc:4c:d2:d3:ee:cb:43:19:19:e8:94:54:28:
fb:ef:5f:cd:51:68:e8:c2:bc:c9:a1:0d:cd:ea:cd:
0d:82:4f:8e:58:3a:ec:6f:02:6d:6c:02:0f:07:3e:
4a:42:40:81:fc:44:1f:2b:fb:ef:ff:4a:10:8c:77:
25:1e:b2:c1:43:0d:47:78:c0:53:57:b8:9d:f6:81:
c3:5b:2b:b8:16:5f:4c:e6:bf:68:cb:8f:58:ad:9e:
59:28:77:b5:eb:d0:6a:f7:52:bd:a5:1e:7e:0b:92:
6d:26:4e:87:40:f8:31:0a:e1:7a:37:98:92:00:99:
c2:04:e0:1b:0b:ab:d2:0f:e0:85:8b:d7:6a:15:f0:
00:8b:a5:ed:77:c2:54:e0:dc:27:4d:8e:75:e0:94:
d9:df:b2:c6:b7:61:63:73:be:3c:51:1d:cd:b5:ba:
f8:6a:a9:92:43:22:b7:59:c5:4e:8c:b6:ff:3c:47:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:08:7D:B8:8B:22:67:46:A0:A8:01:6C:21:05:2C:4D:12:E7:9D:86
X509v3 Authority Key Identifier:
keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:41:33:11:03:7a:21:2c:6b:29:c5:88:b2:60:b6:a4:a8:8f:
50:7b:33:70:fe:4d:94:5a:91:a9:3c:98:dc:2b:0a:9f:48:e1:
90:04:19:1d:ad:6d:7d:ad:f3:a7:8e:16:1d:67:15:78:59:91:
a1:93:69:30:86:5d:2f:e1:a9:f7:e9:0a:b8:ce:52:d3:4c:e5:
01:96:ee:94:0c:1e:0a:07:b6:89:6a:dc:b6:5b:82:96:e4:7a:
72:b5:04:33:23:72:5c:ed:da:63:04:03:be:73:12:6b:4f:10:
87:37:b7:cb:df:f8:b3:53:c6:8c:78:14:c2:5c:6c:9d:40:0f:
f3:28:05:63:59:80:1a:72:84:af:1a:0a:cf:c4:30:bf:6a:bb:
91:09:71:ec:22:2f:2f:b9:95:21:44:00:68:f0:0e:6f:5b:65:
3c:28:61:be:6c:72:63:9e:e2:32:b7:87:3d:87:a3:79:07:9d:
aa:70:d9:b4:14:e3:4e:17:67:c3:3f:2d:ea:66:1a:c4:d2:44:
7c:2f:b5:d5:09:00:cd:a3:4a:67:72:51:be:0c:72:8c:31:3c:
75:ed:ee:fe:33:69:b1:a1:ad:9a:9f:1a:58:fa:ba:08:99:66:
96:60:84:b3:30:88:8f:bb:3a:f3:7d:cb:f6:ba:6e:40:1b:72:
4b:ad:c5:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4x8sfOvNzqCmggmZuzmrQgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOWNmMDk3NzFiOGYxODRjYWExYTAwNDIxYjkyOTQ0OTFl
OTdlNmIwHhcNMjYwNTE2MTgwMDU0WhcNMjYwNTE3MTgwMDU0WjAzMTEwLwYDVQQD
EygwNTA4N2RiODhiMjI2NzQ2YTBhODAxNmMyMTA1MmM0ZDEyZTc5ZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimNLJT8+2HRZgTqKyuDuwhJFIUOA
WInpf0+dHdrU4+5aYHL6GphQMrVbOJ5H7sTd6XNmu7LJr5dvN+LW7Lody82GmUuR
tWhH0wxnKfxM0tPuy0MZGeiUVCj771/NUWjowrzJoQ3N6s0Ngk+OWDrsbwJtbAIP
Bz5KQkCB/EQfK/vv/0oQjHclHrLBQw1HeMBTV7id9oHDWyu4Fl9M5r9oy49YrZ5Z
KHe169Bq91K9pR5+C5JtJk6HQPgxCuF6N5iSAJnCBOAbC6vSD+CFi9dqFfAAi6Xt
d8JU4NwnTY514JTZ37LGt2Fjc748UR3Ntbr4aqmSQyK3WcVOjLb/PEeHNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAUIfbiLImdGoKgBbCEFLE0S552GMB8GA1UdIwQY
MBaAFPGc8JdxuPGEyqGgBCG5KUSR6X5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82NTBjOTctNGViNi00YzkxLWI1YTMt
ZGMxZGI2N2RiM2NiLzEvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82NTBjOTctNGViNi00YzkxLWI1YTMtZGMxZGI2N2RiM2Ni
LzEvOFp6d2wzRzQ4WVRLb2FBRUlia3BSSkhwZm1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUEzEQN6
ISxrKcWIsmC2pKiPUHszcP5NlFqRqTyY3CsKn0jhkAQZHa1tfa3zp44WHWcVeFmR
oZNpMIZdL+Gp9+kKuM5S00zlAZbulAweCge2iWrctluCluR6crUEMyNyXO3aYwQD
vnMSa08Qhze3y9/4s1PGjHgUwlxsnUAP8ygFY1mAGnKErxoKz8Qwv2q7kQlx7CIv
L7mVIUQAaPAOb1tlPChhvmxyY57iMreHPYejeQedqnDZtBTjThdnwz8t6mYaxNJE
fC+11QkAzaNKZ3JRvgxyjDE8de3u/jNpsaGtmp8aWPq6CJlmlmCEszCIj7s6833L
9rpuQBtyS63Fyw==
-----END CERTIFICATE-----
Generated at Sat May 16 20:19:11 2026 by rpki-client