Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier: Q77R8HnZSz/2ygrZuWMpjdRVZ6dDX39kRqtVx00DlqE=
Subject key identifier: D1:6B:E8:32:E4:DD:81:2B:0E:30:20:A3:6B:F5:AD:2F:E9:16:D3:2B
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial: 01A0016F5957C4F83E5EDE79597BD34B6EB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 18:01:09 +0000
Manifest this update: Fri 14 Aug 2026 18:01:09 +0000
Manifest next update: Sat 15 Aug 2026 18:01:09 +0000
Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: NJRhZ7ktLq8xQ21C/LQINz47X5gy0dV0BgygpFCAzjU=)
2: tEiznCRaCEXuSiqwVe-1WIaGDGU.roa (hash: pOXbDIJbSmZy8KsnI5uOSVFdRgYoW3ngwx0TRZi2I7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:59:57:c4:f8:3e:5e:de:79:59:7b:d3:4b:6e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Validity
Not Before: Aug 14 18:01:09 2026 GMT
Not After : Aug 15 18:01:09 2026 GMT
Subject: CN=d16be832e4dd812b0e3020a36bf5ad2fe916d32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:28:82:a0:68:61:b9:15:67:e7:ec:9b:d8:40:
a9:41:f4:76:3f:8e:e3:2e:67:43:57:fd:a8:2a:c6:
0d:f9:a5:68:7d:8b:79:bb:59:e8:56:72:6f:aa:c0:
1e:a8:3e:b0:e2:cf:77:32:94:27:8f:10:90:6d:a7:
f1:83:76:f4:76:67:c0:14:65:44:41:f4:ed:bb:51:
e8:4a:3e:cf:10:c4:ee:0d:94:73:86:1a:78:42:11:
ff:c9:00:b3:90:d3:58:95:e8:e5:34:50:c3:4e:6b:
39:dc:68:18:8a:3f:4e:d1:e2:f2:d4:6d:5f:1f:ef:
ad:e8:d3:28:25:1a:96:ad:cf:7d:82:2f:00:74:aa:
a9:ab:2f:8c:f1:56:be:c0:00:96:13:8b:e4:2a:8b:
3c:47:2e:70:4e:1b:29:f7:11:87:49:a3:94:fd:d6:
36:5f:52:a6:19:df:56:22:f6:bd:5e:95:73:58:56:
c2:55:b0:45:b6:ad:51:0c:a6:58:90:b8:5f:a0:a1:
ec:9a:c0:3d:e7:3e:dc:c0:8c:a6:39:83:9d:7a:79:
24:87:57:cc:20:f5:4e:be:c3:43:b3:48:9c:5f:9d:
c9:d1:e6:83:15:d5:62:45:f6:bb:c8:2d:7c:de:99:
b8:40:16:99:ef:1b:d2:be:9b:42:0f:17:9c:3b:88:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6B:E8:32:E4:DD:81:2B:0E:30:20:A3:6B:F5:AD:2F:E9:16:D3:2B
X509v3 Authority Key Identifier:
keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0a:17:a5:09:7c:21:29:91:ad:57:b9:09:64:1c:85:29:73:
df:0b:6d:a8:a4:f9:14:d4:39:80:98:e6:53:92:0d:33:13:e6:
48:03:f5:5d:f2:3a:e4:8e:a4:8f:7e:3b:3e:c0:20:63:87:f7:
de:bc:e4:12:bb:5b:de:7e:7f:66:02:ac:dd:ec:95:71:ab:34:
8d:36:42:d4:f6:20:3c:5d:e3:eb:3d:d1:b9:cb:15:18:08:96:
99:bb:d7:c0:f1:28:a8:30:f5:fd:fa:ae:4d:5a:ed:21:ea:c5:
78:a0:75:20:41:99:52:db:0f:99:7e:22:29:3a:d8:af:3c:22:
10:ca:5e:98:18:44:39:33:1e:81:65:b0:82:79:b9:41:e8:9e:
38:96:2d:82:58:5c:a8:ca:3b:79:68:8f:df:22:9e:21:f2:fc:
95:15:c5:36:6c:a1:be:96:6d:fe:cd:59:69:ea:18:bf:83:42:
d1:2c:a5:ba:cd:cb:81:12:62:20:84:03:99:3a:69:1a:61:78:
32:e5:67:5e:fb:74:ba:6b:01:18:dd:4b:75:ec:48:47:24:9f:
82:6d:d8:2d:b5:8e:1e:bb:55:36:75:8c:74:f6:c4:cf:82:4c:
64:b4:cd:4c:0a:41:d7:4c:28:8b:3b:fd:bc:7e:53:1b:e5:2d:
87:73:22:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:26 2026 by rpki-client