Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: uLSt545aEuxRC85p97I8oBchW5M4bTNhxrzpnglCHiE=
Subject key identifier: 57:73:2E:A6:C5:3C:09:C1:CF:4A:58:9B:C5:57:C9:3C:05:58:71:5C
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 01A13ECB66724D414E29E2F647FC89490157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 1AA4
Signing time: Thu 15 Oct 2026 09:01:19 +0000
Manifest this update: Thu 15 Oct 2026 09:01:19 +0000
Manifest next update: Fri 16 Oct 2026 09:01:19 +0000
Files and hashes: 1: 1-z0ycl8G0c1rEni_Vsqg-AmZtoM.roa (hash: MhYBDQjEGU5d72clowp4LieZVsR3hSZE1uwIFiaaRFU=)
2: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: yh2IiLC8KhuzspTpAoPbynDFC3x+WL4iMGqDyhxPTEI=)
3: KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa (hash: d0nit13az+nF5T9ApCvkfJ3swzvKAkAdbSMfvb/nFGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:66:72:4d:41:4e:29:e2:f6:47:fc:89:49:01:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Oct 15 09:01:19 2026 GMT
Not After : Oct 16 09:01:19 2026 GMT
Subject: CN=57732ea6c53c09c1cf4a589bc557c93c0558715c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fa:97:bc:48:f7:49:37:30:2e:69:da:32:59:
72:c1:18:37:ca:4d:0f:7a:1f:73:d0:8e:eb:94:83:
a9:8d:a2:6b:a9:c9:f1:10:91:2e:4a:5d:c5:68:3d:
c3:93:2f:e5:b4:dd:60:52:02:bd:82:da:86:f4:db:
ee:7d:d7:a4:8f:ef:a6:56:f2:b7:15:e5:55:9b:42:
c3:f0:2a:23:5d:ee:4f:88:b6:98:45:48:e4:8a:76:
7c:3c:0c:d2:e8:ca:7c:4a:2b:e1:fc:7d:d2:76:44:
5c:15:4f:51:67:fc:8e:f1:43:cc:30:66:4a:62:18:
7a:9a:25:e7:1c:dd:a0:9b:c9:58:40:3d:6c:e0:29:
f9:82:13:15:38:d5:77:9c:ba:3c:04:d0:12:a2:47:
ea:8e:fb:72:19:53:1e:55:c9:43:8c:3b:ff:cd:90:
cc:bc:be:1d:a1:00:c4:a5:c6:0a:bb:b8:46:d7:5a:
6e:73:a8:1f:52:4e:c6:97:c8:00:cd:78:49:ec:0b:
2d:e1:1b:ef:88:a7:aa:ef:ab:a5:ba:44:dc:9f:ed:
04:05:27:8b:af:ed:70:b3:8c:91:f1:8b:a9:9c:fe:
43:3a:04:e2:b5:da:f6:ca:8a:2d:0a:ac:12:2b:f5:
92:8a:5c:e4:cd:36:38:1a:0d:5f:89:5d:c6:13:13:
01:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:73:2E:A6:C5:3C:09:C1:CF:4A:58:9B:C5:57:C9:3C:05:58:71:5C
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a2:4e:6c:60:23:fe:ed:ff:40:e6:ad:19:cb:7b:38:2a:6c:
ee:f1:10:72:5a:15:0d:14:0e:41:de:0b:0c:61:3b:f2:78:59:
8d:6f:21:13:e2:4f:22:c0:cc:08:94:2e:c7:cc:bd:bc:b0:c6:
01:33:4c:29:d8:0c:e6:b0:97:d7:2c:df:9f:30:74:cd:1d:a7:
4d:42:2a:11:f7:23:40:f0:94:e5:2e:2f:4b:2d:f8:b6:f6:07:
42:87:1e:80:ec:48:78:79:12:ce:b1:29:5b:2c:fe:6e:10:8a:
13:44:54:9d:0b:dd:1e:70:9c:5e:96:21:00:89:79:4d:a0:a4:
15:18:c9:96:29:23:7c:a1:75:72:80:9b:4b:12:77:0c:46:6f:
95:4e:ef:e4:30:bd:ec:2a:a7:6b:65:4d:c5:6b:bb:19:13:c4:
cc:2f:01:45:fe:e0:14:a4:bf:bf:31:19:4c:23:8b:af:d6:65:
d8:22:52:b7:06:9e:0f:1c:1a:58:57:03:e7:8a:6d:c4:04:dd:
c4:3f:c7:3c:07:8f:9d:36:d8:07:1e:74:e2:d5:e7:8b:8e:9d:
a0:ed:4f:da:b2:d7:36:88:5c:d3:78:f5:19:c4:0e:98:33:04:
e1:8a:91:23:7c:ba:ba:83:91:29:d0:b2:a9:43:2b:6e:10:c6:
05:97:3c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+y2ZyTUFOKeL2R/yJSQFXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOTY1NWI1OWE4NjRjYWQ3M2NjMjk1ZjRmNzhmZjgzY2Fl
ODZhYWMwHhcNMjYxMDE1MDkwMTE5WhcNMjYxMDE2MDkwMTE5WjAzMTEwLwYDVQQD
Eyg1NzczMmVhNmM1M2MwOWMxY2Y0YTU4OWJjNTU3YzkzYzA1NTg3MTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPqXvEj3STcwLmnaMllywRg3yk0P
eh9z0I7rlIOpjaJrqcnxEJEuSl3FaD3Dky/ltN1gUgK9gtqG9Nvufdekj++mVvK3
FeVVm0LD8CojXe5PiLaYRUjkinZ8PAzS6Mp8Sivh/H3SdkRcFU9RZ/yO8UPMMGZK
Yhh6miXnHN2gm8lYQD1s4Cn5ghMVONV3nLo8BNASokfqjvtyGVMeVclDjDv/zZDM
vL4doQDEpcYKu7hG11puc6gfUk7Gl8gAzXhJ7Ast4RvviKeq76ulukTcn+0EBSeL
r+1ws4yR8YupnP5DOgTitdr2yootCqwSK/WSilzkzTY4Gg1fiV3GExMBwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdzLqbFPAnBz0pYm8VXyTwFWHFcMB8GA1UdIwQY
MBaAFPGWVbWahkytc8wpX094/4PK6GqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAt
MzM5ZWU3MDBhZjZmLzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAtMzM5ZWU3MDBhZjZm
LzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqJObGAj
/u3/QOatGct7OCps7vEQcloVDRQOQd4LDGE78nhZjW8hE+JPIsDMCJQux8y9vLDG
ATNMKdgM5rCX1yzfnzB0zR2nTUIqEfcjQPCU5S4vSy34tvYHQocegOxIeHkSzrEp
Wyz+bhCKE0RUnQvdHnCcXpYhAIl5TaCkFRjJlikjfKF1coCbSxJ3DEZvlU7v5DC9
7Cqna2VNxWu7GRPEzC8BRf7gFKS/vzEZTCOLr9Zl2CJStwaeDxwaWFcD54ptxATd
xD/HPAePnTbYBx504tXni46doO1P2rLXNohc03j1GcQOmDME4YqRI3y6uoORKdCy
qUMrbhDGBZc8ow==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:37:18 2026 by rpki-client