Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: VfEERmFaIXIaBxTjOCj266hNtI7HeB9572Z5+GG+6SA=
Subject key identifier: 2A:74:27:57:B8:9E:5D:3C:B4:F2:29:9A:7E:0E:EE:56:85:DD:3D:43
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 019E30A917D03A8E27B44A8FBCC68E19FA95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 190F
Signing time: Sat 16 May 2026 12:00:48 +0000
Manifest this update: Sat 16 May 2026 12:00:48 +0000
Manifest next update: Sun 17 May 2026 12:00:48 +0000
Files and hashes: 1: 1-z0ycl8G0c1rEni_Vsqg-AmZtoM.roa (hash: MhYBDQjEGU5d72clowp4LieZVsR3hSZE1uwIFiaaRFU=)
2: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: 1+JcU0h1gue2weq/PB8tvcPtXH2lT0ogjllxa0wYBmg=)
3: KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa (hash: d0nit13az+nF5T9ApCvkfJ3swzvKAkAdbSMfvb/nFGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:17:d0:3a:8e:27:b4:4a:8f:bc:c6:8e:19:fa:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: May 16 12:00:48 2026 GMT
Not After : May 17 12:00:48 2026 GMT
Subject: CN=2a742757b89e5d3cb4f2299a7e0eee5685dd3d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:43:78:eb:2a:2e:d5:fb:72:25:99:88:76:f2:
1d:4f:c0:d3:96:60:2c:9d:80:03:c5:39:5b:e0:f7:
94:e5:1d:ea:c3:9e:2a:16:3d:2c:a1:06:78:b4:64:
36:a0:f9:50:83:35:3e:a6:8a:06:3d:17:a2:0f:32:
db:b0:da:73:22:d6:66:fc:05:e4:eb:9c:10:e2:48:
a7:45:db:33:b5:8d:aa:40:8b:3e:c3:38:12:8d:8d:
b0:2a:0c:28:1f:60:7b:68:7f:62:57:6a:32:85:38:
ad:0a:99:e1:14:5d:12:a1:1f:ff:19:72:05:71:0e:
67:4f:43:c6:dc:2b:1f:74:5c:68:b2:2e:4b:87:3f:
8e:d3:49:dd:ea:10:49:19:46:b0:38:e6:fe:83:58:
31:1e:e7:77:69:5f:46:78:1a:a0:02:8d:43:fb:81:
ec:36:f2:a3:3d:6a:90:30:a6:01:98:13:3f:ef:5c:
5b:b1:5b:72:dd:0d:d1:83:3f:9c:58:87:f6:67:88:
b8:e5:3d:4d:01:8a:03:51:2c:9f:4e:10:4d:b7:84:
e4:b1:d2:df:19:78:58:41:2c:fc:a9:d3:6b:1f:12:
f9:25:e7:93:df:25:1b:61:83:74:2f:f4:46:0b:45:
9a:a6:55:33:01:55:c7:28:a3:68:7c:79:cb:90:2f:
0c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:74:27:57:B8:9E:5D:3C:B4:F2:29:9A:7E:0E:EE:56:85:DD:3D:43
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ac:a1:9e:7a:a1:fd:a1:aa:0e:57:07:1e:b3:62:68:00:e7:
f5:c6:06:4b:90:20:24:2a:7b:01:1d:9a:9d:5b:0f:ea:09:6f:
b1:13:d6:69:3c:2a:b6:26:5e:89:fa:57:a6:7b:66:8c:1f:1d:
e3:9b:67:62:24:82:a5:63:d8:00:05:f1:7b:e3:67:60:b4:a8:
fb:d8:3c:fe:ba:c6:c9:16:9c:28:75:7f:a3:86:9c:8a:5b:99:
7c:34:7d:d1:04:65:02:7d:2b:2f:da:9a:85:22:18:6a:99:38:
f2:82:8c:9a:a8:9e:53:92:1e:0f:0d:ed:a8:4c:90:7f:9a:f7:
6b:0b:03:5f:8a:7b:63:5b:6f:d0:d6:77:cd:aa:a7:16:0f:98:
61:a8:36:84:d4:f0:b6:05:22:83:80:68:03:4e:a1:e1:cf:fc:
78:56:b5:ae:47:c1:44:52:53:e6:77:b0:0a:d6:11:13:ba:fb:
f0:47:90:b8:2e:68:46:3c:a6:5c:a5:7f:b7:4f:e1:c6:cc:85:
6d:69:40:60:f6:7d:91:ab:74:c4:d2:a3:ec:07:80:8b:51:f6:
20:0b:bb:48:a9:95:89:d5:06:ce:7a:04:17:04:d5:f3:d3:c2:
83:58:8c:fb:7d:aa:90:56:f5:37:2e:4e:3b:fc:6b:01:99:88:
d3:61:05:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:49 2026 by rpki-client