Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: Wn1XnKfctus7sGaDm7KPo98FomtBpQwCJHKN7K75dJs=
Subject key identifier: 4A:79:A3:1F:E1:9E:9D:87:4B:C6:5B:DB:BC:D6:85:4B:CE:74:FA:1F
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 01A00213CB2033B714B59132CCBA01EB0AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 21:00:46 +0000
Manifest this update: Fri 14 Aug 2026 21:00:46 +0000
Manifest next update: Sat 15 Aug 2026 21:00:46 +0000
Files and hashes: 1: 1-z0ycl8G0c1rEni_Vsqg-AmZtoM.roa (hash: MhYBDQjEGU5d72clowp4LieZVsR3hSZE1uwIFiaaRFU=)
2: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: KsoZA3U+/2Oz7K/ZKyyYTTvlaNyuWwUdF+4lWqsFqjU=)
3: KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa (hash: d0nit13az+nF5T9ApCvkfJ3swzvKAkAdbSMfvb/nFGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:cb:20:33:b7:14:b5:91:32:cc:ba:01:eb:0a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Aug 14 21:00:46 2026 GMT
Not After : Aug 15 21:00:46 2026 GMT
Subject: CN=4a79a31fe19e9d874bc65bdbbcd6854bce74fa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:0c:07:a2:96:06:91:24:c8:b9:13:c4:73:
03:23:7c:97:84:9d:8e:df:84:ee:62:54:66:91:71:
61:9f:c0:b3:47:dc:bf:89:df:af:7d:42:5e:ae:37:
32:11:8e:89:fb:39:8d:f8:ca:a8:7f:90:62:e8:d4:
8c:41:79:ff:27:a5:d0:65:b9:1d:a7:9f:2c:ab:9b:
69:24:66:fd:ef:6e:db:9a:66:32:6b:6b:c9:a2:b8:
8c:83:9d:a0:6c:56:6b:1e:a6:87:37:d6:1b:65:5a:
79:06:08:cb:40:56:28:2f:e4:db:26:4a:7e:69:2e:
9c:d6:2e:70:bd:bd:e7:83:58:04:d1:a6:fb:bf:c9:
ff:e5:dd:45:6e:e8:18:e9:13:c9:b7:32:2a:90:48:
61:61:f8:38:30:cc:9d:c6:84:88:c5:6b:20:e2:f0:
63:26:8e:c3:6d:e4:e0:ab:c5:e2:b1:4e:17:cb:3d:
b4:0f:5d:99:55:92:03:01:94:d1:cb:d0:2b:ca:dd:
c0:83:37:0d:ef:33:27:c3:e1:07:61:e2:26:61:a9:
92:93:be:0d:41:a4:b6:2e:5b:e2:f1:f7:44:6b:28:
af:fa:5a:b9:51:2c:66:43:7e:a4:51:eb:dd:a1:0a:
07:1a:95:37:36:3a:14:37:3d:e0:4a:01:7a:6f:e2:
da:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:79:A3:1F:E1:9E:9D:87:4B:C6:5B:DB:BC:D6:85:4B:CE:74:FA:1F
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:57:03:fc:94:aa:9f:23:12:90:ec:d1:80:d4:25:61:17:dd:
a6:06:bb:be:46:b5:7a:18:f0:b1:b2:d1:12:68:74:14:22:6d:
c1:1b:ad:5c:00:8e:4c:e8:44:2e:3d:d0:bb:23:bf:41:f0:c0:
ea:52:84:af:95:c2:d3:4a:25:63:0d:7e:d1:95:e7:fe:9b:05:
d3:ea:15:a2:b1:dc:80:12:66:12:b7:1e:72:ef:28:9a:18:dc:
9e:7a:75:d1:21:b3:57:c0:f4:58:0e:1d:a3:9f:9a:f3:b4:25:
90:14:66:1c:cb:bc:12:66:27:cf:ad:7a:66:6e:8f:85:cb:09:
cd:d3:59:58:5e:84:e3:c7:f6:3f:f7:db:f8:39:c6:96:45:95:
5a:8c:e5:2a:b9:9f:17:00:1c:ec:ee:a6:f3:c2:56:08:55:07:
66:3b:d0:d7:36:da:13:5e:4a:2f:c8:71:23:a9:e0:f7:d0:31:
45:11:13:01:bc:f6:00:fa:cc:b1:91:71:4d:1c:9b:2d:40:99:
c5:5c:0f:c6:f9:a0:e9:54:cb:d3:bb:c7:d0:82:c9:a9:e7:c3:
6a:45:d0:01:7d:ed:32:66:f8:05:79:77:e7:96:c9:53:b6:35:
b6:86:7d:03:1d:7f:5d:98:a7:52:e3:c6:cc:f0:a0:bc:5f:55:
43:01:85:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:23 2026 by rpki-client