Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: 4Ml0+dPLuI+1yPggEgFyC8TabA1vpAJqvaUmv8g6+j0=
Subject key identifier: FC:47:B7:D5:FE:22:E2:92:7B:3A:C4:06:5E:8D:34:D6:B9:6D:F4:8E
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 019F1867C4CB25D24065EEA9693B13EC9B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 1987
Signing time: Tue 30 Jun 2026 12:01:21 +0000
Manifest this update: Tue 30 Jun 2026 12:01:21 +0000
Manifest next update: Wed 01 Jul 2026 12:01:21 +0000
Files and hashes: 1: 1-z0ycl8G0c1rEni_Vsqg-AmZtoM.roa (hash: MhYBDQjEGU5d72clowp4LieZVsR3hSZE1uwIFiaaRFU=)
2: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: RccBV7EKWLAqs2DpgeqjOG7Kkb8+FTwYevk75rgY7X8=)
3: KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa (hash: d0nit13az+nF5T9ApCvkfJ3swzvKAkAdbSMfvb/nFGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:67:c4:cb:25:d2:40:65:ee:a9:69:3b:13:ec:9b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Jun 30 12:01:21 2026 GMT
Not After : Jul 1 12:01:21 2026 GMT
Subject: CN=fc47b7d5fe22e2927b3ac4065e8d34d6b96df48e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:11:46:3a:2f:8f:4e:73:13:40:f7:7a:6a:
c3:1c:42:5e:93:7c:36:84:0b:7e:a7:50:bf:85:d3:
1d:72:df:24:97:ea:a9:40:33:36:5a:60:bb:94:b6:
09:78:07:98:ea:59:8e:e6:98:33:8e:3c:78:c8:55:
80:be:51:0b:77:c8:d2:b1:0b:f5:12:e8:0a:66:37:
14:e1:78:63:4f:a1:a9:b2:0c:bb:d9:d1:5c:96:04:
a6:ac:a0:c1:32:9b:4a:7a:1d:9c:b7:c7:0f:4a:22:
78:d3:d0:49:a9:08:1e:16:54:42:5f:ce:30:96:5f:
0e:5e:08:f9:42:5d:cc:dd:7f:db:16:18:09:74:1f:
9f:48:c0:28:0b:e5:f5:c4:88:b0:57:5c:af:67:f3:
5a:b7:4b:c7:23:91:f1:db:73:14:4d:30:18:05:2a:
61:01:b4:f9:b9:0b:81:2e:1e:dd:63:d7:6b:92:93:
81:1e:be:d2:0d:0e:b5:4f:67:1a:4e:20:33:d4:89:
f2:d1:5a:b6:95:f2:03:6e:7f:54:67:0f:9c:6c:c4:
f2:c4:de:75:02:7b:ae:26:80:74:b8:50:84:dc:99:
9a:39:25:2a:90:e6:ce:97:8e:2c:fa:1a:19:d7:e7:
a9:fc:aa:99:ee:49:b9:24:2a:94:62:8f:ea:b3:43:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:47:B7:D5:FE:22:E2:92:7B:3A:C4:06:5E:8D:34:D6:B9:6D:F4:8E
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:de:f6:d9:b8:a8:0e:1c:98:95:1d:55:bd:a9:9d:81:39:e5:
db:60:2c:1e:cc:0a:17:fa:68:d9:b6:dc:ec:ce:bd:42:11:d9:
bd:46:4a:78:4d:c4:3b:f3:36:83:37:42:dc:c2:e8:57:91:e2:
13:f1:b4:54:51:24:f1:e0:99:4b:2c:88:3f:9c:76:0d:d4:8c:
c0:0d:4a:c5:86:f4:83:3f:b8:f8:be:f7:0c:e8:38:bc:ed:59:
81:30:53:52:8c:6c:b2:2e:6d:08:dd:16:34:af:19:64:9c:3b:
52:8b:19:8d:3a:cd:b1:eb:64:a5:f3:c9:92:49:12:a9:be:51:
d6:e6:f2:a9:67:0c:8b:69:50:df:78:c5:76:d4:b0:3b:e9:41:
60:e9:fc:be:91:44:ae:dc:69:62:4c:cb:86:97:7b:bb:09:38:
5a:68:fa:ab:21:e1:2e:f5:eb:07:6b:e0:e3:76:72:4a:45:f6:
90:4d:dc:d5:c3:44:37:c0:3c:e8:d5:c6:86:9d:f3:e6:28:16:
4f:d7:d5:1b:6b:43:8f:e9:61:f9:b4:a5:15:2b:98:77:f6:6a:
ab:f3:08:3a:06:cd:bc:0a:39:e0:d4:f1:4a:fb:de:fe:d1:26:
1d:74:4c:c3:a3:91:e6:71:80:ed:76:89:41:47:4d:14:06:82:
c4:56:c4:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YZ8TLJdJAZe6paTsT7JuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOTY1NWI1OWE4NjRjYWQ3M2NjMjk1ZjRmNzhmZjgzY2Fl
ODZhYWMwHhcNMjYwNjMwMTIwMTIxWhcNMjYwNzAxMTIwMTIxWjAzMTEwLwYDVQQD
EyhmYzQ3YjdkNWZlMjJlMjkyN2IzYWM0MDY1ZThkMzRkNmI5NmRmNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJERRjovj05zE0D3emrDHEJek3w2
hAt+p1C/hdMdct8kl+qpQDM2WmC7lLYJeAeY6lmO5pgzjjx4yFWAvlELd8jSsQv1
EugKZjcU4XhjT6Gpsgy72dFclgSmrKDBMptKeh2ct8cPSiJ409BJqQgeFlRCX84w
ll8OXgj5Ql3M3X/bFhgJdB+fSMAoC+X1xIiwV1yvZ/Nat0vHI5Hx23MUTTAYBSph
AbT5uQuBLh7dY9drkpOBHr7SDQ61T2caTiAz1Iny0Vq2lfIDbn9UZw+cbMTyxN51
AnuuJoB0uFCE3JmaOSUqkObOl44s+hoZ1+ep/KqZ7km5JCqUYo/qs0ONSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxHt9X+IuKSezrEBl6NNNa5bfSOMB8GA1UdIwQY
MBaAFPGWVbWahkytc8wpX094/4PK6GqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAt
MzM5ZWU3MDBhZjZmLzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAtMzM5ZWU3MDBhZjZm
LzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArN722bio
DhyYlR1VvamdgTnl22AsHswKF/po2bbc7M69QhHZvUZKeE3EO/M2gzdC3MLoV5Hi
E/G0VFEk8eCZSyyIP5x2DdSMwA1KxYb0gz+4+L73DOg4vO1ZgTBTUoxssi5tCN0W
NK8ZZJw7UosZjTrNsetkpfPJkkkSqb5R1ubyqWcMi2lQ33jFdtSwO+lBYOn8vpFE
rtxpYkzLhpd7uwk4Wmj6qyHhLvXrB2vg43ZySkX2kE3c1cNEN8A86NXGhp3z5igW
T9fVG2tDj+lh+bSlFSuYd/Zqq/MIOgbNvAo54NTxSvve/tEmHXRMw6OR5nGA7XaJ
QUdNFAaCxFbEkQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:47 2026 by rpki-client