Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: meJc4/dAZfZl/hSGf43meXon59qa9nsqUiljvZwG/6Y=
Subject key identifier: F1:48:CC:AD:A0:5F:D5:54:F6:6F:14:45:F2:6A:8E:23:69:58:23:BF
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 019D3789CC015D9011A7DB70E0043FD160FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 03:01:10 +0000
Manifest this update: Sun 29 Mar 2026 03:01:10 +0000
Manifest next update: Mon 30 Mar 2026 03:01:10 +0000
Files and hashes: 1: 1-z0ycl8G0c1rEni_Vsqg-AmZtoM.roa (hash: MhYBDQjEGU5d72clowp4LieZVsR3hSZE1uwIFiaaRFU=)
2: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: TUvXQAOe7Q31M+oZ+57BMu7/i3k/Ldfw2GHiLXc4pho=)
3: KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa (hash: d0nit13az+nF5T9ApCvkfJ3swzvKAkAdbSMfvb/nFGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:cc:01:5d:90:11:a7:db:70:e0:04:3f:d1:60:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Mar 29 03:01:10 2026 GMT
Not After : Mar 30 03:01:10 2026 GMT
Subject: CN=f148ccada05fd554f66f1445f26a8e23695823bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:47:90:8c:ff:ae:9e:0b:eb:4f:d3:46:99:
8d:6f:e5:19:76:dc:1b:32:bc:72:88:5f:70:7f:57:
65:18:38:e7:a6:1f:2b:5b:ca:ce:27:f8:f2:77:19:
69:1b:66:e3:e7:4e:5a:4a:10:7c:d7:d3:45:70:d2:
8e:dd:93:ad:97:48:c5:73:3b:65:22:ab:29:21:f4:
4b:6c:4e:6f:91:72:0b:65:a5:19:cb:19:57:55:a2:
c2:4a:a4:ea:3a:91:87:b3:4d:68:f2:b8:0a:73:67:
eb:21:09:28:8f:60:11:9a:ec:da:8f:b8:0c:f3:70:
4e:e5:35:2e:30:e9:e0:1f:05:11:a0:d3:84:9f:5d:
41:b3:88:35:b8:94:cb:7d:23:16:5d:5c:2c:51:30:
ff:7c:d1:04:11:5e:50:34:ce:6c:5e:7e:da:c1:6a:
d9:af:f2:72:b6:c6:b0:4c:c0:47:4b:4d:fb:5d:b6:
72:e9:9a:6b:23:23:ab:76:25:bc:24:5d:35:a7:67:
f4:40:8f:e7:7e:23:d9:d9:79:52:c3:ae:87:37:db:
4e:6c:05:99:3e:7c:d3:13:b4:66:ba:39:3b:b5:c7:
5c:7b:1d:dc:70:fc:f6:10:cb:fb:30:f5:99:23:b3:
2d:d2:e3:d9:6c:52:76:35:7d:78:f0:70:38:94:82:
8c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:48:CC:AD:A0:5F:D5:54:F6:6F:14:45:F2:6A:8E:23:69:58:23:BF
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6d:e3:9f:f2:24:1e:d2:39:bd:7c:f6:1a:fc:35:46:c9:42:
5e:21:6d:47:16:5a:07:d7:3b:6f:d3:2d:9d:27:31:d9:75:35:
c1:cb:03:b8:f0:84:5c:8a:86:38:2a:69:99:b0:34:8a:94:1e:
73:66:27:5b:66:bf:ec:58:da:c4:72:ab:c3:5b:d3:77:14:a4:
9b:18:6e:03:93:8a:fd:0a:25:98:1a:8d:bb:df:04:b2:3f:84:
ab:7d:d6:8d:ad:a1:4e:3c:3d:73:34:e6:84:47:0e:63:70:f9:
f1:18:10:d3:6d:1a:33:6c:dc:56:25:ec:1c:65:89:bb:fe:be:
07:32:69:74:43:04:fc:ab:3e:f5:9d:eb:28:d0:79:37:fb:23:
2c:70:62:aa:86:7e:4a:3f:c8:94:92:1a:ec:52:2c:6d:36:cd:
57:fb:df:09:15:1c:10:34:27:c2:32:1c:63:e1:dc:6b:ca:42:
b4:bb:eb:ef:1a:6d:97:41:88:5a:b7:1c:dc:11:6c:7e:73:fd:
86:a3:30:e8:c2:93:b8:25:2f:59:18:8c:8e:9b:80:6e:0d:08:
0c:38:f2:93:e2:9d:86:e6:11:6d:59:54:95:6b:94:43:0e:3c:
a4:11:79:a0:00:d5:c8:7e:53:55:8c:92:27:9c:26:2b:36:69:
37:16:31:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:20 2026 by rpki-client