
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier: Etu+HpZzIYJz5wk90TjXFN++Okeo1yXJNkGtwTlCA0s=
Subject key identifier: 1F:36:37:9D:99:EC:DB:71:CD:89:27:9F:D9:55:BE:00:DD:3E:86:56
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer: /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial: 01A13823EFD41920FD49CBE54D395A84FBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number: 1AA2
Signing time: Wed 14 Oct 2026 02:00:41 +0000
Manifest this update: Wed 14 Oct 2026 02:00:41 +0000
Manifest next update: Thu 15 Oct 2026 02:00:41 +0000
Files and hashes: 1: 60O0SRzjGsORJ1LBFnHv2U1PHTk.roa (hash: 3tf/Ui4ibWz+Ljka1guaW3+IweRIpdh9pYNIaOP6ChU=)
2: R4SqufV61FjY_qt6XBJL1xKD3Yk.roa (hash: oxpnmOAxuGivN4BOARVKb2erg4+PNj4PUrM7BceH1yo=)
3: i8jFdg5Mow9Dh-pthFrBPnRY_7E.roa (hash: cPsXapsQYVV5sthITpOROGImuL+pHXuvlOflhuTnK7c=)
4: jJ8Ja4wQj77UXskU4dYzizx-fO8.roa (hash: D/f3chU7o9XZeTFLsqkW7hmyKTnJCw4DJq8f3FXAw8c=)
5: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: JcbB/Jb3rz+Uv6VsuDboImaSw0KfqowJtNwFqsmI0X8=)
6: umCBjEn3NnVHg79eLHC3xk9rgS0.roa (hash: /fSksQdekqYTESP/mXyQvaIFQ1BWx6zsTRDj8qcB0V4=)
7: y1bR5jl013Y3lzMs7c_lC8K_wF4.roa (hash: ZOf1GD5+F7Ix58HDKPiEjn4TBv+b/5vVBq1mleIzuFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:23:ef:d4:19:20:fd:49:cb:e5:4d:39:5a:84:fb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Validity
Not Before: Oct 14 02:00:41 2026 GMT
Not After : Oct 15 02:00:41 2026 GMT
Subject: CN=1f36379d99ecdb71cd89279fd955be00dd3e8656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:cc:f4:61:4c:ac:d8:7f:bc:22:e1:b2:df:b5:
e4:91:14:9c:9f:ca:64:d6:e5:a7:f2:6c:cc:40:eb:
7d:bb:5d:e8:67:d8:ba:f3:a8:93:ca:b8:b9:50:21:
98:c9:33:69:0f:14:57:fc:b6:7e:06:da:bc:74:44:
6d:d5:a0:bf:9d:fb:cd:84:5e:7b:53:7d:81:e0:bd:
0e:00:40:90:50:7e:28:77:bc:19:9e:ec:55:a7:5f:
33:bb:1b:36:8f:e6:3f:41:94:b4:b1:ba:05:df:f3:
64:a9:a8:d1:43:d8:e9:31:c8:15:e0:f5:b7:68:a4:
09:a0:61:20:b9:0f:cb:d1:59:a6:9e:48:04:a3:fe:
ce:77:32:ec:a3:34:5e:f0:84:33:0b:2d:5c:01:3e:
cd:d4:81:50:08:a6:46:d7:c6:5f:9b:74:ba:33:72:
4f:0f:7b:47:7c:ed:c3:0b:25:d9:30:b5:da:05:45:
3b:9c:3a:6a:ed:1c:cf:0c:f0:68:df:c1:0b:4c:a5:
23:71:4c:89:13:c1:c1:1a:3e:6d:e2:ff:4a:8c:c3:
81:8b:f3:9f:a7:12:e6:43:99:f0:21:8f:dd:b0:5e:
94:25:d6:03:f0:51:aa:7e:95:7c:f4:e3:4f:f0:84:
59:37:7f:4a:bb:92:6e:e6:e3:f0:ac:b0:16:d8:2f:
1d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:36:37:9D:99:EC:DB:71:CD:89:27:9F:D9:55:BE:00:DD:3E:86:56
X509v3 Authority Key Identifier:
keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f5:88:fe:92:87:cf:aa:30:fe:87:a4:b9:9b:06:91:1d:20:
c7:4f:d7:8f:49:c6:be:37:ac:20:73:b2:c8:0f:5e:02:7a:bb:
d2:47:89:ab:64:cd:28:b6:f8:e7:37:65:86:40:0e:6d:77:3d:
10:2a:90:58:26:6c:d8:29:a7:ec:ba:06:3d:62:d7:5c:cb:4d:
52:5e:a3:83:8e:4d:a7:89:ed:1c:da:57:96:97:c7:d2:2c:9b:
db:ad:0f:87:d9:3d:95:1d:dd:28:43:0a:1f:51:50:e2:f7:c0:
18:9a:b9:e1:a8:a8:d0:ed:dd:d4:23:84:cf:5b:4e:fa:87:7b:
e6:ea:1d:5a:6c:fa:7f:66:84:96:9e:80:82:52:ad:a7:cb:61:
3f:7e:5c:36:19:2b:dd:9a:ab:07:a2:ad:58:f9:74:e3:99:0f:
d0:13:97:45:c7:f6:66:77:7a:cc:c1:3e:31:ea:fc:c7:56:7b:
3b:96:05:00:d5:71:0d:76:47:4f:97:cc:94:27:aa:1f:4f:57:
5c:76:45:86:d7:2a:2c:36:3c:a8:44:82:8c:7d:15:e3:6f:20:
c8:54:38:7e:4d:85:96:7c:3c:42:8b:d0:b9:12:07:5c:b0:3b:
40:7e:ed:e7:10:ba:1e:f2:dd:1e:61:02:91:11:7f:59:52:e6:
f7:9b:18:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:05:11 2026 by rpki-client