Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier: tj0LMfRG/b0E+LzB2qzEAcm7kCn1ywswtRmU5pCVaDU=
Subject key identifier: A3:23:FF:16:C9:B4:9D:2D:A4:C1:C4:ED:B9:1A:FF:EF:B7:66:13:40
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial: 019F916CB0D0FEC39360CAD13AD86AA1C3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 00:00:47 +0000
Manifest this update: Fri 24 Jul 2026 00:00:47 +0000
Manifest next update: Sat 25 Jul 2026 00:00:47 +0000
Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: c17q6LpFmL8HgIzMLKc4vul3IpqWWRhvg0xXfPlSBzA=)
2: tEiznCRaCEXuSiqwVe-1WIaGDGU.roa (hash: pOXbDIJbSmZy8KsnI5uOSVFdRgYoW3ngwx0TRZi2I7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:b0:d0:fe:c3:93:60:ca:d1:3a:d8:6a:a1:c3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Validity
Not Before: Jul 24 00:00:47 2026 GMT
Not After : Jul 25 00:00:47 2026 GMT
Subject: CN=a323ff16c9b49d2da4c1c4edb91affefb7661340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ee:f7:24:32:ae:c8:a3:85:35:9c:16:a9:c5:
20:25:bd:44:b1:da:15:15:8f:0d:69:87:c4:2b:ab:
6a:c8:39:0c:9c:18:99:cd:13:5a:ba:83:0f:80:0f:
27:92:02:ee:8e:f3:d5:cb:0a:72:68:b9:a9:fc:d6:
6e:be:a3:e7:aa:b7:a7:d6:52:84:4b:d0:b5:96:e5:
aa:7a:11:ea:fa:88:0a:93:13:72:7b:f8:b0:ef:43:
2b:4b:b7:8b:a9:4a:df:ea:87:eb:5b:8f:30:65:1a:
c0:12:70:69:f9:2f:be:0b:13:db:9d:19:b0:92:a9:
8e:4a:22:d7:d4:6f:d3:05:2f:6d:70:00:33:0f:0c:
85:a2:98:5b:95:54:59:6d:12:3b:c5:0a:c7:13:ce:
bd:0f:1d:eb:f7:f8:9f:a0:7e:e1:30:e5:67:fa:a1:
5f:a3:1f:32:b9:d8:88:76:0a:f9:59:eb:cc:73:89:
ac:57:27:85:0e:4a:c8:db:d5:01:45:98:20:8b:c8:
af:bb:67:fa:52:17:bc:63:d4:76:01:66:0f:ad:e1:
1b:a3:22:b4:02:f7:45:3f:63:f0:88:94:44:e6:60:
99:18:57:33:12:a0:74:87:8b:0f:5f:c4:09:70:aa:
aa:e5:c7:a2:cd:76:db:24:1b:6f:dd:dc:0c:97:d0:
05:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:23:FF:16:C9:B4:9D:2D:A4:C1:C4:ED:B9:1A:FF:EF:B7:66:13:40
X509v3 Authority Key Identifier:
keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ad:01:73:13:a4:d4:3e:db:72:62:44:9f:6a:9b:14:f1:b7:
24:1f:da:86:b4:df:60:3b:e5:46:bd:3a:26:5c:e9:94:ee:98:
d2:97:62:20:bb:14:03:2e:1b:74:2a:9e:dd:3e:91:d4:34:49:
4a:6f:d4:cc:02:35:7d:c1:a8:6e:c3:eb:77:b2:a7:fa:3d:c0:
56:3e:c7:64:1f:29:2a:66:2f:d9:bd:41:80:98:96:de:20:4d:
dc:fb:75:f6:e8:38:32:8e:16:9c:cf:6b:70:22:82:08:c4:6c:
02:b4:29:02:fa:c7:cc:bb:0b:84:22:18:a0:71:9f:7b:a3:a7:
99:fe:1e:a2:2c:b0:98:3a:33:69:48:d1:38:22:1f:23:58:a5:
a0:8e:78:43:e5:a1:5b:fd:ce:5b:ca:75:e6:dc:03:fd:d2:d2:
21:56:0f:d4:e7:8b:67:02:b2:d0:50:c3:1e:ab:3c:e9:ae:a3:
78:3e:b9:c3:62:5b:75:0f:f6:46:85:da:b1:3e:19:55:23:08:
96:ee:22:24:31:07:59:96:a7:78:54:10:ad:0f:62:22:0f:76:
c6:e9:c6:7b:ac:0f:6a:74:91:32:7d:b6:67:e7:2c:a1:fe:60:
15:06:11:e0:0f:12:38:f9:9b:f2:9e:d5:16:d6:c1:69:f6:cd:
aa:9b:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:52 2026 by rpki-client