
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier: LnBwHGLoNXN3lPiEeqqOdgKgnUx4u9B1Uy8Q04riSZI=
Subject key identifier: 54:66:6F:99:08:70:AF:B7:AD:98:98:33:9C:BC:93:8E:A1:DA:CE:6B
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial: 01A0D011F2AFB4A89A851DACA3D1A3B33880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 21:00:32 +0000
Manifest this update: Wed 23 Sep 2026 21:00:32 +0000
Manifest next update: Thu 24 Sep 2026 21:00:32 +0000
Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: 3C02GK1REJUXDelxL7av9bUVA/7MG0CtHc0vFWIeNYs=)
2: tEiznCRaCEXuSiqwVe-1WIaGDGU.roa (hash: pOXbDIJbSmZy8KsnI5uOSVFdRgYoW3ngwx0TRZi2I7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:f2:af:b4:a8:9a:85:1d:ac:a3:d1:a3:b3:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Validity
Not Before: Sep 23 21:00:32 2026 GMT
Not After : Sep 24 21:00:32 2026 GMT
Subject: CN=54666f990870afb7ad9898339cbc938ea1dace6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:6e:10:6c:c8:63:b0:78:cc:e1:79:ca:fe:
a2:f4:df:7c:67:42:22:ce:4d:9c:c6:a9:4a:f6:d1:
5b:a1:37:3d:09:74:3f:4b:5a:1e:cb:05:72:a5:59:
1d:5b:ff:59:8c:6f:3c:2d:b1:53:99:b4:e1:82:75:
c5:d0:60:97:76:e9:c5:94:44:33:5a:3f:51:71:ea:
5f:89:97:e4:b7:2c:ef:d0:fc:e9:1e:e5:5d:99:41:
f0:d2:78:ce:1c:41:f0:47:50:22:12:f2:a0:72:22:
42:0f:f0:d6:76:f3:3d:09:70:8a:82:6d:84:d1:40:
d8:ea:a9:e6:16:1f:98:3e:f7:a4:f4:84:d5:1d:e2:
5a:98:00:04:75:88:19:33:09:f0:c7:06:1e:0e:8c:
4c:68:ba:db:06:e6:69:ab:1f:2b:00:33:f7:a4:c5:
0d:50:e4:01:f5:fa:29:11:b1:bc:ac:f7:b4:6b:62:
6b:a3:5a:bc:aa:f3:5f:de:b5:55:50:d6:2f:6e:95:
a2:80:86:15:4d:69:f8:09:c9:89:7f:ef:d2:89:cb:
cb:90:05:49:16:f1:c7:9f:25:b4:50:50:7f:c1:30:
8d:5d:c1:15:48:f9:fb:90:20:6b:8f:25:34:15:14:
72:85:6b:f2:fc:b6:ec:82:ac:08:fc:ba:f9:cd:a9:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:66:6F:99:08:70:AF:B7:AD:98:98:33:9C:BC:93:8E:A1:DA:CE:6B
X509v3 Authority Key Identifier:
keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:43:3d:c4:7b:ca:85:c2:56:ee:db:94:b0:2f:fe:dd:c8:20:
20:5b:7b:64:6d:4b:41:fd:c6:61:18:85:45:73:66:08:a8:57:
40:4d:21:c3:7b:23:ce:5e:9d:bd:ea:96:77:04:25:b1:72:18:
9c:32:04:db:31:c5:6f:1a:d7:84:38:6a:21:2f:49:2f:43:ca:
fa:a5:93:17:6c:66:b4:1d:0a:1b:37:1d:bd:11:4a:61:75:dc:
6f:f0:07:11:c2:22:f8:b5:17:62:9e:2a:cf:d6:5c:ef:f1:d7:
64:0a:b7:43:3b:d7:fe:c8:f6:66:b5:4a:32:95:74:4d:7e:7f:
93:b6:c4:ea:0f:4a:72:88:a5:41:e5:8b:76:67:46:f9:bd:75:
59:f8:16:61:61:de:ce:2f:f2:1c:2c:f7:c0:74:c1:da:08:41:
3a:b4:ef:c8:fd:fb:0d:35:81:45:6a:c1:ba:02:d3:fd:a5:cc:
d7:6a:9d:45:19:89:b5:e7:b4:f4:f4:64:22:d8:c8:a9:c2:68:
3e:7c:af:46:a1:23:0b:f7:6b:8b:d0:ab:09:a2:2c:44:56:a0:
65:56:10:a5:a2:24:e8:d8:84:00:d5:70:11:f6:f8:22:1f:cc:
26:d3:df:39:81:c1:38:e1:7b:31:a6:ee:a9:91:13:ce:55:41:
2a:b1:6e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:49:02 2026 by rpki-client