Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
File: 8Zzwl3G48YTKoaAEIbkpRJHpfms.mft (raw, json)
Hash identifier: HkTTzmMoDNHdx6GXVR5hSc/xowCsuoLyalkqDMnUjzM=
Subject key identifier: CF:5C:58:86:86:DD:3D:1F:15:18:82:52:A4:DC:54:90:F3:1E:1C:D1
Authority key identifier: F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
Certificate issuer: /CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Certificate serial: 019D27727F2D05E60F995AD7230EEF5C3561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 00:01:48 +0000
Manifest this update: Thu 26 Mar 2026 00:01:48 +0000
Manifest next update: Fri 27 Mar 2026 00:01:48 +0000
Files and hashes: 1: 8Zzwl3G48YTKoaAEIbkpRJHpfms.crl (hash: vVpegOc0sDzY9I4US+5OJDuNGZzGShSt+IzyGzHkl+4=)
2: tEiznCRaCEXuSiqwVe-1WIaGDGU.roa (hash: pOXbDIJbSmZy8KsnI5uOSVFdRgYoW3ngwx0TRZi2I7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:7f:2d:05:e6:0f:99:5a:d7:23:0e:ef:5c:35:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19cf09771b8f184caa1a00421b9294491e97e6b
Validity
Not Before: Mar 26 00:01:48 2026 GMT
Not After : Mar 27 00:01:48 2026 GMT
Subject: CN=cf5c588686dd3d1f15188252a4dc5490f31e1cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ec:9e:1f:43:e8:78:90:0f:93:e1:ca:ca:53:
c7:02:cc:81:d1:37:51:2a:e9:f2:71:55:47:c7:a2:
9d:95:61:b0:a8:58:74:e4:17:05:2f:9a:6d:02:ec:
4f:b9:07:e3:be:64:26:ea:55:29:05:f5:f1:c4:20:
b3:a0:d1:2e:f7:05:83:ec:e4:0d:23:72:6d:2c:ed:
1e:d6:01:63:6c:d6:66:34:f7:bd:ad:a4:b1:83:9a:
1a:68:f5:7a:88:51:66:ac:4b:ee:8c:a2:dc:2f:32:
b9:01:b5:21:0d:bd:2a:fe:f9:22:92:78:fe:bf:19:
c4:b8:1a:fb:e5:c6:92:5f:4e:e5:ba:61:b6:fc:3f:
94:7d:52:cf:f8:4c:4b:df:8a:db:53:42:17:0b:97:
d1:d1:a2:ed:83:38:8b:66:29:a1:6e:61:30:b4:1f:
52:d5:bf:14:ca:ea:2f:e2:c6:d7:ee:86:f2:10:09:
67:64:f7:31:89:4f:86:62:b2:11:0e:e2:61:2d:11:
aa:68:3b:5c:9a:3b:44:da:22:91:22:72:c3:2f:4b:
55:94:cb:98:43:40:bb:1a:b5:48:c8:bd:e9:a3:e2:
8c:de:e4:6a:09:fb:11:46:67:04:6f:02:37:1a:05:
26:71:37:fd:c3:72:1d:e6:0b:62:21:66:d9:0f:10:
a6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:5C:58:86:86:DD:3D:1F:15:18:82:52:A4:DC:54:90:F3:1E:1C:D1
X509v3 Authority Key Identifier:
keyid:F1:9C:F0:97:71:B8:F1:84:CA:A1:A0:04:21:B9:29:44:91:E9:7E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zzwl3G48YTKoaAEIbkpRJHpfms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/650c97-4eb6-4c91-b5a3-dc1db67db3cb/1/8Zzwl3G48YTKoaAEIbkpRJHpfms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e5:d7:3f:ee:ea:08:71:05:74:b3:68:ac:6e:9c:bf:ba:0c:
c5:cc:dc:20:cd:34:f3:36:3b:de:8f:92:ac:1e:c5:ad:78:4a:
b1:a1:64:e3:ae:1b:55:82:60:65:f4:8f:62:7b:15:d7:0d:e1:
e0:fe:e6:17:15:50:80:7d:1d:f2:66:4d:5e:3d:f1:10:91:27:
4b:8d:7c:1d:01:a8:03:db:a7:62:a9:52:f6:60:2a:e3:54:69:
4a:25:82:08:8d:b9:0b:72:1b:c0:c0:e6:82:5b:04:73:31:a6:
55:d0:74:b3:d5:22:62:29:9f:c7:25:1e:6f:13:a0:a4:2f:cf:
25:d3:0e:31:23:7b:00:67:51:02:3d:85:d3:f0:da:d3:1a:47:
06:35:49:19:78:54:54:b0:73:d2:06:f6:bf:bc:fd:7f:3b:be:
a2:4e:b7:ec:b0:f9:55:36:1d:63:2c:52:05:fe:71:c1:86:f9:
c7:27:2b:1f:28:f8:11:93:f1:41:9a:f0:5d:00:b1:81:7c:68:
7f:21:ac:b8:c3:9d:10:8e:67:c9:97:10:10:7b:ec:7c:71:0b:
f1:14:a6:d7:dd:09:6e:12:23:8c:2d:44:67:ca:1d:cd:dc:57:
bd:00:1b:7a:89:48:98:d0:24:87:c1:9e:15:26:69:4c:96:b8:
e9:d7:db:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:09 2026 by rpki-client