Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: 4ci/jOCzCzLDRo0dJVdNQOa9N1yGIO5B7qZRS6gMlWQ=
Subject key identifier: C1:F5:E1:FD:D7:75:F1:D6:06:29:9C:BD:52:5F:B4:E7:08:A4:57:05
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 019E1D599BDC21DCED8E26AC1514D0D90CB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 1905
Signing time: Tue 12 May 2026 18:01:12 +0000
Manifest this update: Tue 12 May 2026 18:01:12 +0000
Manifest next update: Wed 13 May 2026 18:01:12 +0000
Files and hashes: 1: 1-z0ycl8G0c1rEni_Vsqg-AmZtoM.roa (hash: MhYBDQjEGU5d72clowp4LieZVsR3hSZE1uwIFiaaRFU=)
2: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: NOjdIu5Jw9bCy3YLGzHYBHkWhglQ41v8tfesul3Oq70=)
3: KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa (hash: d0nit13az+nF5T9ApCvkfJ3swzvKAkAdbSMfvb/nFGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:9b:dc:21:dc:ed:8e:26:ac:15:14:d0:d9:0c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: May 12 18:01:12 2026 GMT
Not After : May 13 18:01:12 2026 GMT
Subject: CN=c1f5e1fdd775f1d606299cbd525fb4e708a45705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e1:54:65:47:95:3a:67:55:c8:42:02:d6:38:
26:59:82:ed:b5:0f:f7:25:c9:0a:d9:ea:d6:2c:0c:
c9:9b:32:e6:45:a2:b0:37:06:f9:2f:d1:4f:69:bf:
56:79:ce:3f:19:b9:83:7c:ff:a6:9c:a3:41:29:fc:
49:19:e3:3c:89:77:dd:f0:14:50:4e:9b:1c:e5:ab:
32:41:34:81:c5:3a:a3:f1:4b:e1:a2:c6:b2:b6:ad:
5a:fb:cf:ef:df:d6:b9:6f:db:a3:6d:fb:b8:4d:e7:
62:f8:83:f8:ee:70:b0:d9:46:08:8d:10:35:e2:11:
b9:11:db:af:e0:6d:3b:99:46:13:21:2b:1f:a7:07:
60:e3:94:b4:41:32:0f:17:2f:78:5c:36:9a:bc:d5:
dc:d2:de:20:d0:af:61:57:15:48:f9:f1:97:14:01:
1b:6c:f0:63:a5:b7:36:e8:4a:d5:02:97:f3:e7:02:
f7:7f:53:51:1f:3d:ec:40:28:65:f0:57:ba:ae:d0:
db:9d:98:25:99:3f:35:28:1b:b0:57:85:fd:49:4e:
82:7f:8d:f9:c9:24:1f:b7:21:39:61:d0:74:56:4c:
43:c1:4b:9e:14:4f:26:0e:33:9f:75:4b:85:43:84:
fe:53:4a:9a:dc:f7:57:a4:20:4f:53:b6:22:c8:26:
60:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F5:E1:FD:D7:75:F1:D6:06:29:9C:BD:52:5F:B4:E7:08:A4:57:05
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:1c:95:b7:b4:2c:75:57:c0:b1:49:fd:be:96:8b:aa:a0:42:
6e:10:38:f0:7c:9c:3b:09:85:66:0c:15:6f:fa:a9:59:01:99:
7d:eb:25:c2:e6:f5:81:91:f0:d0:9e:9b:d6:08:ae:d8:fd:ed:
62:56:0d:3b:ab:74:00:d9:23:5d:6b:82:8a:c3:c8:f4:1e:31:
6a:6d:34:a2:67:fd:23:93:79:3d:f1:c5:16:8c:e7:0f:c6:cc:
28:ac:1f:36:2d:66:98:9c:89:05:ff:12:9e:24:9b:73:41:74:
2d:e6:43:72:d1:cf:08:9f:e7:b6:3e:95:a6:9e:5e:86:00:69:
c9:a1:b2:7b:5d:c5:2e:f7:15:7a:4f:4c:50:de:fa:06:7e:2e:
b4:b2:33:55:a4:9e:a0:74:b7:19:02:67:36:f1:45:99:54:79:
e9:fb:ac:3b:7c:02:a7:55:87:9a:59:3b:00:33:6c:f7:91:df:
13:e8:b3:02:e3:20:67:e6:12:77:20:b9:05:91:ab:13:62:c1:
4b:e4:ca:41:1f:85:1a:03:bc:55:76:bd:72:1a:13:a0:24:40:
6f:de:03:f9:75:86:2c:53:26:87:5e:97:a3:e1:30:3f:f8:07:
7b:b5:25:36:1c:36:9d:db:97:75:f2:15:81:5e:a4:41:ef:29:
bb:73:95:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:22 2026 by rpki-client