Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: sh73DvefGjQfgqbpRWZ3tMbC0tBuqP7qxuQCRGOIKv0=
Subject key identifier: 65:6F:49:03:A8:6C:FB:5A:4B:53:1D:CF:29:17:F3:0D:AB:2B:65:42
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 01A0DA5FA8E4ECC00F5163534164A36423A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 21:01:37 +0000
Manifest this update: Fri 25 Sep 2026 21:01:37 +0000
Manifest next update: Sat 26 Sep 2026 21:01:37 +0000
Files and hashes: 1: 1-z0ycl8G0c1rEni_Vsqg-AmZtoM.roa (hash: MhYBDQjEGU5d72clowp4LieZVsR3hSZE1uwIFiaaRFU=)
2: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: jg6zgh5dTuzD+SMj50mSLjYcg56CSLTJ1A04dSzVU7o=)
3: KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa (hash: d0nit13az+nF5T9ApCvkfJ3swzvKAkAdbSMfvb/nFGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:a8:e4:ec:c0:0f:51:63:53:41:64:a3:64:23:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Sep 25 21:01:37 2026 GMT
Not After : Sep 26 21:01:37 2026 GMT
Subject: CN=656f4903a86cfb5a4b531dcf2917f30dab2b6542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:48:21:ab:d2:ab:8c:8d:a9:83:92:c7:07:f3:
99:a6:3a:60:86:f6:9f:d4:7c:8d:6d:9b:20:40:e8:
3a:48:e6:e0:b9:9b:f2:23:42:61:3a:6e:ff:d2:d6:
4f:c9:0d:f2:8f:b5:c6:97:30:38:3d:d2:19:a3:72:
ac:13:8e:b4:4c:92:ac:5f:b0:8b:25:56:d1:e1:b3:
03:5f:82:89:f2:36:1c:50:4c:6b:e2:57:92:19:ed:
51:77:b0:b6:af:61:47:0c:81:ae:a9:03:2a:1b:23:
e1:4a:39:b6:9d:20:ca:cc:f1:6e:d1:52:b2:2a:9e:
4f:75:cc:41:ae:72:70:5a:c7:f4:58:4b:e9:62:54:
6a:a5:e1:f7:cf:e8:dd:db:8b:6d:3e:06:c7:12:92:
aa:d5:dc:a5:10:36:80:88:c5:8c:8d:00:8a:fa:d7:
58:03:b9:d6:74:51:ad:fb:7e:aa:9a:25:60:0b:d6:
b2:ce:c3:5f:38:ca:4b:3e:32:a7:3e:e4:4d:89:c8:
e5:31:bd:73:02:f6:e6:25:0d:ac:c8:ff:3a:ee:e1:
c8:9d:d9:f1:ca:53:c0:30:34:d4:94:ea:06:88:79:
e1:d5:99:b7:32:ee:1b:b8:79:30:26:db:44:60:09:
bd:aa:5b:09:1a:7e:b4:11:c3:b0:90:8a:0e:28:e8:
6c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:6F:49:03:A8:6C:FB:5A:4B:53:1D:CF:29:17:F3:0D:AB:2B:65:42
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:11:e2:8a:c4:50:b4:d3:40:91:1b:14:c2:cc:08:4c:e8:3f:
1a:4b:a1:da:39:6a:26:96:ef:f0:1e:13:83:57:1f:15:09:bb:
9b:2b:cd:6a:5b:7c:31:1f:98:15:0f:17:40:ed:8d:8c:4e:8b:
ae:96:0b:e8:df:5e:16:3c:6b:0a:f6:9f:81:8e:32:56:a4:84:
7d:3c:49:85:8d:26:ec:72:e7:bc:f9:18:7c:99:95:df:02:29:
7d:aa:88:42:9d:d5:4d:9d:fe:f9:a1:83:11:6a:c4:55:c7:25:
96:f7:5e:c7:0b:36:49:83:53:af:72:e3:79:b7:7e:43:99:49:
02:5d:3d:d1:dd:7f:45:30:a9:cd:61:80:0f:e1:db:bf:30:2e:
4e:a3:91:63:92:9f:41:45:29:8e:ce:9b:68:65:3a:aa:82:a7:
97:cb:57:ce:a6:82:b1:f2:24:15:a1:86:a6:55:a1:c2:37:3f:
b4:07:36:0a:0c:1c:11:f0:26:dc:cd:2c:ca:94:8a:60:fb:76:
0f:4e:8a:01:2f:f9:d9:fb:f1:80:30:ff:6f:7b:c9:ab:83:8c:
a7:02:d8:16:d6:77:92:8c:46:05:32:ab:d0:35:16:ec:36:55:
89:34:5d:88:59:c0:ae:b2:dd:48:8f:04:30:23:5a:dc:62:ec:
d3:15:13:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:41:41 2026 by rpki-client