Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: h8XmfN49h2YspYcjeM9t7pTOtbCY6m0h+lZUjpAGyfg=
Subject key identifier: 31:BF:AA:50:FF:F5:6B:B5:05:57:40:85:16:61:87:3F:EB:B0:1F:94
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 01A0F37AE4A1A337D5690B38550FD64EBB27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 1A7D
Signing time: Wed 30 Sep 2026 18:01:52 +0000
Manifest this update: Wed 30 Sep 2026 18:01:52 +0000
Manifest next update: Thu 01 Oct 2026 18:01:52 +0000
Files and hashes: 1: 1-z0ycl8G0c1rEni_Vsqg-AmZtoM.roa (hash: MhYBDQjEGU5d72clowp4LieZVsR3hSZE1uwIFiaaRFU=)
2: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: 4Hwn3heHW4hPPUxRq4xg1Nf9ETI20YAx1bKbk+zuDzg=)
3: KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa (hash: d0nit13az+nF5T9ApCvkfJ3swzvKAkAdbSMfvb/nFGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 18:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:7a:e4:a1:a3:37:d5:69:0b:38:55:0f:d6:4e:bb:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Sep 30 18:01:52 2026 GMT
Not After : Oct 1 18:01:52 2026 GMT
Subject: CN=31bfaa50fff56bb5055740851661873febb01f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a0:ed:66:2c:fb:c1:02:51:f8:6e:cb:bd:0e:
6c:04:23:86:6b:2d:67:ec:81:a7:a1:8c:f1:06:fa:
1e:c8:6d:b8:da:90:e3:5c:91:26:d4:0e:3b:1b:93:
74:63:fe:17:bd:03:4a:24:82:f3:3f:61:6a:87:3b:
00:65:18:9d:1e:bf:ad:56:c7:63:2c:f4:7f:5c:0a:
9a:04:13:c7:90:7f:74:f3:06:a3:1d:f5:2d:cf:e1:
f7:a5:ee:0f:58:7b:8d:b2:1e:96:07:a3:66:5e:e3:
db:1f:88:de:9e:9f:d4:56:74:49:67:31:6e:b4:58:
7a:4d:dc:ef:72:47:01:d1:4b:e7:93:75:f0:65:b8:
95:e3:98:95:1d:c0:4c:64:bd:13:e4:9c:28:f3:da:
64:2b:2c:b1:67:5c:c4:fd:ee:d4:df:da:c4:f2:26:
b7:df:20:d9:96:db:e5:5a:9c:42:d5:bf:cf:7b:28:
50:f7:b3:99:64:08:1b:b1:04:ba:17:a9:d6:1e:02:
86:b1:aa:51:ab:1b:75:a3:2e:54:2d:16:49:cd:f8:
d5:ee:3b:9e:ba:7f:97:84:5d:aa:8a:64:7d:ed:19:
b8:88:07:2c:ab:0f:bc:d4:d8:ef:a9:17:e4:92:f7:
f8:a1:37:59:57:84:81:e5:d4:f1:5d:ed:ec:f8:88:
c2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BF:AA:50:FF:F5:6B:B5:05:57:40:85:16:61:87:3F:EB:B0:1F:94
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2e:6e:40:60:74:da:41:48:10:9f:6b:77:a3:d9:05:3f:c4:
6d:9b:00:5e:2e:2a:5d:f8:6b:f9:d3:34:21:58:b8:49:ac:c3:
31:52:a4:4e:60:c0:c8:b6:26:6c:f0:cc:10:94:b3:01:ae:9f:
7c:ae:cb:a7:a1:2e:cd:88:2b:11:03:8f:aa:fe:f3:65:e4:45:
91:66:5f:d9:c5:88:38:49:a6:f5:19:9c:96:ab:1b:63:a6:00:
20:6d:4f:ec:82:18:41:b7:4d:e1:8f:a5:28:c0:8c:3b:c0:d1:
5d:83:06:2c:05:d2:50:f3:6f:c9:0a:ed:de:c2:d4:0d:d5:3d:
23:ce:a5:2c:78:55:67:0f:ad:c4:06:32:d2:48:07:88:75:79:
96:09:b9:f6:ff:9d:a4:af:60:7c:c4:83:a3:52:a6:a8:c1:5b:
43:18:6e:f9:f8:9d:70:59:89:24:b7:0e:f9:14:7f:77:fd:af:
02:1b:11:36:da:48:6b:7b:c4:b3:66:97:78:f2:d1:ee:dd:86:
7c:d5:c2:4c:36:10:3b:ea:d9:61:1b:43:d6:01:dd:29:ea:27:
bf:9d:09:32:09:bf:d5:44:c3:1c:16:d1:06:8c:3b:da:4f:9c:
ba:8b:ae:8f:f6:0f:39:56:da:15:1a:af:14:65:77:c2:41:51:
21:03:1f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:00:58 2026 by rpki-client