Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: k/oIrZrzPUdV0XQZ4WaFyicOr5MYHCI/6IuikbNvKTg=
Subject key identifier: 1A:FC:10:8C:26:5F:DA:AB:3B:27:11:1B:77:2A:E3:8C:C5:F5:8C:DE
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 019F921116104F9A281BD8C63C1A0ED194EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 03:00:20 +0000
Manifest this update: Fri 24 Jul 2026 03:00:20 +0000
Manifest next update: Sat 25 Jul 2026 03:00:20 +0000
Files and hashes: 1: 1-z0ycl8G0c1rEni_Vsqg-AmZtoM.roa (hash: MhYBDQjEGU5d72clowp4LieZVsR3hSZE1uwIFiaaRFU=)
2: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: 5yZ8Pz/VOsdhSf/+cxW2kq5djgzqBIh779rACtdDeF0=)
3: KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa (hash: d0nit13az+nF5T9ApCvkfJ3swzvKAkAdbSMfvb/nFGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:16:10:4f:9a:28:1b:d8:c6:3c:1a:0e:d1:94:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Jul 24 03:00:20 2026 GMT
Not After : Jul 25 03:00:20 2026 GMT
Subject: CN=1afc108c265fdaab3b27111b772ae38cc5f58cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6f:53:3a:21:54:f7:40:e4:50:e8:7e:ef:69:
0d:0f:87:a4:1d:0e:23:3e:08:95:09:b4:55:66:2d:
b5:52:d2:a9:c0:73:45:30:1d:24:81:9d:b2:15:6b:
dd:b0:b7:8a:6d:a1:d9:87:bf:73:0f:99:a0:da:2c:
2e:4d:db:37:c8:5b:78:76:8f:ee:b5:71:95:1e:5d:
6b:a4:42:0d:17:cc:f7:57:b1:ec:49:d9:d1:5c:a7:
03:73:1c:9d:9c:15:6b:b1:02:b0:01:2d:45:dd:25:
3e:2e:3e:91:58:38:de:da:08:a0:6b:cd:34:53:45:
6f:53:13:6a:8d:75:1a:19:0c:c9:f4:e7:c6:ad:21:
a8:f2:8a:f9:49:21:71:60:f4:b4:f5:bd:41:4b:36:
f7:15:7b:57:95:61:8d:f4:49:9d:3a:83:b6:96:3a:
47:6e:af:32:c5:74:52:2f:21:8f:79:d5:26:2f:ac:
c9:c8:dd:68:ba:12:cd:21:52:ff:18:40:9d:9b:10:
2c:a1:6c:77:fd:00:af:8a:88:37:06:f7:03:9d:93:
99:f7:e4:06:69:39:1c:0c:70:ec:01:60:d3:e4:ad:
08:02:70:37:f2:50:db:5f:ac:6a:4e:d6:73:59:c5:
b7:80:a3:5d:24:c0:fa:52:6d:d5:89:b9:d2:16:dd:
3d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FC:10:8C:26:5F:DA:AB:3B:27:11:1B:77:2A:E3:8C:C5:F5:8C:DE
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:16:d5:21:58:4e:d5:02:e1:66:15:08:7c:2b:b9:3b:58:e9:
1c:6f:94:3a:57:56:22:e2:26:27:cb:b3:f0:4e:bc:34:a0:a8:
b0:4e:61:c5:36:27:4e:1a:03:8a:c1:de:bd:62:17:aa:5f:c5:
17:6e:1a:11:56:f9:fa:5d:42:9d:62:91:c0:7b:f5:de:a0:1b:
9b:f5:dd:20:77:e1:3d:7f:dd:5c:ba:6f:e2:04:1d:6c:9b:15:
43:6c:b8:f8:21:7c:04:20:57:c7:25:fe:e6:7c:8c:c4:70:be:
90:86:9e:bc:20:99:23:97:7f:f0:3c:53:9a:d4:76:06:40:a2:
5f:f3:81:ee:71:0a:3a:a1:bf:09:82:16:cc:73:77:40:44:e7:
5b:9a:77:82:c9:b8:aa:a7:b6:83:83:17:fc:71:20:37:90:70:
36:98:be:c2:74:a6:3f:f4:96:3b:16:7a:1d:44:7e:14:c7:e1:
5c:3f:8a:0a:32:cd:d0:e8:87:30:ea:cf:68:bb:19:25:77:5c:
cb:ff:0e:e8:ca:79:32:b1:38:73:09:43:4d:82:75:ca:a0:db:
0c:fa:3b:04:7d:a4:7e:95:c0:3a:e2:1c:2c:99:c7:3e:38:54:
ce:26:da:ba:d8:04:e0:8c:93:83:99:fc:0d:b7:3d:14:ba:94:
29:88:3f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:48:25 2026 by rpki-client