Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
File: 8ZZVtZqGTK1zzClfT3j_g8roaqw.mft (raw, json)
Hash identifier: n6h+RKYeKw0pQqCIl/235aQhmKT67SrDcickFzavgI4=
Subject key identifier: DE:52:7C:A1:EA:ED:CE:C9:BC:14:56:DB:60:7A:55:85:4B:F3:6F:FD
Authority key identifier: F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
Certificate issuer: /CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Certificate serial: 019D26281ACFAE60950AC0D14FFAA86278A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 18:00:55 +0000
Manifest this update: Wed 25 Mar 2026 18:00:55 +0000
Manifest next update: Thu 26 Mar 2026 18:00:55 +0000
Files and hashes: 1: 1-z0ycl8G0c1rEni_Vsqg-AmZtoM.roa (hash: MhYBDQjEGU5d72clowp4LieZVsR3hSZE1uwIFiaaRFU=)
2: 8ZZVtZqGTK1zzClfT3j_g8roaqw.crl (hash: WNabkIoWbGpSJ4sEgR8RcVUfjjuSOIsXcgUQmt1X348=)
3: KzGAmIcyAKPdwjPVZFF_DeGrYi0.roa (hash: d0nit13az+nF5T9ApCvkfJ3swzvKAkAdbSMfvb/nFGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:1a:cf:ae:60:95:0a:c0:d1:4f:fa:a8:62:78:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19655b59a864cad73cc295f4f78ff83cae86aac
Validity
Not Before: Mar 25 18:00:55 2026 GMT
Not After : Mar 26 18:00:55 2026 GMT
Subject: CN=de527ca1eaedcec9bc1456db607a55854bf36ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b8:52:90:c2:c0:2e:ee:df:ff:44:6e:3f:fa:
fa:5e:f6:9f:53:70:04:7c:6e:78:40:f7:78:95:e8:
1e:29:a9:dd:dc:78:5f:d5:4b:6f:41:71:b0:a2:68:
21:8e:1c:88:5a:9f:de:32:79:bf:e5:fc:de:a1:60:
fd:85:33:bf:00:44:c7:95:2b:e0:cb:ef:34:cd:1d:
55:42:84:95:a8:a8:4e:38:28:bf:cd:1e:b8:36:c4:
07:96:4b:01:fa:12:50:6a:91:7d:98:36:41:1f:10:
40:a8:3c:b0:1c:dd:dc:72:2f:02:0c:3e:b6:3a:b6:
5a:5e:e3:ed:93:35:db:77:06:2d:91:77:a2:16:23:
90:57:93:36:b1:af:1c:38:83:e7:55:50:e5:70:e9:
54:b5:5b:05:09:af:93:27:46:84:a5:93:b4:80:46:
2e:05:9e:d4:58:4a:8b:76:ee:79:27:d3:2f:d9:d8:
16:0f:0e:da:4a:f5:33:19:e5:5c:97:d4:09:58:1a:
fd:6f:c9:4e:5e:4f:e7:de:00:00:e1:27:38:2e:57:
6d:cb:3f:18:01:5c:f0:b0:27:22:6a:d5:cb:38:59:
15:13:0a:57:98:2b:0c:d5:bf:5b:01:2f:9b:2a:6b:
ae:06:ee:9f:14:4c:77:36:99:f0:64:52:88:38:bd:
49:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:52:7C:A1:EA:ED:CE:C9:BC:14:56:DB:60:7A:55:85:4B:F3:6F:FD
X509v3 Authority Key Identifier:
keyid:F1:96:55:B5:9A:86:4C:AD:73:CC:29:5F:4F:78:FF:83:CA:E8:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZZVtZqGTK1zzClfT3j_g8roaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/2bd1dc-ade1-46c9-b9c0-339ee700af6f/1/8ZZVtZqGTK1zzClfT3j_g8roaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:32:da:2f:d7:54:c1:a7:77:fe:bc:99:f8:42:18:0b:61:de:
d8:68:c4:af:68:b7:e5:b5:70:78:33:be:6e:3f:fc:01:b7:92:
05:fc:1b:c9:a1:03:4f:0f:5f:88:d1:07:53:5a:2c:6e:93:d9:
73:ca:ce:17:76:02:b1:ce:50:1c:d7:65:b2:3f:aa:7f:db:ea:
fe:d1:23:95:77:11:2a:86:99:ff:27:4f:3c:88:6c:eb:07:59:
16:0b:b8:a6:80:cd:32:4a:1f:3d:0b:b4:d9:a7:47:1d:55:fb:
ec:78:ad:2b:0b:d7:1c:b8:b6:f1:98:f5:c9:c6:cc:f4:f7:39:
98:5f:7b:e3:c2:95:5c:6e:99:56:57:07:c5:4c:67:82:ed:f7:
da:c8:5b:b4:e9:5b:4a:a5:d0:76:06:c3:09:32:aa:f4:1a:9f:
1f:9a:90:45:57:a5:11:05:b1:99:c8:e9:8d:dd:d6:9f:fc:2a:
4d:0f:4b:3f:44:e5:c1:09:59:86:5d:09:d7:d3:35:6f:dc:fe:
f0:bd:5e:33:1e:14:b9:23:af:3a:e4:e1:b8:f0:56:7a:1d:3c:
4d:13:d0:e2:53:0d:b7:bf:dd:fa:e7:57:13:c9:0a:51:2f:ae:
47:95:02:fc:92:77:be:53:1c:8d:06:f6:05:7e:c8:61:62:3b:
3e:4c:50:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mKBrPrmCVCsDRT/qoYnilMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOTY1NWI1OWE4NjRjYWQ3M2NjMjk1ZjRmNzhmZjgzY2Fl
ODZhYWMwHhcNMjYwMzI1MTgwMDU1WhcNMjYwMzI2MTgwMDU1WjAzMTEwLwYDVQQD
EyhkZTUyN2NhMWVhZWRjZWM5YmMxNDU2ZGI2MDdhNTU4NTRiZjM2ZmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bhSkMLALu7f/0RuP/r6XvafU3AE
fG54QPd4legeKand3Hhf1UtvQXGwomghjhyIWp/eMnm/5fzeoWD9hTO/AETHlSvg
y+80zR1VQoSVqKhOOCi/zR64NsQHlksB+hJQapF9mDZBHxBAqDywHN3cci8CDD62
OrZaXuPtkzXbdwYtkXeiFiOQV5M2sa8cOIPnVVDlcOlUtVsFCa+TJ0aEpZO0gEYu
BZ7UWEqLdu55J9Mv2dgWDw7aSvUzGeVcl9QJWBr9b8lOXk/n3gAA4Sc4Lldtyz8Y
AVzwsCciatXLOFkVEwpXmCsM1b9bAS+bKmuuBu6fFEx3NpnwZFKIOL1JfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN5SfKHq7c7JvBRW22B6VYVL82/9MB8GA1UdIwQY
MBaAFPGWVbWahkytc8wpX094/4PK6GqsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAt
MzM5ZWU3MDBhZjZmLzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi8yYmQxZGMtYWRlMS00NmM5LWI5YzAtMzM5ZWU3MDBhZjZm
LzEvOFpaVnRacUdUSzF6ekNsZlQzal9nOHJvYXF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjLaL9dU
wad3/ryZ+EIYC2He2GjEr2i35bVweDO+bj/8AbeSBfwbyaEDTw9fiNEHU1osbpPZ
c8rOF3YCsc5QHNdlsj+qf9vq/tEjlXcRKoaZ/ydPPIhs6wdZFgu4poDNMkofPQu0
2adHHVX77HitKwvXHLi28Zj1ycbM9Pc5mF9748KVXG6ZVlcHxUxngu332shbtOlb
SqXQdgbDCTKq9BqfH5qQRVelEQWxmcjpjd3Wn/wqTQ9LP0TlwQlZhl0J19M1b9z+
8L1eMx4UuSOvOuThuPBWeh08TRPQ4lMNt7/d+udXE8kKUS+uR5UC/JJ3vlMcjQb2
BX7IYWI7PkxQVA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:49:06 2026 by rpki-client