Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: nQsAfmUlVick+0ryNtVq47tBCJldDZNgn0/jbA8kUxU=
Subject key identifier: 55:DC:BA:66:09:DB:39:9E:0B:30:DC:41:24:8B:68:E6:79:8F:48:61
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 019CABD99E6AD3B621CA66D9211BD5E61710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0D91
Signing time: Mon 02 Mar 2026 00:01:31 +0000
Manifest this update: Mon 02 Mar 2026 00:01:31 +0000
Manifest next update: Tue 03 Mar 2026 00:01:31 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: O3D32ZpccYKqAhxQ6X2rg2OkoJUjh4adHRizG+8ax9Y=)
2: rrV62ijQPMJX14hvzKMZztvUerc.roa (hash: qf9E3VmwVfV6USXHUXb50PtIEki9bvKr+AmM9c2BKVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:9e:6a:d3:b6:21:ca:66:d9:21:1b:d5:e6:17:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Mar 2 00:01:31 2026 GMT
Not After : Mar 3 00:01:31 2026 GMT
Subject: CN=55dcba6609db399e0b30dc41248b68e6798f4861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e0:2a:3d:f7:65:f2:b6:a0:26:ce:4d:ff:3c:
2f:b3:53:b6:f4:45:82:f3:c7:59:2c:96:08:a7:06:
d6:34:34:77:1e:57:fb:94:67:d3:fe:8f:67:9e:87:
14:42:06:fb:7a:1a:53:60:29:dd:3d:50:64:cc:4c:
64:5d:44:2e:3d:dc:62:eb:0a:65:97:41:3a:1b:99:
cb:74:85:c2:bf:bd:03:98:66:1b:ad:c0:c2:ef:1b:
13:93:d4:fc:3b:ed:30:62:1b:38:a6:60:6d:1e:fe:
8d:c7:34:ab:ed:52:c5:95:72:b7:a3:02:f3:3d:0b:
ac:ae:5b:0b:e8:d4:2a:6a:cb:d8:5b:0c:75:47:c0:
a3:87:16:5c:30:01:1f:6b:13:e5:1d:65:a1:ec:60:
b9:f2:d5:5d:2b:71:e2:f6:a5:6d:86:50:23:da:1a:
5e:4e:5c:20:b5:7c:f7:da:f6:7d:db:00:aa:b5:a4:
f7:5c:a4:1c:87:da:92:bd:e4:9d:21:b1:d2:ad:c1:
ce:f9:d5:a7:e1:27:66:8f:59:0f:44:30:b2:9c:6f:
35:ab:a0:c1:d1:81:d8:9d:88:a5:d9:d2:d0:40:65:
6d:66:c8:c1:7c:0a:92:7b:80:25:90:47:7a:5f:2c:
b5:ee:e1:0a:84:6b:7c:c6:55:1f:a0:f6:a1:dd:13:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DC:BA:66:09:DB:39:9E:0B:30:DC:41:24:8B:68:E6:79:8F:48:61
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4d:f2:55:e8:2b:b5:3f:3f:95:ad:17:96:ad:c0:e1:fe:9f:
94:12:e6:7d:7d:1a:42:8b:88:41:d0:5a:bc:17:a2:3a:05:cc:
d6:5d:0b:70:cf:83:9e:71:5d:d5:e9:a2:0b:98:8d:f4:5d:c0:
a0:f6:07:12:6d:18:63:0c:88:e1:b4:d9:ba:dc:c7:5a:91:36:
f3:6d:69:c7:a7:b6:7f:b2:b5:6e:6f:5b:bc:7a:ae:d5:7f:05:
44:74:86:fa:d1:f3:01:8a:87:b2:19:62:30:4e:70:8e:32:e4:
24:d4:c7:bc:4e:f7:01:08:32:7d:83:e9:d5:57:e6:85:3e:7c:
06:07:54:90:90:d6:8d:fd:32:75:05:fc:19:a8:0d:4d:27:e6:
72:01:40:37:7e:81:8e:67:64:5d:b4:05:4d:6b:65:0b:1e:18:
cf:4e:00:52:d5:c7:d8:97:00:9f:9c:20:51:9c:8b:65:3a:58:
12:43:41:87:df:d2:68:db:a4:fe:da:cc:3b:90:2f:5e:72:69:
7d:e7:79:11:ce:b8:46:fd:20:22:29:3c:39:0f:f3:76:93:f0:
40:78:11:ad:0a:78:3e:90:3a:8c:55:43:0f:d6:6d:a3:f1:d2:
0e:04:2d:29:ed:f7:ce:d8:4a:8e:7f:3b:ae:fa:d4:c0:8d:60:
54:03:ec:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:48:09 2026 by rpki-client