Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: 6wB9kGszE7ZZRqPvAyPD/ixen8yP/QSHdHK70ss5wjE=
Subject key identifier: A7:20:6F:4C:72:F2:31:E5:DE:39:C5:78:D3:51:51:B9:55:0B:57:22
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 01A0C28DD0E2863B2A0A831678AC6D685FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0FAF
Signing time: Mon 21 Sep 2026 06:01:08 +0000
Manifest this update: Mon 21 Sep 2026 06:01:08 +0000
Manifest next update: Tue 22 Sep 2026 06:01:08 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: g42izxcD5K2I2V5PMyZp2eK6PhCFfoxEPqONAdxd+B0=)
2: rrV62ijQPMJX14hvzKMZztvUerc.roa (hash: qf9E3VmwVfV6USXHUXb50PtIEki9bvKr+AmM9c2BKVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:d0:e2:86:3b:2a:0a:83:16:78:ac:6d:68:5f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Sep 21 06:01:08 2026 GMT
Not After : Sep 22 06:01:08 2026 GMT
Subject: CN=a7206f4c72f231e5de39c578d35151b9550b5722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:12:a2:4d:32:e9:28:68:77:b7:38:26:ee:
d2:a2:4b:b6:de:c5:b7:18:ed:1c:25:4a:9c:44:7b:
d4:1e:9c:af:0a:86:b8:15:28:3b:bd:c2:af:80:60:
98:7d:76:af:84:67:2f:a2:a5:e0:a3:ac:60:d1:90:
10:11:a8:06:e3:f7:bf:d9:3c:1c:1b:93:78:86:1e:
74:10:a3:7c:83:a1:6f:6a:5f:cb:b2:f4:03:04:3e:
f6:1c:3f:3e:c1:13:7e:c0:79:74:c8:64:f5:7b:76:
31:cb:44:79:0c:69:5a:34:59:74:21:66:11:af:55:
3d:b2:2f:dd:fd:72:c9:ed:67:5c:d5:9f:a5:a9:a8:
c8:6e:60:e3:b9:33:f3:06:60:6f:37:ca:36:b5:dc:
28:01:c0:4e:ca:1b:1b:b9:d8:8b:28:ea:40:69:06:
ae:4f:d0:81:1b:80:6f:b2:69:fa:77:15:df:e0:ca:
8f:f9:20:83:8e:19:a8:29:5d:bb:3c:11:ed:8a:39:
d9:ac:a5:56:62:1e:94:1c:b3:3c:26:f9:c2:3a:ee:
50:d4:ce:27:ed:ca:91:ae:98:49:00:38:34:fe:cb:
bd:48:1e:29:03:61:39:e9:a5:03:fa:f8:22:30:44:
ee:8d:16:7b:d5:78:34:95:7a:3a:50:1a:0b:db:f8:
c0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:20:6F:4C:72:F2:31:E5:DE:39:C5:78:D3:51:51:B9:55:0B:57:22
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:98:ef:11:92:25:1c:9f:35:89:38:67:9a:ef:12:2c:81:5e:
b7:d0:d3:d2:7c:05:42:26:84:bb:cd:e7:16:f6:f4:a6:82:35:
8b:d4:5b:a1:55:a3:fd:ce:48:b2:58:ca:e9:d0:2b:52:7f:1c:
0d:07:cf:27:2c:14:04:bf:ba:df:fb:a8:da:52:00:7e:1e:64:
af:58:a5:c0:b4:50:8f:27:92:81:05:17:cc:00:a7:53:3c:89:
cf:a1:03:a4:01:f7:c6:4e:16:83:23:d2:73:42:b5:78:b4:17:
ce:63:49:4b:cb:3f:84:cc:3e:35:96:ff:49:42:96:d4:a8:e3:
4b:44:f1:61:00:a8:00:1e:87:82:8d:cd:0b:9b:83:c3:88:a7:
81:59:0c:79:02:9b:4b:4f:6b:a3:78:c7:8a:1f:1e:78:36:f2:
c2:5a:ca:4e:69:f6:90:cd:49:0b:04:97:ef:20:7e:42:42:41:
b6:d5:29:fb:f2:4f:b7:75:41:d1:c7:74:95:99:5c:c0:30:07:
e4:74:dd:8e:bf:5c:55:2e:7a:ab:c5:d7:a2:3e:8e:10:c3:46:
8a:c2:bb:05:26:31:f4:56:fa:3d:f6:3b:ef:13:c8:9a:11:10:
ed:17:af:94:68:78:d5:7a:0b:bb:7d:04:12:c8:f7:27:5e:f2:
da:3c:0d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:20:07 2026 by rpki-client