Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: vt4urZHSH7wurMGLrgltuLCORJbdgKpHS+lbsgktiZI=
Subject key identifier: E0:74:B5:D2:3C:1B:4F:A2:F7:42:99:93:4B:2D:BA:16:EB:04:45:51
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 019D9774B13AF56395DE627CE165E5382736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0E0B
Signing time: Thu 16 Apr 2026 18:01:40 +0000
Manifest this update: Thu 16 Apr 2026 18:01:40 +0000
Manifest next update: Fri 17 Apr 2026 18:01:40 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: E+QazR6WYx736ozZjaQp+d+m/jfLHzLBI00zZIP3tHw=)
2: rrV62ijQPMJX14hvzKMZztvUerc.roa (hash: qf9E3VmwVfV6USXHUXb50PtIEki9bvKr+AmM9c2BKVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:b1:3a:f5:63:95:de:62:7c:e1:65:e5:38:27:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Apr 16 18:01:40 2026 GMT
Not After : Apr 17 18:01:40 2026 GMT
Subject: CN=e074b5d23c1b4fa2f74299934b2dba16eb044551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:d6:0f:d0:96:c2:00:2f:4f:8e:93:fd:59:
c7:c3:b0:5c:6a:01:9a:12:cd:f2:30:18:b9:f5:ae:
6c:b4:03:d0:00:eb:49:c9:f7:54:3e:b2:f6:38:33:
19:01:69:57:2b:b0:9d:36:cb:61:4c:7c:9d:05:6f:
41:c9:9b:ed:18:1f:a0:70:ba:51:9b:0a:2a:a4:c3:
1e:90:fd:18:e9:96:dc:9c:99:d8:82:ed:cd:a3:eb:
72:6f:9a:02:47:5e:9c:ea:1d:db:b2:f9:13:47:5e:
5d:68:e3:dc:15:74:98:30:f7:93:1a:c2:f3:81:0c:
24:80:18:14:94:a1:86:5d:0a:33:5f:40:3d:a1:62:
ce:54:16:ae:53:e6:48:13:50:67:45:d0:81:ee:be:
64:3c:2d:dd:6d:63:17:4a:e6:72:0b:ab:e6:35:80:
1a:f5:5f:6f:ac:f2:92:91:e9:7d:e0:10:30:5f:c3:
3b:fc:01:5b:31:29:68:25:21:6c:d8:b8:f0:d0:93:
19:17:1c:14:ec:ed:04:e7:0c:e1:56:54:82:e9:f2:
02:72:14:6a:9b:38:bf:1b:9a:94:6c:c6:98:f8:1c:
ba:49:ca:67:ee:db:eb:2a:a0:6e:ed:85:54:5f:6c:
c1:2d:33:1c:1c:16:e0:47:e7:e2:27:fd:49:1d:5b:
53:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:74:B5:D2:3C:1B:4F:A2:F7:42:99:93:4B:2D:BA:16:EB:04:45:51
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:8e:07:de:e0:59:4f:4b:51:24:fb:01:15:d7:91:b9:42:1d:
97:61:a3:52:a1:f8:31:be:97:0d:19:15:66:42:09:e5:75:69:
43:9b:9f:d7:89:b7:65:f5:b4:c1:25:b2:6e:f1:15:7a:be:1a:
79:f5:96:d6:84:84:cf:1d:e2:7b:db:39:2c:58:a1:ee:cc:f4:
4f:8e:10:3a:e2:e7:9a:b7:30:37:d8:8b:5a:a6:71:2d:e1:c2:
fb:c1:ba:3b:a8:99:b1:61:3c:3d:a2:92:cb:95:f0:f0:7c:f9:
de:3f:6a:36:6e:f1:d1:79:1f:21:cf:5d:ba:7f:01:e4:92:51:
40:d4:97:95:e9:5c:2c:0d:d3:03:65:a7:81:01:7e:a5:a2:18:
28:b1:30:e4:98:2b:12:b5:36:ca:f2:46:6e:51:cd:87:57:4b:
e4:26:b2:b9:3b:91:16:90:5b:c1:1f:c3:27:2f:a2:e7:eb:4c:
15:5c:be:c6:0e:a5:1f:58:4c:a7:52:67:c3:56:36:c7:23:ff:
b4:d4:35:6c:68:79:5f:b1:ff:e9:ec:d5:48:30:42:a3:0d:31:
8f:de:8f:07:9d:b3:0f:07:4e:26:be:0c:2b:a0:4a:c6:f5:32:
0c:71:f7:75:e5:d8:47:63:fe:26:a7:92:ac:b2:66:2e:39:5a:
4b:fc:2f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:03 2026 by rpki-client