Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: 48m5cNfKrbLf/vtegCle4cv6BN4htCkux70toWJpGvQ=
Subject key identifier: E7:9D:98:84:D3:EB:5E:32:A4:D8:95:81:91:96:9A:98:BE:D9:87:70
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 01A0C09F649E22B30C2D263F541711F9D3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0FAE
Signing time: Sun 20 Sep 2026 21:01:06 +0000
Manifest this update: Sun 20 Sep 2026 21:01:06 +0000
Manifest next update: Mon 21 Sep 2026 21:01:06 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: 3Jm/sBzXzXn9VL+Ec6XrXISZHCadrrYZDDS6/x93lgs=)
2: rrV62ijQPMJX14hvzKMZztvUerc.roa (hash: qf9E3VmwVfV6USXHUXb50PtIEki9bvKr+AmM9c2BKVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9f:64:9e:22:b3:0c:2d:26:3f:54:17:11:f9:d3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Sep 20 21:01:06 2026 GMT
Not After : Sep 21 21:01:06 2026 GMT
Subject: CN=e79d9884d3eb5e32a4d8958191969a98bed98770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:81:eb:78:b4:7d:49:85:c3:d6:39:ec:c7:
90:f7:57:f2:61:f0:a2:fb:e2:f7:85:0c:89:62:17:
b2:6b:66:b4:ee:e6:2b:60:f5:60:0a:c1:da:ee:ce:
51:24:e1:9c:f9:ff:2b:6a:db:4f:81:d0:c2:88:1c:
d9:1e:e1:8d:93:a3:d3:40:c8:10:ed:85:53:21:db:
89:09:bb:ea:96:bc:ff:34:3a:e8:57:c6:f8:73:0e:
e3:14:94:19:6e:41:1d:87:45:ef:ca:88:84:5a:6b:
0f:31:a7:c2:59:f5:80:a8:f7:17:0e:94:70:c4:6d:
f8:01:7a:bb:46:6f:3d:81:5a:9e:e2:bb:f7:af:20:
f2:1f:15:cd:f0:89:b3:90:6c:a6:06:db:d5:17:39:
27:7d:d8:13:41:6c:2f:6d:25:2a:02:7f:c8:b3:84:
de:25:d5:0a:90:af:3c:45:f9:59:f7:8b:a8:4f:0f:
47:a9:21:27:74:98:34:c6:3e:e1:8c:10:14:a4:72:
52:c7:06:70:9f:29:1a:6a:51:ca:6b:69:e1:e8:1e:
45:87:f4:10:5d:ad:6f:e8:d0:03:75:f1:ca:02:78:
2f:6f:f0:1c:55:a8:dc:31:d8:5c:e1:87:62:3d:30:
8d:ab:14:4a:0b:cb:64:30:c7:8f:de:22:49:f1:2a:
11:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9D:98:84:D3:EB:5E:32:A4:D8:95:81:91:96:9A:98:BE:D9:87:70
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e9:28:7c:d8:e9:e6:61:07:59:30:64:a1:06:b4:45:93:f5:
ad:83:f4:b6:f7:67:f9:ea:1d:02:ee:ee:a7:1c:89:5f:01:f0:
7e:69:56:1a:5e:e6:0a:57:cc:b0:3c:54:c5:e2:ee:91:68:2a:
92:f7:3b:6a:e5:38:e6:5c:40:a8:01:e0:7a:b2:b8:d1:59:c6:
5b:74:91:97:54:2f:4f:45:a4:cc:a4:93:93:10:c4:df:2c:f4:
a3:7f:53:16:9e:b7:b8:20:4f:7c:53:69:d4:e4:3d:87:b6:05:
19:23:5e:00:7a:2e:57:48:f7:d3:8f:3f:83:f2:9d:ae:e4:8e:
7d:c4:29:7d:2e:a9:52:b9:1c:da:63:85:84:7a:42:1c:ea:ab:
54:41:c9:db:fa:62:2a:a0:0f:a7:72:cb:b7:89:9d:e7:b5:87:
87:e4:af:6d:a7:ed:99:97:3f:df:d9:8e:9e:65:c6:a0:bf:e0:
a5:2f:b9:c0:8e:23:92:b3:9d:1b:38:97:8f:1c:1c:4a:3d:b4:
19:5c:82:9a:11:3c:5c:9c:bf:72:e1:ba:ef:4e:29:b5:73:47:
2e:f3:a1:8a:d8:aa:56:8a:56:68:ca:06:f0:4c:d8:16:e5:e6:
e2:53:cd:c2:6c:18:00:6d:39:c5:aa:b1:27:cd:f2:dd:a4:f5:
34:22:78:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:18:15 2026 by rpki-client