Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: nPv8gQDu6GKuwYX3vQpBLf9jX0O+jSJiG2TZMATYhbg=
Subject key identifier: D3:90:39:58:66:40:89:4F:11:AF:49:A0:AD:7A:1D:89:0B:A8:BF:C0
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 019FAA87927CDF54793059083EFF30565A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0DC2
Signing time: Tue 28 Jul 2026 21:00:39 +0000
Manifest this update: Tue 28 Jul 2026 21:00:39 +0000
Manifest next update: Wed 29 Jul 2026 21:00:39 +0000
Files and hashes: 1: 3SPgfu4Y2wKKO-5iAU58kbbfVQI.roa (hash: acEC1OUf//YKspHFK3djxcemZO7WYk9sXLyjUeGdWac=)
2: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: XZGHYhGfE7WVV36vdzdeEV1zDas9bCflEmWBqQncw+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:92:7c:df:54:79:30:59:08:3e:ff:30:56:5a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Jul 28 21:00:39 2026 GMT
Not After : Jul 29 21:00:39 2026 GMT
Subject: CN=d39039586640894f11af49a0ad7a1d890ba8bfc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:43:a5:98:6d:09:66:b5:fb:d2:f3:f8:29:ed:
ae:ee:89:ca:d1:16:fe:57:9e:d1:a3:5f:85:3d:1f:
c0:ed:fb:37:24:71:e9:d2:a8:73:e4:20:2d:3b:5d:
51:c2:11:04:35:fb:77:c8:30:aa:e5:45:9c:aa:82:
11:02:13:42:ab:9f:5c:91:ca:e3:9b:ee:f8:9c:bd:
4f:8c:88:af:5c:03:c6:ce:0d:e1:8b:7f:0d:4b:e0:
75:91:ee:3f:ee:55:0f:68:a6:5e:e7:9b:14:40:ba:
34:f2:55:49:12:1d:70:26:ed:62:6d:0b:aa:f0:55:
62:cc:5b:57:a5:ed:9b:f7:9e:2f:85:e8:0f:c2:7b:
50:33:78:0e:76:78:45:66:84:f0:53:a9:74:96:b5:
00:b2:ee:02:a4:f5:67:0a:8f:cd:8c:4e:d5:44:ab:
71:aa:db:bb:d4:dc:1a:2d:04:bd:57:6f:97:96:24:
b2:58:dc:0b:33:19:54:d7:8e:95:a2:44:21:a4:87:
67:b1:4d:62:9a:81:69:92:04:31:5a:58:c5:d5:cd:
b8:aa:8c:24:c1:a8:db:2e:3d:08:39:e2:d3:26:44:
16:ac:f9:a2:99:ce:4f:38:83:be:45:3d:fa:f9:53:
75:58:a6:50:7f:a7:85:13:ff:9e:a3:d3:f7:d2:0d:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:90:39:58:66:40:89:4F:11:AF:49:A0:AD:7A:1D:89:0B:A8:BF:C0
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:a7:e9:5b:26:5a:78:08:6f:f6:a5:73:95:1c:21:fe:25:5f:
b0:e5:3e:05:28:6c:66:57:6c:c3:b2:6f:15:10:a7:fc:90:7e:
c7:8b:81:9c:54:be:f0:84:62:d1:94:1c:b7:d0:43:71:c4:5f:
21:49:27:c8:53:bf:0e:d1:ea:d8:f9:b4:77:4e:00:6b:a3:9f:
40:36:2a:fe:ba:23:1d:5d:0f:38:c0:d0:41:9c:79:87:7e:95:
46:8d:60:c8:ff:02:9b:87:dd:37:5c:4e:41:6c:95:ab:b9:ef:
01:db:cb:6c:38:d4:26:45:9a:2e:ef:59:a2:e3:a9:8e:07:1a:
0b:46:52:3b:59:28:66:c1:81:b6:93:90:bf:51:d5:c0:9c:cc:
fb:82:a0:94:80:14:b2:f2:ae:27:d3:9e:3a:d3:e1:70:d0:99:
7c:7d:de:24:55:2b:92:6a:4f:51:54:92:82:2a:7a:98:03:30:
b0:38:e4:3f:64:57:70:7c:d6:c1:95:a6:d4:8e:6f:9a:41:a0:
3e:83:0d:9c:80:5a:8d:70:e8:61:ed:79:5d:15:ac:b0:bd:0f:
25:ed:f1:ee:2f:94:b1:47:f0:ad:ce:52:24:6a:ba:63:d7:e5:
7d:89:08:cf:22:6f:99:a8:85:44:ef:e4:a1:2f:59:0d:be:e4:
11:87:65:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:52:02 2026 by rpki-client