Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: /dOYje5ln3HKwO0bJikoiialEUAYUAIlyGJoPh1cj+o=
Subject key identifier: 4A:A4:60:64:1B:96:4E:54:66:2C:FB:B1:1C:26:A9:3B:88:FF:3E:81
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 019CABD8FB5C73A01D11BC1E7BE2AF391BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0C35
Signing time: Mon 02 Mar 2026 00:00:49 +0000
Manifest this update: Mon 02 Mar 2026 00:00:49 +0000
Manifest next update: Tue 03 Mar 2026 00:00:49 +0000
Files and hashes: 1: 3SPgfu4Y2wKKO-5iAU58kbbfVQI.roa (hash: acEC1OUf//YKspHFK3djxcemZO7WYk9sXLyjUeGdWac=)
2: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: 4hqZAU1maUyhWDJWSv8V+5P03fgHM38Ij7BwHey7A2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:fb:5c:73:a0:1d:11:bc:1e:7b:e2:af:39:1b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Mar 2 00:00:49 2026 GMT
Not After : Mar 3 00:00:49 2026 GMT
Subject: CN=4aa460641b964e54662cfbb11c26a93b88ff3e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:69:d4:98:84:dd:dc:39:68:cb:5c:c7:49:da:
90:6a:8f:28:d0:57:d1:ac:f6:94:45:17:33:8b:4f:
64:e8:b0:4d:af:28:16:56:74:99:83:f3:a6:c4:2d:
35:95:9a:1d:36:cd:c7:1c:3b:1c:6f:1e:98:93:e9:
0c:82:9a:e5:29:c4:f5:02:ea:6a:85:48:e3:32:94:
89:28:a1:92:fb:3a:1f:fb:8a:55:68:93:28:e6:f0:
16:64:ba:f2:92:01:21:36:c3:96:ae:ef:cb:01:11:
ca:0b:48:5c:2e:b8:06:05:eb:61:0e:88:d8:f5:a4:
2f:64:b9:dd:22:3c:24:80:68:f2:fb:5a:3b:24:23:
84:67:fe:37:5b:c0:29:80:f8:ea:3a:cf:28:ff:48:
88:37:f1:9f:47:47:d2:58:a4:e5:be:c1:11:05:29:
47:2e:06:ae:a0:56:68:cf:4f:f5:a7:56:68:4e:51:
56:e4:0a:b4:e1:e1:82:8c:25:b3:5a:57:94:cd:19:
6b:1a:86:ee:f1:69:0a:b2:dc:da:c1:26:aa:4c:c6:
8d:bc:06:01:81:a5:2f:f6:b2:8d:6f:ef:72:c8:31:
8f:b0:9c:48:2f:76:4a:0d:8d:27:66:0a:64:57:49:
9c:c4:23:b6:5d:14:d8:aa:be:b1:c5:89:0e:95:c8:
20:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A4:60:64:1B:96:4E:54:66:2C:FB:B1:1C:26:A9:3B:88:FF:3E:81
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:27:7f:0e:1a:ff:46:c3:65:0a:e0:a0:63:ff:cf:03:1f:d4:
82:9c:bc:b0:f3:c6:32:b8:4c:58:47:2b:de:be:93:1f:5a:c7:
3b:82:07:f0:60:d6:65:fe:65:80:9d:7b:1c:fd:02:42:ce:07:
bf:9a:14:58:65:48:5b:1c:31:71:0e:b6:7e:9b:9a:91:ca:f9:
02:28:a9:dd:81:08:ea:2f:de:20:63:36:57:d0:4e:42:60:e7:
bc:a1:3e:8c:78:82:fa:a5:57:f8:bc:63:4d:08:fc:ba:29:b9:
8c:e8:58:76:6c:55:ca:64:51:88:02:e3:45:cc:c4:1d:76:0b:
c0:85:58:3a:4a:8c:39:51:1c:e4:3b:f8:c4:72:54:cd:13:e4:
fc:59:62:54:eb:60:23:b4:fd:51:ec:0a:26:85:da:79:95:f0:
11:44:c2:6d:9d:84:39:64:99:4c:f5:57:44:7d:db:35:7c:25:
4a:f5:78:72:50:6b:ca:21:15:91:72:14:e6:07:22:89:2c:c0:
5b:a2:0c:91:c8:cf:81:89:2d:2b:9d:32:43:19:b3:cb:33:f3:
0c:2a:b5:cf:38:c9:e8:76:2b:bd:4b:a3:95:d8:63:23:2a:fd:
a5:c0:84:67:b4:60:d9:d1:99:2f:5f:16:a6:c6:4c:08:ba:93:
51:b1:73:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:55 2026 by rpki-client