Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: AKKnolGH4GQD3f23PRm8cv8LpwihIGvNmLYjwERnLl0=
Subject key identifier: 18:4C:01:4A:33:8B:E2:C3:5F:15:73:88:5F:08:BA:F3:B5:26:7E:6E
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 019D996316578C4C4593DD1CFF9DF3DD9C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0CB0
Signing time: Fri 17 Apr 2026 03:01:40 +0000
Manifest this update: Fri 17 Apr 2026 03:01:40 +0000
Manifest next update: Sat 18 Apr 2026 03:01:40 +0000
Files and hashes: 1: 3SPgfu4Y2wKKO-5iAU58kbbfVQI.roa (hash: acEC1OUf//YKspHFK3djxcemZO7WYk9sXLyjUeGdWac=)
2: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: dfSTbOFT+GgQOBtu0Sy1SHAGKa41gz0yGWcQ4PKGBiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:63:16:57:8c:4c:45:93:dd:1c:ff:9d:f3:dd:9c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Apr 17 03:01:40 2026 GMT
Not After : Apr 18 03:01:40 2026 GMT
Subject: CN=184c014a338be2c35f1573885f08baf3b5267e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:4b:a0:83:ba:9b:c4:1f:51:86:1c:37:88:
03:02:7f:98:a6:84:42:24:5b:20:8e:56:c8:b2:89:
96:b4:7e:ca:75:a1:37:e1:2e:fd:68:d7:07:b7:2b:
33:aa:6a:cd:49:8c:1a:cc:fe:75:62:7a:dd:cc:4d:
c4:03:6c:d0:fe:1b:02:c9:00:fa:ac:94:d2:33:38:
8a:11:8d:20:54:2b:38:b1:8c:08:bb:51:1c:4e:0f:
8d:59:b9:ec:08:90:1b:b5:fd:04:cb:51:03:06:d1:
aa:99:d0:1d:96:7c:e1:8c:ce:ed:e5:e1:61:88:28:
a9:13:72:59:e0:0b:41:b4:15:be:89:1f:52:37:b3:
43:35:26:c9:3d:18:da:1f:18:c7:c4:30:20:bf:00:
0f:f6:0a:f6:0b:cc:0a:e6:68:17:70:70:e8:11:46:
85:5e:ea:47:54:5f:ec:b0:2b:4f:8d:65:ae:3a:5d:
90:7d:58:ed:33:93:09:3e:dc:d6:89:9e:25:c4:cb:
0a:e0:6d:55:fd:78:4d:a1:df:e0:67:1e:6f:50:6c:
97:65:ef:4f:47:c6:6b:e0:51:70:f4:43:ea:e2:48:
20:18:80:ed:c3:4d:d9:50:c3:ec:70:04:8e:5c:6c:
16:dc:2a:52:ae:5b:af:4c:af:8d:74:00:2a:68:02:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4C:01:4A:33:8B:E2:C3:5F:15:73:88:5F:08:BA:F3:B5:26:7E:6E
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:f1:b1:18:a4:ae:ee:3c:29:04:00:e7:6b:99:09:b4:fc:3d:
d8:71:55:c1:08:e4:d9:72:87:ed:60:10:ed:26:d1:ab:d7:35:
85:07:b3:3c:4d:ca:af:82:a6:e6:ff:93:2c:da:a6:05:c6:fc:
dd:e6:03:17:31:b9:7f:c5:3d:99:e6:ee:ae:e6:7e:d0:9a:f2:
c0:59:52:7a:45:91:a7:0a:c9:01:37:b9:a3:0b:76:be:37:28:
0f:5b:62:d1:a8:77:a2:4c:06:06:3b:70:dd:7d:93:86:a5:6c:
45:e1:19:ec:7a:e4:ca:e6:f9:46:05:fc:58:39:10:c7:0a:06:
f5:68:9d:6b:f5:72:bb:eb:ff:be:11:01:18:1b:0d:c9:fd:55:
be:16:bd:76:71:12:15:79:67:67:03:1e:3b:3f:0d:67:22:fe:
dd:3e:e3:de:19:41:74:73:b4:53:b0:0e:77:b8:5f:aa:d1:18:
03:59:4e:5f:f1:2b:ee:bf:e1:36:c6:41:17:d5:df:a8:15:3a:
34:62:42:15:70:88:f1:6b:16:35:17:89:c0:ae:18:2f:5d:4a:
45:e4:4a:cd:d8:72:f4:32:64:a3:eb:25:83:3c:ae:bf:0b:76:
3f:9e:39:f0:55:bc:23:f7:19:51:9e:41:a4:26:09:af:1f:78:
32:d3:fd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:30 2026 by rpki-client