Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: AvgrV3Jx/2sFcSfMMdVum9VSiA42WB4OXKDoyv7R+0Q=
Subject key identifier: 89:33:56:68:59:CC:12:8E:B2:B7:AE:4B:93:81:DD:57:2F:42:11:5B
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 019D277254298FB9EC57F69B4B7EC8B564E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0DD1
Signing time: Thu 26 Mar 2026 00:01:37 +0000
Manifest this update: Thu 26 Mar 2026 00:01:37 +0000
Manifest next update: Fri 27 Mar 2026 00:01:37 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: N6s0aesGV4eOv4fqcNh0hNHQMD+QjryjllWBEftWKm4=)
2: rrV62ijQPMJX14hvzKMZztvUerc.roa (hash: qf9E3VmwVfV6USXHUXb50PtIEki9bvKr+AmM9c2BKVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:54:29:8f:b9:ec:57:f6:9b:4b:7e:c8:b5:64:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Mar 26 00:01:37 2026 GMT
Not After : Mar 27 00:01:37 2026 GMT
Subject: CN=8933566859cc128eb2b7ae4b9381dd572f42115b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:47:b5:61:a7:88:8f:d8:2e:f1:74:8d:e8:c1:
b0:ea:7d:9f:f4:54:07:7e:48:44:89:e0:82:1f:7f:
b8:ad:22:c1:6c:ba:08:58:70:c7:0d:b4:87:a7:85:
a6:1d:75:28:63:db:bf:96:7d:ba:f4:90:62:8e:cb:
96:91:31:43:18:0c:cb:94:79:f3:a5:a4:6a:d4:c6:
d7:dd:5b:7f:8a:90:cc:e3:eb:a5:c3:5b:b0:b2:d3:
c0:5b:b1:b5:84:89:a2:90:10:48:ff:df:95:70:7a:
f6:68:4d:10:05:ce:15:bb:37:ea:4c:15:e7:18:ff:
86:00:a5:e4:64:a1:fa:6f:6b:db:50:8b:1b:ff:32:
84:7d:bd:35:45:c5:26:93:13:4c:1a:b8:7e:e7:3e:
c7:67:0e:85:d4:5f:a1:29:cd:4f:11:b8:a1:77:43:
e3:5a:1d:f7:39:5a:64:2a:84:f9:65:24:cb:ce:2a:
a1:66:7d:2f:35:42:d8:58:9f:73:4a:78:b0:cf:ea:
ba:66:2e:26:d2:c0:1d:13:89:99:fa:0c:c0:ac:d1:
01:f6:c1:43:3e:8f:5d:9f:83:05:12:c0:f1:cd:87:
71:e3:f7:8b:60:27:31:71:bb:69:29:e1:30:e2:69:
3d:5b:71:74:c2:57:3e:ef:e8:7c:74:ee:99:58:4e:
54:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:33:56:68:59:CC:12:8E:B2:B7:AE:4B:93:81:DD:57:2F:42:11:5B
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:a4:d9:c8:76:90:c5:b9:04:ba:d1:9a:78:6e:1f:67:9a:0f:
4e:e7:8b:5c:e7:56:0e:34:ed:d0:9d:aa:44:dd:37:0d:f2:0a:
c0:db:6c:a4:94:5d:59:b2:f5:11:6a:cb:11:93:01:79:c8:b2:
9f:78:60:e6:7e:b5:ad:f1:f3:79:3e:1c:88:21:55:37:57:b3:
69:d1:59:d4:07:3d:6e:12:a5:93:ba:e1:2a:6d:7e:ea:e6:75:
d2:97:88:38:b3:cf:2c:9c:5f:78:d9:3e:c1:f7:74:5a:a0:cf:
fa:b1:a9:3f:4e:ab:bf:78:7f:42:16:59:93:bf:31:54:e1:36:
3a:29:da:8f:fc:22:b6:6e:62:4a:9d:e1:4c:64:8f:22:c1:d3:
90:e8:81:a0:00:7c:87:48:15:39:46:7a:4d:c9:07:86:be:9a:
fe:0f:ae:d4:de:94:92:47:f3:f4:61:28:34:46:93:32:1d:ea:
23:9c:6b:46:30:2b:19:0f:e7:bf:46:51:e9:26:42:87:7e:94:
a9:f3:0f:a1:9a:9e:44:7e:35:f4:8d:dd:bb:25:e2:29:73:46:
d9:3e:d6:7a:65:c7:05:14:05:15:d4:df:e1:e1:01:55:85:a3:
90:3f:7c:54:64:61:ea:51:5b:7a:d0:93:8c:f0:3b:81:d7:99:
22:e9:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:49:47 2026 by rpki-client