Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: Ph8orDOcugpYnx0BkIexjnndOqkvpzctNxng6dMxdfE=
Subject key identifier: A6:9F:4B:AD:79:88:E8:A8:63:09:9F:00:5C:35:8D:C4:53:C7:BC:C9
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 01A0D0128B7B4BFAA274A7D77CEA4BF932A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0FB6
Signing time: Wed 23 Sep 2026 21:01:11 +0000
Manifest this update: Wed 23 Sep 2026 21:01:11 +0000
Manifest next update: Thu 24 Sep 2026 21:01:11 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: MmZxx4AvtxdAndWH0GMn6qCvtpEWV/Tdfv5vFLstg24=)
2: rrV62ijQPMJX14hvzKMZztvUerc.roa (hash: qf9E3VmwVfV6USXHUXb50PtIEki9bvKr+AmM9c2BKVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:8b:7b:4b:fa:a2:74:a7:d7:7c:ea:4b:f9:32:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Sep 23 21:01:11 2026 GMT
Not After : Sep 24 21:01:11 2026 GMT
Subject: CN=a69f4bad7988e8a863099f005c358dc453c7bcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4f:94:bf:bf:c8:68:dd:f7:da:db:ce:cb:d6:
39:5e:68:6c:ef:d1:f2:94:1d:3d:2f:2e:0e:cc:e6:
d2:fb:bf:20:d5:79:1a:10:5a:26:62:ea:7a:53:a7:
84:f7:4c:fd:f0:13:73:63:b4:4a:4e:65:a3:28:83:
c8:29:fc:f4:45:55:53:47:94:2f:c9:00:97:84:4b:
8e:70:bc:e7:06:8f:66:a6:0a:f3:19:fb:f4:8e:80:
b5:84:13:e7:84:e0:a0:66:a8:3a:72:14:a9:2f:9e:
5b:fa:50:77:25:3a:c5:1d:5a:7f:5a:5f:fb:5b:78:
26:c2:6d:9c:1a:48:10:a9:bb:d3:38:2f:18:01:09:
07:56:c0:f8:61:b4:d3:f6:04:02:f6:8b:25:05:cc:
15:73:d5:b4:f2:b3:f8:02:18:95:fa:60:97:b8:ef:
1e:b8:c0:b8:87:c3:fd:04:cb:52:07:8b:cb:97:91:
42:26:cf:1d:87:10:e1:c7:40:6c:a5:ea:50:07:9b:
de:ce:99:4f:70:22:7e:aa:18:eb:3e:96:f0:1b:7a:
12:81:f1:fb:14:65:c3:cf:cb:50:ac:51:8c:35:aa:
9d:72:66:c7:e6:19:93:0d:70:b7:0b:81:ac:46:db:
a6:72:75:b8:bd:74:5b:d0:c9:40:07:80:9b:c1:aa:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9F:4B:AD:79:88:E8:A8:63:09:9F:00:5C:35:8D:C4:53:C7:BC:C9
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:07:c9:7a:60:7f:61:91:9e:64:44:04:96:bc:26:30:a9:7d:
38:60:ae:a6:ad:22:b0:78:d5:4f:65:ff:db:5c:10:6a:6c:3e:
9c:7b:b5:84:25:e5:6f:c2:33:6d:58:79:bf:d1:c8:ef:a3:eb:
f6:99:a3:94:8d:a6:81:d7:33:20:da:08:1c:77:21:f4:40:ed:
27:af:52:24:d8:f6:6a:7b:f3:ab:75:41:4a:7c:ad:70:f8:be:
3e:44:48:e5:ff:98:04:4a:3c:89:0c:38:90:12:15:79:b6:50:
ea:21:40:1f:06:f9:65:b6:0a:88:40:80:92:e6:8c:17:6f:bf:
3c:7b:4a:09:de:8c:a1:6c:de:9c:3a:1a:c7:6b:47:c1:55:53:
26:42:2c:ff:f9:5a:ed:14:62:4f:d3:37:29:11:15:31:8d:39:
67:c2:63:12:e3:df:a8:c3:2a:ee:fd:32:8b:d5:f4:65:da:e3:
99:ef:c7:ce:6f:75:72:ec:75:a9:ff:10:03:96:2e:47:ed:e6:
70:5b:3b:cb:e6:a2:23:0e:10:41:24:6e:6e:c9:30:52:d9:f5:
1e:0f:48:71:49:14:31:17:39:a6:40:06:3b:a2:4c:f8:29:23:
18:28:2a:1f:51:3b:ef:22:f5:28:18:28:63:36:ec:90:10:ff:
74:c0:b8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:54:03 2026 by rpki-client