Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
File: C_08lbYJJ6X2i5lee5eeZoA8EO0.mft (raw, json)
Hash identifier: g0TQuIad/mVldj8YAwsjHahJ9Pxsdjhw7v/Q4AYoHqQ=
Subject key identifier: E3:28:8F:3B:E3:99:FF:FF:E2:0D:35:99:86:4E:0D:13:FE:67:0A:C1
Authority key identifier: 0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
Certificate issuer: /CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Certificate serial: 01A0D94D0DAF392B4D24D7B2ED78F0CEE306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
Manifest number: 0E49
Signing time: Fri 25 Sep 2026 16:01:40 +0000
Manifest this update: Fri 25 Sep 2026 16:01:40 +0000
Manifest next update: Sat 26 Sep 2026 16:01:40 +0000
Files and hashes: 1: C_08lbYJJ6X2i5lee5eeZoA8EO0.crl (hash: 4tm+cqGsKcvngapPlD1CtiPpt1AiPSwDS6iDAauk3do=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:0d:af:39:2b:4d:24:d7:b2:ed:78:f0:ce:e3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed
Validity
Not Before: Sep 25 16:01:40 2026 GMT
Not After : Sep 26 16:01:40 2026 GMT
Subject: CN=e3288f3be399ffffe20d3599864e0d13fe670ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d7:bf:29:c9:8d:02:6a:d6:08:d5:9f:ad:f8:
8a:ba:4f:c8:d1:5b:ab:8a:a3:b6:46:93:24:fa:f1:
f9:86:ba:da:30:cc:86:2a:32:e8:a6:dc:09:17:06:
c5:0e:b3:67:ce:68:b5:b2:e1:65:2b:bf:06:33:9b:
bc:69:78:f9:00:23:41:01:87:ff:63:f9:b2:6c:7b:
51:1f:5c:05:37:bf:65:86:13:33:5a:82:74:3d:2c:
f4:02:aa:ec:ab:16:36:6e:36:59:5a:c1:c9:c4:c1:
c1:6b:e3:d9:7e:84:8c:95:67:3f:cb:35:56:3c:0c:
dc:55:05:e8:dc:0c:9d:12:da:05:12:c1:dc:23:80:
f2:b4:93:31:21:9e:a5:f3:7a:f9:a1:de:c8:c1:fc:
66:f3:2c:8f:a9:a2:03:5d:1d:b7:7d:80:cb:5b:2f:
9f:0b:1d:0d:9e:bd:08:06:10:8b:14:19:44:0e:36:
3e:ba:03:ae:30:d0:e1:88:a6:3c:7b:8a:48:67:8a:
65:bc:70:12:3a:85:08:9a:2f:3d:0f:8a:4b:c4:78:
80:79:3c:cc:87:56:c2:2e:64:6f:c3:a2:67:22:12:
b7:4a:20:d5:c6:72:fe:52:98:71:96:62:e2:cd:6d:
99:2c:2a:3f:52:1d:16:b5:89:ce:d4:66:81:1d:38:
e6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:28:8F:3B:E3:99:FF:FF:E2:0D:35:99:86:4E:0D:13:FE:67:0A:C1
X509v3 Authority Key Identifier:
keyid:0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c8:da:1a:60:c7:03:bc:3c:30:4c:46:b6:a8:d1:6c:44:52:
e6:26:ee:fa:4b:84:37:13:00:dd:f8:c7:3e:46:7c:8a:c2:ee:
9a:fe:93:84:67:19:a4:d3:da:93:67:f8:d0:f5:0f:97:04:36:
af:05:33:e7:b6:50:7f:b2:54:5b:3d:d1:82:cc:8d:09:7c:be:
51:34:dd:3c:ec:e7:e7:43:ed:d7:37:28:5a:cb:5c:6a:98:75:
4d:bd:30:54:df:71:29:1c:62:d3:31:01:44:bc:bc:98:0b:a3:
12:f5:cb:55:d8:de:27:49:d1:3f:04:68:26:b9:4a:4e:d1:c8:
8a:31:e3:81:de:33:e2:2c:a3:5f:2e:f1:28:23:c2:e0:f6:64:
33:11:7f:6e:bd:74:25:d8:5e:54:7f:f8:43:8a:cb:36:a3:cc:
c6:3c:c3:78:f0:4c:57:8e:ba:b6:ce:ac:4e:5d:1e:aa:9b:6a:
06:84:63:a0:c9:14:a8:f5:fa:85:76:b3:28:87:29:f3:3f:f7:
ad:ae:1a:0a:d5:67:47:77:17:31:49:71:36:a7:b6:fe:f2:ec:
6a:b2:b9:08:f6:5e:af:34:93:aa:54:69:f9:16:73:e2:68:eb:
7c:9d:92:f5:fb:14:5f:fa:bd:03:7d:3e:b9:ee:a8:71:a1:bb:
78:f7:e5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:12:58 2026 by rpki-client