Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: pZ0U1lFLGQUBplJ5p3XuwL7kb7Y2OLZhb1bXt5/YDEI=
Subject key identifier: A1:82:1C:7F:93:F6:39:5D:0B:6F:38:B8:19:C9:77:B0:9B:3A:0C:14
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 019D2771CC22296AABEC675C0E5CDEB9C1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0C75
Signing time: Thu 26 Mar 2026 00:01:02 +0000
Manifest this update: Thu 26 Mar 2026 00:01:02 +0000
Manifest next update: Fri 27 Mar 2026 00:01:02 +0000
Files and hashes: 1: 3SPgfu4Y2wKKO-5iAU58kbbfVQI.roa (hash: acEC1OUf//YKspHFK3djxcemZO7WYk9sXLyjUeGdWac=)
2: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: vPC2s6qInUErXiwSqoAuoQj0MpC32soe+R+fsiTJkUQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:cc:22:29:6a:ab:ec:67:5c:0e:5c:de:b9:c1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Mar 26 00:01:02 2026 GMT
Not After : Mar 27 00:01:02 2026 GMT
Subject: CN=a1821c7f93f6395d0b6f38b819c977b09b3a0c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:74:66:45:e6:b4:72:c8:33:34:fd:02:25:
4b:e5:86:f1:ab:72:be:d8:4e:70:b0:d8:59:5a:2c:
d9:92:03:5a:45:b6:10:10:7f:33:b3:df:85:e4:4e:
17:74:12:6f:3f:06:6e:20:13:a0:46:03:a4:8a:4c:
5b:5a:89:6e:66:aa:93:33:7c:0c:21:67:46:43:5c:
49:dc:a4:4c:c9:00:d8:f1:c5:04:55:69:9c:53:98:
f5:73:f3:d0:f9:c3:83:64:0e:cb:d3:4c:da:20:7a:
fc:bb:94:b2:74:87:9c:49:42:31:b7:80:42:53:46:
4e:09:cc:e2:c2:01:58:78:8b:5d:5c:82:37:4f:7d:
f5:2b:b9:59:98:58:43:56:78:74:11:39:07:fa:b0:
bd:3c:05:59:be:28:2e:a6:db:1b:67:f9:19:bd:f5:
eb:57:40:ed:93:5a:a7:e3:8e:3f:a9:86:5d:17:31:
f6:69:5e:ac:17:a9:9a:33:9a:ee:0e:8e:9a:54:d5:
dd:a4:f7:22:4b:76:03:66:ed:42:af:cc:38:91:90:
4a:f8:34:bd:34:12:9e:7a:6e:a8:e2:b6:6b:e8:30:
bb:ed:2b:d5:5b:49:41:e4:c6:3b:ca:90:19:46:00:
55:9c:e3:95:0f:8b:8b:97:8b:b2:5f:8e:57:b1:64:
04:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:82:1C:7F:93:F6:39:5D:0B:6F:38:B8:19:C9:77:B0:9B:3A:0C:14
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e7:ee:39:1f:6a:a7:4f:48:ec:e4:91:a5:cd:00:84:ac:a0:
66:e0:05:04:33:c7:f8:ae:60:a1:db:f3:6f:47:6f:07:63:95:
57:42:30:df:f1:4c:bb:c8:a6:70:15:fd:2d:bb:40:9c:01:26:
8a:ed:13:ad:b5:f4:36:72:cd:fa:a2:17:ae:6e:64:62:62:df:
11:cd:40:f2:7f:d3:a5:6a:48:ed:e3:9a:4c:a6:da:79:f7:ec:
99:13:73:a6:4b:2e:d0:98:2d:e2:bf:e2:ed:b5:db:d9:5b:d1:
f4:cb:c7:ae:b0:8e:2e:e7:2d:fd:4e:70:19:e3:99:b1:59:85:
b2:93:03:f9:5b:55:87:bd:6b:ed:6f:0f:47:e5:d4:f9:98:4d:
0f:b5:16:00:68:af:ed:4e:46:bc:e8:c4:1a:8f:3b:cf:62:ec:
4b:79:70:6d:99:7a:6e:80:8b:21:5e:5e:7e:66:f8:1e:1e:67:
87:fd:fb:61:af:d1:f1:ad:85:10:8d:6c:23:a3:69:40:7a:1f:
ac:e1:c3:d3:08:14:07:55:59:43:b3:fe:b4:2b:45:29:d7:84:
e7:8e:dc:b3:00:a8:cb:b5:3a:18:75:ff:3a:4c:7c:06:0d:26:
29:e5:b0:71:7d:c7:62:ea:2e:58:dd:ee:70:c9:c9:0c:18:4b:
d6:d2:cc:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:05:11 2026 by rpki-client