Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: sxCR4YbG/9zcvNXLfCvG7heOimgNWsgGoTgC1E01yd0=
Subject key identifier: 1C:02:9D:36:6E:A2:C6:1C:B9:13:49:8C:1A:5F:46:FE:B1:80:B5:36
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 019F916C5FBCA769AE5D6DAE13D1965D82C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0DB5
Signing time: Fri 24 Jul 2026 00:00:26 +0000
Manifest this update: Fri 24 Jul 2026 00:00:26 +0000
Manifest next update: Sat 25 Jul 2026 00:00:26 +0000
Files and hashes: 1: 3SPgfu4Y2wKKO-5iAU58kbbfVQI.roa (hash: acEC1OUf//YKspHFK3djxcemZO7WYk9sXLyjUeGdWac=)
2: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: 6cHr7kfQHvTOa4nKmvqcinWdHS+UYe0qDs8HAfNii5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:5f:bc:a7:69:ae:5d:6d:ae:13:d1:96:5d:82:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Jul 24 00:00:26 2026 GMT
Not After : Jul 25 00:00:26 2026 GMT
Subject: CN=1c029d366ea2c61cb913498c1a5f46feb180b536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0b:ca:df:56:c0:2a:97:77:e2:ba:ae:f5:60:
17:21:c8:61:b1:df:ea:fc:51:83:2b:66:c0:25:45:
37:17:bb:01:cd:3f:b8:12:de:7d:22:17:2a:5b:31:
df:b1:09:2d:d9:89:07:14:9b:6c:67:91:09:ca:bb:
9a:60:27:1d:e7:79:dd:81:0b:f5:f6:2d:29:f4:85:
fe:1e:ea:68:15:4c:d1:a8:c1:08:b9:ef:8d:db:70:
3e:db:1c:03:5c:99:14:46:9e:08:98:15:99:5a:78:
a2:d9:83:86:16:20:5c:67:fa:bd:1b:02:19:79:2e:
50:7a:2d:cd:7a:d9:99:3d:2f:08:2b:10:93:cd:25:
53:00:1c:56:73:12:4d:6e:33:2e:22:f0:8c:05:b2:
a7:9c:83:57:94:d2:75:37:6a:0e:1f:62:42:df:81:
40:fc:f4:a5:3f:1d:6f:fc:34:d5:73:b1:fb:fd:61:
63:55:0e:0b:09:01:9d:2c:7a:16:1e:c5:78:40:28:
7f:98:64:a0:9c:f3:a8:a8:dd:15:1e:ea:f9:a4:fe:
60:3a:d5:59:98:6d:e3:a7:4b:0c:76:23:9a:8b:ba:
d3:6c:5f:dd:e5:1e:b4:d5:d9:a1:39:a0:3b:c4:ed:
50:a3:a9:e7:17:a7:27:5a:8f:7f:f8:ea:5c:c3:e1:
c5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:02:9D:36:6E:A2:C6:1C:B9:13:49:8C:1A:5F:46:FE:B1:80:B5:36
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f0:9f:d3:a0:a6:2b:f7:34:f0:8a:26:cd:fd:70:6c:84:8e:
52:30:1e:8b:24:26:a4:8c:4e:b0:1b:94:98:9e:bb:b7:4d:70:
f9:e7:ec:c1:dd:b8:5f:e7:e4:eb:81:f3:cd:70:99:28:c4:a6:
81:f3:e4:aa:52:2b:6a:9e:8e:cc:46:65:dc:02:c9:88:23:cb:
57:5c:f3:57:80:bc:21:24:2d:83:82:70:bb:6c:8d:69:3e:0b:
ff:1e:f2:e8:e2:9d:e8:4f:c3:47:64:d3:d4:1c:5d:bd:42:93:
5f:70:72:48:a6:cf:84:fc:e5:13:66:b8:ac:f9:07:85:c5:61:
5d:89:98:0e:fe:69:85:58:17:a1:f0:84:70:fa:bf:05:54:4e:
a4:b2:cc:e1:bd:36:a1:62:ac:f2:d5:cd:25:1c:11:4b:f1:59:
d4:a5:73:43:25:0e:73:8b:b1:10:2f:54:91:e4:a1:c4:34:bc:
d2:48:79:2e:b1:f2:9e:fb:7b:45:38:68:e2:d4:1c:bf:4b:cf:
b4:1f:fb:16:87:74:fc:bf:e7:ec:c2:72:2e:08:e2:13:c2:b3:
96:34:4a:87:8a:12:08:d1:c4:1f:2f:12:3c:63:b4:25:a7:78:
e1:92:22:a4:7b:a3:3b:dc:46:c5:49:e4:4d:7f:6d:e0:99:1b:
f8:23:2f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:39:02 2026 by rpki-client