Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: okW1MBAPjIw5dYC0xovGsnT/eRcHhUDcQhBMie5QqVA=
Subject key identifier: 40:B1:61:96:37:24:E1:74:9A:88:65:DB:93:AE:E8:6C:E6:25:ED:BC
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 01A0D012CDB5FF1A4652D3CB38A4EFCE0FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0E5A
Signing time: Wed 23 Sep 2026 21:01:28 +0000
Manifest this update: Wed 23 Sep 2026 21:01:28 +0000
Manifest next update: Thu 24 Sep 2026 21:01:28 +0000
Files and hashes: 1: 3SPgfu4Y2wKKO-5iAU58kbbfVQI.roa (hash: acEC1OUf//YKspHFK3djxcemZO7WYk9sXLyjUeGdWac=)
2: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: 4tJDDXyKtNnmcMhMfXN4Nbc9YmKHwO0gzxc1Wv5jZ0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:cd:b5:ff:1a:46:52:d3:cb:38:a4:ef:ce:0f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Sep 23 21:01:28 2026 GMT
Not After : Sep 24 21:01:28 2026 GMT
Subject: CN=40b161963724e1749a8865db93aee86ce625edbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:9b:95:f6:59:54:20:37:69:f3:58:4c:76:
d8:cd:3a:e3:ba:16:24:f5:16:9f:bc:1c:f6:e9:09:
c8:74:65:60:d2:c4:fd:ce:a1:5f:a3:00:8c:3a:fe:
be:23:81:64:e6:9f:a4:2c:49:4e:f7:bc:3f:7f:a4:
9f:a5:0f:89:5b:05:f0:1e:41:e2:66:45:b2:a4:dc:
9d:aa:03:19:29:72:5a:21:84:7f:e6:41:14:22:5e:
5b:ae:9b:a7:41:35:52:b3:b8:e5:44:f2:66:fe:18:
10:29:de:b2:e3:f7:37:5d:0e:f7:64:b7:c4:87:a8:
1d:d3:8a:91:2e:cb:a7:6d:69:7c:33:75:db:b5:06:
ba:20:df:36:69:0f:52:c3:a9:37:35:f2:86:92:14:
d5:7e:fd:93:31:6b:b4:e2:7c:2c:df:48:dd:4d:26:
04:5f:2c:c7:fe:07:63:f2:ef:41:1e:47:79:22:03:
22:32:cb:d8:72:dc:d0:94:71:76:1f:9b:50:77:d3:
1a:2c:18:40:b3:2d:65:50:78:52:81:75:49:12:eb:
fb:7d:2c:f2:bf:b5:ec:da:77:a6:57:2a:c8:f0:9b:
95:32:c5:f4:5a:7c:f7:02:e4:aa:47:94:5e:96:1d:
ba:cb:a5:14:17:26:e5:2c:09:18:9b:7a:4e:b9:a5:
a4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B1:61:96:37:24:E1:74:9A:88:65:DB:93:AE:E8:6C:E6:25:ED:BC
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:56:1f:86:fb:4e:d2:1d:a1:c1:a7:44:0f:7d:2a:f2:c6:9a:
fd:08:65:0c:10:c2:69:bd:01:8b:f0:9a:e1:14:0f:14:34:9d:
58:fb:80:ac:9d:30:73:2a:4a:ba:4d:dc:1d:ff:ba:48:75:19:
16:22:44:e6:09:07:92:03:c1:48:ad:71:b3:41:ca:b4:8b:d8:
5a:46:5e:fe:f7:11:1b:97:64:a5:0c:8b:42:f3:2c:4e:aa:3c:
b7:40:77:db:69:4d:c4:da:d6:ea:ce:d7:db:67:27:06:ce:5f:
12:c2:c6:54:a8:e2:23:98:64:a0:87:87:fa:41:02:e6:b9:38:
c7:2d:15:2b:2e:b8:9a:1f:0e:3b:e0:ae:57:06:80:11:f3:61:
fb:55:b9:f2:1b:1a:04:28:89:90:29:62:ec:5a:53:d7:5b:2f:
8a:8c:ad:df:d1:52:63:f7:c3:26:d0:e9:6e:f1:d0:35:d7:2a:
4d:8e:12:cb:ab:29:64:5c:cd:fc:15:8f:11:61:dd:40:3f:8a:
10:17:cc:fd:4a:ba:f7:8f:07:44:8a:2e:68:6e:e3:6e:5b:ea:
97:96:1c:86:c2:e9:e9:3c:6b:5d:8c:e8:67:6e:36:81:57:94:
5e:80:1c:48:b3:a8:b3:78:0f:7b:48:24:8a:ee:2d:f0:dc:38:
7e:e5:38:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:40:23 2026 by rpki-client