Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: M2qwjyNK1y6U9oHkcGMvnrRHwc/AZuzlLhb5cpJVuXQ=
Subject key identifier: FA:DE:91:1C:85:AC:7D:B6:3D:56:6A:27:3C:AB:07:0C:52:57:5E:AA
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 019E1EA325B9D12F056437217802B4334296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0CF5
Signing time: Wed 13 May 2026 00:01:08 +0000
Manifest this update: Wed 13 May 2026 00:01:08 +0000
Manifest next update: Thu 14 May 2026 00:01:08 +0000
Files and hashes: 1: 3SPgfu4Y2wKKO-5iAU58kbbfVQI.roa (hash: acEC1OUf//YKspHFK3djxcemZO7WYk9sXLyjUeGdWac=)
2: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: NEwRmGpmMgJvcK4itEQY/7rade8elXsObzQEglo1ZlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:25:b9:d1:2f:05:64:37:21:78:02:b4:33:42:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: May 13 00:01:08 2026 GMT
Not After : May 14 00:01:08 2026 GMT
Subject: CN=fade911c85ac7db63d566a273cab070c52575eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:fc:42:18:75:03:cc:0d:5e:be:c9:ae:ee:
c9:4a:09:fb:9a:28:59:f1:27:2c:67:21:11:74:20:
3a:69:94:5e:f4:bc:fd:da:df:b1:28:cc:cd:a5:5a:
28:82:88:f4:00:4f:ef:e3:83:77:30:b0:f7:3a:8c:
7b:ad:bb:75:29:6f:f4:32:e3:b6:db:4a:e9:09:84:
c7:01:fc:12:e4:ba:90:6e:50:b5:6b:6c:7e:e9:3d:
c5:1b:34:1d:93:21:28:3e:26:65:07:b9:8b:21:35:
dd:df:06:00:15:b4:57:96:a7:05:d3:0c:0d:08:31:
06:13:10:6f:03:cd:f9:af:13:8c:c1:95:ba:da:8a:
01:ef:10:94:25:2d:ee:61:b4:95:94:3c:d7:d8:3f:
73:3b:88:88:ee:3d:d1:3c:59:40:f4:b2:e4:5c:bd:
53:03:82:28:cb:6c:d3:6c:e2:b4:ce:a9:8f:1f:9a:
ef:14:17:53:fd:3e:84:c7:f4:fc:78:96:d4:53:7e:
24:23:cd:a6:70:14:43:d7:1c:c5:68:e2:9e:c1:c3:
3c:b1:84:55:bb:ee:29:8f:c6:d3:18:69:a0:b3:5b:
e7:c2:0a:33:3c:55:57:bf:11:0a:8c:e7:29:9c:6a:
ce:ac:bd:3c:db:6c:21:cb:8c:d9:63:e5:fa:3a:78:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DE:91:1C:85:AC:7D:B6:3D:56:6A:27:3C:AB:07:0C:52:57:5E:AA
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:64:ea:84:ae:b1:f1:52:e7:b3:d5:43:7f:ee:89:34:68:ad:
b1:19:b0:24:c7:51:ec:b0:31:06:6f:0f:8d:94:24:73:2c:ed:
b0:6c:9a:be:19:47:db:42:5c:b5:b9:ae:3a:c2:dd:21:26:77:
72:6c:55:56:86:6c:dd:bb:53:9b:89:d8:c4:5e:ce:b9:1c:e0:
8c:dc:30:8a:23:a3:3a:5b:ef:60:86:6b:7c:4a:a6:19:2e:80:
91:fd:8c:48:4f:38:5c:00:68:cd:a3:b6:33:8e:b6:7f:0f:72:
4c:c8:0e:6f:bb:31:44:2b:1b:4e:43:5b:c1:cb:c5:f3:fb:f7:
ea:37:6e:f4:8f:19:0b:19:f9:f4:c4:d6:34:5d:8a:1f:47:86:
54:85:7c:a0:35:c7:1f:9b:14:45:5d:27:8d:f1:be:7d:bd:a1:
31:ef:26:53:1c:6d:c6:a4:5c:69:92:52:ec:d0:96:14:f4:79:
c6:4e:fa:64:62:7a:67:f0:70:df:7b:8e:f8:81:0b:88:f2:87:
a0:1f:33:4c:23:58:bf:b8:12:fb:9d:e1:cf:62:a9:66:2c:85:
6f:3c:71:49:e6:0f:49:83:da:b3:2a:46:ae:f0:5f:64:d2:d1:
94:e3:61:a6:c6:42:f3:29:bd:84:8d:e6:b8:68:e0:b5:64:62:
ce:3a:17:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:09:59 2026 by rpki-client