Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
File: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft (raw, json)
Hash identifier: OguNIjubg5XajvNOViNJsK6HQIb2zv7a5Iy/5C9JIS8=
Subject key identifier: 40:08:14:32:57:9B:9C:4F:C1:3D:91:01:00:4C:43:AC:3F:DC:F1:23
Authority key identifier: F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
Certificate issuer: /CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Certificate serial: 019DCF75514ED20F2FBED40A520CBACE7A9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
Manifest number: 0E28
Signing time: Mon 27 Apr 2026 15:01:05 +0000
Manifest this update: Mon 27 Apr 2026 15:01:05 +0000
Manifest next update: Tue 28 Apr 2026 15:01:05 +0000
Files and hashes: 1: 8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl (hash: hN9XuSuga2xWbeZQMwyI0oINB2NxUZ+yohYlOrOkiWg=)
2: rrV62ijQPMJX14hvzKMZztvUerc.roa (hash: qf9E3VmwVfV6USXHUXb50PtIEki9bvKr+AmM9c2BKVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:75:51:4e:d2:0f:2f:be:d4:0a:52:0c:ba:ce:7a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f156db2d2874f9e5985c9f18f05fe56e83f09516
Validity
Not Before: Apr 27 15:01:05 2026 GMT
Not After : Apr 28 15:01:05 2026 GMT
Subject: CN=40081432579b9c4fc13d9101004c43ac3fdcf123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:29:e4:80:90:2d:0d:02:ac:60:8f:88:db:21:
7a:03:a2:ca:a0:cf:1c:5e:7e:e4:17:92:e0:8a:94:
27:8a:b0:70:d8:d1:be:1f:71:60:1b:83:90:5e:88:
01:7d:ea:8a:2a:98:0b:0c:85:42:62:e2:06:6d:ec:
39:4e:61:eb:d7:16:7b:7c:63:89:d4:4c:31:4e:e8:
ce:0a:3c:8a:0c:44:32:1b:e5:3b:99:ab:b6:94:31:
95:3e:ab:17:67:c5:b0:2c:be:7c:c6:2c:c7:fe:78:
01:27:8b:5c:e4:38:fc:d1:2a:00:f1:5d:b4:3c:22:
db:62:3a:3c:1d:32:2b:c6:f8:96:df:ca:45:5d:41:
b9:5a:c3:00:23:bf:96:54:67:77:fe:a3:a2:c0:6b:
fc:56:16:ec:8c:50:f2:2e:c4:30:19:d3:d1:be:7a:
70:c1:52:bd:c1:9e:0b:ae:d2:b2:d5:dd:2f:d8:67:
dd:46:43:fa:55:c1:e0:fe:55:76:d9:12:95:3f:8f:
d9:2e:4b:3b:5d:b4:b5:0b:73:0c:e5:1e:3e:b6:e4:
88:7d:87:44:6c:a8:e3:95:e5:15:c3:e0:c3:f6:3f:
6b:b0:31:03:7d:99:11:c9:25:49:dd:fe:e0:67:01:
d8:a6:37:40:3b:4c:23:ec:0b:7b:c1:df:95:ce:30:
1a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:08:14:32:57:9B:9C:4F:C1:3D:91:01:00:4C:43:AC:3F:DC:F1:23
X509v3 Authority Key Identifier:
keyid:F1:56:DB:2D:28:74:F9:E5:98:5C:9F:18:F0:5F:E5:6E:83:F0:95:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9bb40d-ad28-4e51-84b8-5ae53a06eaa7/1/8VbbLSh0-eWYXJ8Y8F_lboPwlRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bb:d7:9a:ae:58:e6:3c:be:ad:1d:5b:1f:20:82:be:c7:44:
5e:23:5c:24:82:b2:63:9b:f4:b5:fb:c3:73:c2:1f:cc:b8:46:
e4:20:40:97:b4:78:ee:70:31:94:9c:9d:a3:49:30:c9:1c:51:
24:03:34:b6:48:b4:ee:a2:80:a2:3b:57:57:27:87:ac:50:f9:
0a:65:6c:c7:a4:c0:d0:57:e4:4e:fd:a8:35:df:17:90:e5:e0:
f7:7c:fe:fb:ce:5b:2c:22:77:2c:3c:a7:ad:5c:53:da:c3:b3:
fe:61:87:2c:30:ca:48:72:35:8b:e5:de:42:3d:29:bb:51:71:
f1:02:ca:e7:10:d8:ab:8b:a5:34:8e:8a:bd:d7:95:8a:1a:89:
64:19:15:6b:a1:96:ba:64:b3:c8:6e:bd:f5:d9:41:86:c1:9a:
a2:45:4d:66:22:0e:d8:d7:e8:b6:7e:63:ee:90:be:7e:68:bb:
a9:ba:eb:0a:e3:cc:ee:a9:76:4c:5c:a2:16:ba:04:d0:7c:4d:
47:81:4c:44:d3:0c:f3:b1:66:b0:6d:94:cf:df:c1:d3:c3:7b:
37:7f:6a:b5:bb:0c:d1:12:d3:aa:c7:c4:84:b2:75:d2:9d:24:
9a:f8:d6:4a:4e:c0:19:d8:5d:3f:8e:86:34:66:d5:ac:83:2e:
af:94:6b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:46:32 2026 by rpki-client