Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
File: y8Zg8DJNjLG2E3ednoMON9UuqrM.mft (raw, json)
Hash identifier: nSzFHG7VhMkFgNzo52V203BUa75GsRj8c5NDgDPFSVk=
Subject key identifier: 33:9B:59:F3:89:4F:C5:A3:55:55:C2:C6:03:F3:01:DB:A1:03:7A:DE
Authority key identifier: CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
Certificate issuer: /CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Certificate serial: 01A08A1F32711BA59E0E9C5AF228F3BE834E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
Manifest number: 08A9
Signing time: Thu 10 Sep 2026 07:01:35 +0000
Manifest this update: Thu 10 Sep 2026 07:01:35 +0000
Manifest next update: Fri 11 Sep 2026 07:01:35 +0000
Files and hashes: 1: y8Zg8DJNjLG2E3ednoMON9UuqrM.crl (hash: zyTS0XB/qV4DHBaV446ca1cHnq/r4dyjka/SSdpnAFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1f:32:71:1b:a5:9e:0e:9c:5a:f2:28:f3:be:83:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbc660f0324d8cb1b613779d9e830e37d52eaab3
Validity
Not Before: Sep 10 07:01:35 2026 GMT
Not After : Sep 11 07:01:35 2026 GMT
Subject: CN=339b59f3894fc5a35555c2c603f301dba1037ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b0:d8:0d:45:3a:6c:37:65:89:60:31:a3:69:
75:a8:99:ea:7a:47:84:3d:b4:98:6a:39:3a:a5:2e:
04:67:26:c7:89:14:3f:a7:01:cd:b5:80:2a:f9:b2:
3a:27:c1:73:07:a6:af:50:39:83:d7:2f:1a:c7:7b:
81:c3:cd:e2:ae:27:6b:2f:62:e7:e6:c5:5f:5c:36:
66:01:cb:33:67:9d:db:a3:75:ab:a0:02:42:b1:49:
00:9b:5f:74:f9:f7:b2:14:a9:cc:ec:d0:2a:98:92:
ac:a1:04:ec:e2:7c:b6:c8:f6:04:b9:66:52:2e:38:
92:24:6b:ab:22:18:d5:ed:ea:57:8e:b6:91:02:c7:
96:54:ee:1b:b1:a1:03:d3:39:14:32:c6:1f:e6:68:
5d:ab:09:a8:2a:50:15:ec:06:60:7d:de:1a:63:ea:
9c:77:5a:36:67:c9:e3:0a:d3:e9:85:12:11:78:78:
fd:a7:2e:00:c4:bb:39:98:3c:e5:3a:9d:0c:76:be:
e3:bf:4e:0f:0a:79:13:9e:8d:96:28:8c:59:3f:06:
53:42:75:b3:61:ea:da:d2:cb:43:07:29:fe:36:3c:
14:d2:73:8a:79:ee:22:77:73:38:bd:ef:01:91:39:
52:9e:dc:da:87:34:94:d3:56:e2:2f:42:eb:be:5d:
08:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9B:59:F3:89:4F:C5:A3:55:55:C2:C6:03:F3:01:DB:A1:03:7A:DE
X509v3 Authority Key Identifier:
keyid:CB:C6:60:F0:32:4D:8C:B1:B6:13:77:9D:9E:83:0E:37:D5:2E:AA:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y8Zg8DJNjLG2E3ednoMON9UuqrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a3d3bb-aa98-4ced-80a6-2673707fd8e5/1/y8Zg8DJNjLG2E3ednoMON9UuqrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:24:65:a4:4c:c9:10:a7:bd:4f:cc:0e:a7:2f:1d:ff:fd:86:
8b:e4:60:77:ad:29:0c:d1:e7:d0:ae:cf:b1:ee:11:16:f4:0e:
64:c4:0e:1d:f5:84:23:60:fc:55:25:3f:94:4b:88:75:c5:a6:
4e:13:01:cc:2c:8a:82:c7:ee:c2:9a:8b:2d:dc:12:19:9e:3c:
7f:ba:4e:38:e7:35:99:1a:2a:d7:c3:02:be:03:5e:3d:a3:70:
0c:c0:b6:45:18:34:1c:37:0e:99:f3:04:15:9d:37:cf:32:6a:
02:df:0c:57:8c:74:2b:de:a3:e0:36:54:2b:ed:2d:ba:04:58:
81:f6:43:cb:42:4a:9b:08:0f:54:cb:f0:db:db:b4:ac:62:e3:
63:5d:69:36:7e:f1:48:23:95:ef:7e:a8:35:7c:3c:82:86:e6:
ee:71:f1:85:0a:f9:d2:98:e7:bd:ce:bd:a5:d6:08:8a:7b:f4:
13:48:08:9d:bb:0c:e7:5b:dd:30:8e:e2:d0:4a:2a:d9:f8:fc:
4f:27:cb:14:70:c6:d3:46:ad:27:eb:c4:11:af:e6:a3:75:7d:
7f:26:04:2f:f1:d3:6b:76:2a:74:44:f6:68:42:30:ae:02:45:
a4:02:45:2e:aa:6a:ab:57:87:9f:96:06:00:ff:13:ca:34:2f:
84:e2:74:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:48:01 2026 by rpki-client