Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: MGUCKRCsABtxmem6udfhVhMcP/OYGzdefXfSPfnnlGI=
Subject key identifier: 41:A9:D1:D7:07:51:D3:2B:C6:60:8D:B8:E4:4A:99:A2:64:7A:2B:8F
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 019F17C392125185F85BD91DF34524E40407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0D76
Signing time: Tue 30 Jun 2026 09:02:00 +0000
Manifest this update: Tue 30 Jun 2026 09:02:00 +0000
Manifest next update: Wed 01 Jul 2026 09:02:00 +0000
Files and hashes: 1: 3SPgfu4Y2wKKO-5iAU58kbbfVQI.roa (hash: acEC1OUf//YKspHFK3djxcemZO7WYk9sXLyjUeGdWac=)
2: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: ag8GVu4jTo9tlEutZkFM0OhUNvIYlFPGmoCImmqPAMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:92:12:51:85:f8:5b:d9:1d:f3:45:24:e4:04:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Jun 30 09:02:00 2026 GMT
Not After : Jul 1 09:02:00 2026 GMT
Subject: CN=41a9d1d70751d32bc6608db8e44a99a2647a2b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2a:96:b3:79:59:ce:9a:16:e1:f8:1e:77:45:
0b:fa:65:c9:a5:39:bf:a9:c1:1b:04:a2:dc:73:89:
40:40:7c:5f:2e:d2:a8:af:a3:13:1c:76:b1:38:bf:
42:41:f7:4e:73:1d:80:ed:30:18:9a:94:83:89:35:
06:b2:98:7e:b0:8a:20:ae:64:dc:38:d8:62:56:78:
df:48:91:98:9d:89:61:27:a7:d9:78:d2:e8:5a:bc:
bd:f2:86:0e:74:03:df:e9:de:83:9b:5e:19:88:a3:
da:8b:21:e2:ef:83:74:f8:29:0a:d1:4e:6e:27:3b:
26:a0:68:43:c5:47:70:6a:0d:56:70:b4:3c:24:17:
55:1a:86:67:20:d4:6f:9f:b3:e5:58:e0:f5:b8:6f:
a8:e4:1f:2c:90:53:81:58:1d:31:b8:bc:ab:34:c4:
cc:1b:c2:dc:a7:6f:c7:b0:e9:04:f0:8f:56:67:bd:
d6:20:01:2e:cc:c9:4f:3c:25:5e:2f:80:da:4e:68:
dd:a4:be:86:2f:58:9b:8c:3b:e6:db:30:8e:99:23:
eb:ea:b9:c2:1d:76:94:60:62:b0:80:fa:32:3b:18:
04:27:3a:e5:e8:c3:fb:84:fb:f8:96:c5:17:8c:77:
5d:23:e1:bf:be:cb:4b:d8:68:95:fb:ca:1d:4b:62:
a9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A9:D1:D7:07:51:D3:2B:C6:60:8D:B8:E4:4A:99:A2:64:7A:2B:8F
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a8:ae:08:5c:68:e6:41:d4:e1:cc:9f:af:ad:18:17:d6:bc:
c0:fc:6f:bd:e7:ca:64:54:df:14:5c:95:bb:fc:b2:41:c2:3e:
41:1f:0f:ff:06:9b:3e:e4:aa:e5:35:62:1b:bc:64:e5:7a:fd:
c0:bb:35:5a:ce:a9:70:5d:bf:a8:bb:98:56:0b:d5:3c:4a:46:
44:0b:38:2e:0d:97:18:80:f8:a8:3c:3d:9b:da:b6:d3:3e:6f:
4e:8a:18:27:d1:f5:bf:b2:57:4d:66:b9:2b:95:d4:6e:5f:2b:
6f:77:12:d6:02:bd:5c:05:c8:f5:97:ef:31:43:46:68:16:70:
36:26:13:92:d0:31:fb:b7:8e:79:6b:87:eb:95:42:fa:95:08:
cf:dd:d4:ea:5e:06:3d:36:8b:2b:ce:8f:69:21:a1:a2:cd:71:
30:c5:47:71:3d:4c:8c:e3:2f:41:b9:e0:61:0e:7e:ea:22:d2:
5d:49:55:73:4b:2a:17:8d:03:09:3e:d6:28:6d:18:80:2f:eb:
16:e2:13:96:39:36:34:5a:75:2e:f2:ce:ea:2e:99:8b:68:ca:
87:f4:4f:bc:29:03:2c:60:d5:07:61:6e:3d:b9:3b:28:c7:b9:
3f:aa:28:75:ac:ee:9b:e3:f0:b1:e8:c7:1a:88:bf:a2:95:d6:
94:2c:86:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:10 2026 by rpki-client