Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: 7Uac6LOoXXSz6OK1Ssn09ZUORIrynRKpngSV0MhYkZY=
Subject key identifier: BF:AF:DA:6A:40:4F:1A:62:8A:56:E3:3F:7A:6F:94:5B:5B:27:19:14
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 019E3004F850DB307898EB3EA6A7E5205201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0CFE
Signing time: Sat 16 May 2026 09:01:32 +0000
Manifest this update: Sat 16 May 2026 09:01:32 +0000
Manifest next update: Sun 17 May 2026 09:01:32 +0000
Files and hashes: 1: 3SPgfu4Y2wKKO-5iAU58kbbfVQI.roa (hash: acEC1OUf//YKspHFK3djxcemZO7WYk9sXLyjUeGdWac=)
2: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: ZsnRZHXRUQUEAsBDMQZvndvGAOyb/0hyCgZ6yv7HpOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:f8:50:db:30:78:98:eb:3e:a6:a7:e5:20:52:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: May 16 09:01:32 2026 GMT
Not After : May 17 09:01:32 2026 GMT
Subject: CN=bfafda6a404f1a628a56e33f7a6f945b5b271914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c7:e1:de:e6:c1:c1:bc:a7:98:6a:c0:af:f8:
f8:fb:71:fa:8c:ed:70:31:91:5b:a1:3a:6c:48:9a:
ad:0a:58:54:09:4a:51:3f:5b:13:b9:10:e7:fa:e6:
f4:b9:db:f4:0b:84:0b:90:3a:35:08:a8:bf:a8:b8:
e8:f3:c7:d9:ea:61:f3:88:bc:55:c3:e2:7a:5c:15:
33:f7:5f:5c:08:2d:83:0a:f5:ad:dc:54:cc:d2:cf:
c0:8c:e6:f3:6c:f0:e4:ed:75:9c:64:6f:3a:34:4a:
5f:87:24:a8:aa:a1:8e:f8:00:a6:65:76:cb:7b:c2:
51:96:aa:fe:6d:00:3e:7e:a5:2e:66:9e:ab:d7:5e:
6d:c9:8f:10:8a:3f:94:fc:b7:7d:b1:d8:45:88:a9:
45:13:4a:93:13:ff:aa:7b:34:8c:0e:3f:85:bf:fd:
f8:36:75:bd:b7:de:04:e0:f1:37:97:c1:2b:15:80:
77:25:c9:04:8e:d4:61:6b:fe:1f:7e:7d:c3:a6:55:
e6:f6:72:10:23:59:a3:2e:ac:21:8a:ed:73:a3:8e:
9e:75:70:fa:93:37:51:ce:6d:47:e5:e7:d8:94:0b:
ff:d3:60:5c:36:a7:62:9a:5f:89:72:4d:07:ef:6a:
da:af:5a:a4:e9:1c:0a:b4:7d:2a:4b:50:d4:08:f2:
34:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AF:DA:6A:40:4F:1A:62:8A:56:E3:3F:7A:6F:94:5B:5B:27:19:14
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:97:fe:aa:89:cb:e4:90:fe:3a:63:46:22:af:23:c5:ae:a7:
c7:83:8e:b3:7c:a8:b6:62:6c:e4:e3:9d:3c:a5:c4:67:5c:92:
34:37:51:64:47:47:ce:c5:08:95:95:66:e6:f4:e1:23:b6:e5:
29:ad:93:47:e2:92:0a:ef:3f:71:93:16:92:1d:2b:0f:87:60:
61:f0:d9:b7:40:68:54:df:48:59:db:1e:0b:06:f0:8c:8e:f7:
0f:5a:de:02:a3:46:2c:e0:40:93:56:c8:f9:b9:40:a2:05:6f:
a8:93:81:26:51:1c:eb:a8:16:ed:df:71:39:d7:c5:bd:89:3b:
ec:69:78:0f:9d:e1:73:2a:fe:5b:18:b6:fe:40:13:b3:73:a4:
d7:23:01:b7:02:d7:d7:95:aa:8c:e8:c2:68:05:53:3b:80:ad:
02:fc:21:50:a0:f4:99:9e:94:8c:c6:84:c8:c2:cd:9c:9b:23:
9b:b1:c1:a7:d2:eb:62:19:70:52:c8:f4:4c:12:49:f2:ae:ca:
03:f2:5b:5b:93:6a:bd:dc:59:2c:7e:98:13:d4:47:f1:0d:0e:
77:f1:2e:07:46:30:cb:4e:5e:86:3d:1f:cd:26:20:66:36:bc:
d6:83:5a:b9:2e:0a:01:11:12:ca:f5:2a:da:29:78:93:4e:69:
39:0f:e0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:07 2026 by rpki-client