Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: 0TsM8+HxkY8HoC64RXm708u4V2XDkaBWm9VnfaLFd5M=
Subject key identifier: 88:62:8F:FA:97:E7:85:D3:8A:90:72:DF:85:DF:02:CF:5A:3C:CF:74
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 019D38D3B225AD78FA298CD6037167484087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0C7E
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: 3SPgfu4Y2wKKO-5iAU58kbbfVQI.roa (hash: acEC1OUf//YKspHFK3djxcemZO7WYk9sXLyjUeGdWac=)
2: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: XAHimA5hrh+NwxAt+/NgACUdRVK7p0ehUnAD8nG8Djw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b2:25:ad:78:fa:29:8c:d6:03:71:67:48:40:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=88628ffa97e785d38a9072df85df02cf5a3ccf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:60:4d:31:52:e6:0d:17:38:b9:13:db:4d:
23:03:df:f1:b7:76:96:56:cc:0b:ec:85:9a:f0:94:
5f:7f:bf:f1:9e:a4:59:db:33:e0:59:38:1d:a1:29:
89:db:19:9a:f8:8d:68:78:4e:4a:6a:28:50:90:65:
87:c7:c6:ed:4a:c2:7a:fb:7e:46:74:9e:74:50:fa:
d0:f2:41:1d:6c:87:40:d4:73:d4:ca:0b:f8:a9:e8:
fd:1c:84:7b:11:66:f1:d4:56:60:39:94:22:03:55:
6f:16:e8:b5:04:ca:34:ac:fb:b9:6a:ce:3d:da:ca:
3a:1f:17:ab:b6:ba:07:ba:5e:bc:73:3a:9b:24:e6:
2c:58:e5:58:37:15:64:5b:c6:7f:c6:c0:9a:68:f8:
19:aa:8d:dc:a1:7c:f0:c2:c2:ad:8e:ba:db:53:0b:
69:4e:5f:fd:55:cf:34:17:97:3e:db:6e:7a:ac:49:
98:74:99:04:cb:cd:09:c3:fd:39:32:c0:27:9b:9e:
0c:7d:5b:8f:d6:e7:b0:11:98:9c:fd:96:59:2e:5d:
2f:6e:3b:e5:07:a7:04:82:ec:9a:37:12:4c:13:be:
5a:72:6b:e0:fd:ef:e4:b0:1b:33:32:30:4c:67:6c:
45:61:82:c5:29:42:0d:77:a2:40:12:bb:1c:63:37:
12:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:62:8F:FA:97:E7:85:D3:8A:90:72:DF:85:DF:02:CF:5A:3C:CF:74
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fc:9f:29:69:22:f6:fe:fc:8b:2e:4b:c5:ca:65:25:62:39:
05:57:1b:a8:9f:93:0e:9f:13:ee:9a:fa:63:a8:df:34:cf:89:
de:89:05:58:49:8d:c1:63:84:54:7e:23:7a:e6:97:05:30:97:
70:02:a7:03:71:69:17:e3:a2:f0:13:08:2f:e1:ba:19:fc:ae:
ab:f0:5f:ad:8b:5c:ea:68:e1:0b:7d:31:9d:c2:cf:83:f8:bb:
46:ea:50:60:82:9a:e2:45:7f:2f:51:e3:b5:ba:10:ee:ed:f4:
b6:f7:12:0e:38:66:35:38:0e:3b:47:d9:d4:16:87:59:7b:a6:
44:0b:db:3d:1d:cf:db:c2:52:80:cb:bf:ee:90:e2:4d:d1:83:
09:7a:48:c9:bf:f0:e9:29:99:c3:ae:08:fd:5f:e8:04:5f:7d:
18:48:d9:47:67:bd:0b:83:51:ab:49:9a:b9:8f:94:d0:08:01:
21:86:b1:03:38:ca:ca:f4:0e:eb:b9:5f:17:d8:2c:4e:81:76:
20:72:0f:c6:fa:85:c6:15:69:7a:93:a0:5c:c8:bf:c4:1e:89:
fc:e0:b7:2d:b1:d8:d3:c5:41:f4:5c:d5:1d:0e:84:5c:a4:04:
1f:84:51:30:92:c6:35:62:b9:ee:40:71:d7:12:56:78:40:23:
78:f9:05:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0407IlrXj6KYzWA3FnSECHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzM2FlNWQyYzFhMzEwN2VmMTJmNGQ2ZGQ5YzkwZjI0OWMy
Njc4MWIwHhcNMjYwMzI5MDkwMTMwWhcNMjYwMzMwMDkwMTMwWjAzMTEwLwYDVQQD
Eyg4ODYyOGZmYTk3ZTc4NWQzOGE5MDcyZGY4NWRmMDJjZjVhM2NjZjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF5gTTFS5g0XOLkT200jA9/xt3aW
VswL7IWa8JRff7/xnqRZ2zPgWTgdoSmJ2xma+I1oeE5KaihQkGWHx8btSsJ6+35G
dJ50UPrQ8kEdbIdA1HPUygv4qej9HIR7EWbx1FZgOZQiA1VvFui1BMo0rPu5as49
2so6HxertroHul68czqbJOYsWOVYNxVkW8Z/xsCaaPgZqo3coXzwwsKtjrrbUwtp
Tl/9Vc80F5c+2256rEmYdJkEy80Jw/05MsAnm54MfVuP1uewEZic/ZZZLl0vbjvl
B6cEguyaNxJME75acmvg/e/ksBszMjBMZ2xFYYLFKUINd6JAErscYzcSZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhij/qX54XTipBy34XfAs9aPM90MB8GA1UdIwQY
MBaAFPM65dLBoxB+8S9NbdnJDyScJngbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQt
ZmEyNTY2ZTU4Mjg2LzEvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQtZmEyNTY2ZTU4Mjg2
LzEvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPyfKWki
9v78iy5LxcplJWI5BVcbqJ+TDp8T7pr6Y6jfNM+J3okFWEmNwWOEVH4jeuaXBTCX
cAKnA3FpF+Oi8BMIL+G6Gfyuq/BfrYtc6mjhC30xncLPg/i7RupQYIKa4kV/L1Hj
tboQ7u30tvcSDjhmNTgOO0fZ1BaHWXumRAvbPR3P28JSgMu/7pDiTdGDCXpIyb/w
6SmZw64I/V/oBF99GEjZR2e9C4NRq0mauY+U0AgBIYaxAzjKyvQO67lfF9gsToF2
IHIPxvqFxhVpepOgXMi/xB6J/OC3LbHY08VB9FzVHQ6EXKQEH4RRMJLGNWK57kBx
1xJWeEAjePkF9Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:08 2026 by rpki-client