Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: PqWU6ZLVX0YF40yaKR0tMrr7K7b9nN6VAv45xYTKkOM=
Subject key identifier: 1A:AB:17:4D:58:E4:BA:AA:CB:1C:3F:93:F4:A2:0B:14:66:78:94:41
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 01A0016F7A3D41F82E24928670FE219DCBBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0DEF
Signing time: Fri 14 Aug 2026 18:01:18 +0000
Manifest this update: Fri 14 Aug 2026 18:01:18 +0000
Manifest next update: Sat 15 Aug 2026 18:01:18 +0000
Files and hashes: 1: 3SPgfu4Y2wKKO-5iAU58kbbfVQI.roa (hash: acEC1OUf//YKspHFK3djxcemZO7WYk9sXLyjUeGdWac=)
2: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: L9NH8PRfHRq07vt5wOgFnUjhXMPp3KkekLDB9agtZOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:7a:3d:41:f8:2e:24:92:86:70:fe:21:9d:cb:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Aug 14 18:01:18 2026 GMT
Not After : Aug 15 18:01:18 2026 GMT
Subject: CN=1aab174d58e4baaacb1c3f93f4a20b1466789441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:cd:60:7d:68:50:02:26:45:36:fd:83:d1:
8a:91:d8:35:28:ef:0e:b9:dd:ab:fc:96:41:0a:5a:
49:ba:a9:36:08:c6:60:e0:7c:9c:0e:57:51:0c:64:
fa:f9:31:79:87:95:bd:0d:81:f3:f6:05:d5:95:0e:
bd:5b:35:18:fe:55:75:12:7e:d6:d1:84:00:95:f9:
a0:57:24:93:c2:da:2a:96:ad:48:b7:24:c2:00:3a:
8d:95:b9:c0:6d:52:94:d7:f7:ce:c5:c9:fa:85:be:
74:cd:05:11:40:e1:a1:e5:c4:e5:b3:80:87:1d:46:
57:2f:8c:50:27:25:2b:d0:24:f9:40:df:73:50:b8:
29:a9:9d:eb:c3:cd:27:7e:b4:c2:95:6a:9d:96:a3:
d4:f5:ac:7d:a2:9b:cc:6d:83:5e:d6:06:f0:9a:5c:
f7:07:e9:78:32:9a:b6:6e:c7:9c:b3:51:73:f6:6c:
bd:5b:fb:5a:c1:4e:e4:de:87:f5:13:43:17:ad:e2:
65:6f:e5:be:f6:7f:eb:7c:9e:13:4a:fe:bf:dd:71:
38:35:08:89:15:f5:a3:75:a3:5a:e4:da:fc:65:6b:
6e:84:00:d2:f6:61:3f:09:0f:28:b1:22:8d:92:ef:
86:69:f8:7a:d3:da:c1:f5:38:1f:b1:64:db:04:d9:
c1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AB:17:4D:58:E4:BA:AA:CB:1C:3F:93:F4:A2:0B:14:66:78:94:41
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:22:c8:33:a9:60:4d:0d:a5:a4:40:3a:be:c2:86:89:18:c5:
09:f0:f0:68:56:6d:1d:9d:06:d9:05:41:54:8c:cf:09:d9:98:
01:a7:a4:6c:1c:1b:14:2c:de:bd:dc:31:7d:ed:df:88:d1:77:
c2:0d:16:75:df:ee:11:0d:8e:7f:f8:3e:07:cc:e6:09:05:5a:
f3:4a:a4:f7:c0:9a:b9:1e:be:f0:b2:97:51:ae:03:cc:67:01:
6c:85:bc:3c:d1:71:73:44:f0:9b:96:c6:9f:62:58:94:46:70:
3d:6b:85:84:c0:64:b8:e6:2d:08:a8:ae:3f:22:76:da:3d:3a:
39:27:86:eb:70:e6:8e:fc:8f:f0:d8:0e:a6:cd:83:e1:ea:25:
c2:16:93:31:e9:5e:d3:f0:d0:7a:62:48:3c:c7:6b:2a:8a:51:
d9:83:e3:63:6d:2c:72:f5:68:47:1b:1b:ac:dc:b2:34:4e:0f:
ed:3c:30:58:bc:59:62:4d:bc:68:7e:fe:75:69:d9:ac:27:e5:
34:45:dd:15:bd:e9:38:05:6f:35:a4:73:24:5e:21:ed:ea:75:
11:82:48:46:0f:d4:0c:ef:72:32:90:d6:35:8b:8c:f8:d9:c8:
11:87:2c:43:a8:90:03:89:55:34:a5:e2:c1:76:bc:c5:6c:8a:
7b:e8:57:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:12:06 2026 by rpki-client