Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
File: 8zrl0sGjEH7xL01t2ckPJJwmeBs.mft (raw, json)
Hash identifier: X4lOITWOPSbe3TeBdd6byD0TXI26nBeXkVRy93JOuZE=
Subject key identifier: 20:B4:42:BC:64:3E:C7:EF:FB:A8:DB:02:FE:F3:FD:47:57:87:87:1D
Authority key identifier: F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
Certificate issuer: /CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Certificate serial: 01A13E25CA42857D9DDEA3CFBE47FE83CC4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
Manifest number: 0E93
Signing time: Thu 15 Oct 2026 06:00:26 +0000
Manifest this update: Thu 15 Oct 2026 06:00:26 +0000
Manifest next update: Fri 16 Oct 2026 06:00:26 +0000
Files and hashes: 1: 3SPgfu4Y2wKKO-5iAU58kbbfVQI.roa (hash: acEC1OUf//YKspHFK3djxcemZO7WYk9sXLyjUeGdWac=)
2: 8zrl0sGjEH7xL01t2ckPJJwmeBs.crl (hash: Cyc+SibxHhKahjGlLEgN04TKt4S4RhbvLFTUNKc9weU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:ca:42:85:7d:9d:de:a3:cf:be:47:fe:83:cc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f33ae5d2c1a3107ef12f4d6dd9c90f249c26781b
Validity
Not Before: Oct 15 06:00:26 2026 GMT
Not After : Oct 16 06:00:26 2026 GMT
Subject: CN=20b442bc643ec7effba8db02fef3fd475787871d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f7:7c:61:1a:9e:e0:90:05:d4:7f:dc:5d:2a:
32:4c:a5:ed:dc:bc:b1:38:38:f1:6b:9c:e4:8a:ed:
5f:4e:94:6c:f4:97:10:e2:02:80:56:f8:6e:1a:84:
12:cd:25:a2:34:8d:fc:a6:78:02:a5:44:f8:85:fe:
46:a2:77:e6:b2:a2:43:18:e6:62:69:3e:d1:7c:65:
aa:9e:67:ae:c9:d2:df:84:94:ef:6c:cc:39:97:92:
39:9f:bd:62:8b:ba:fb:52:1f:a1:f4:71:3f:07:81:
81:36:2e:82:d0:40:3d:ff:4a:41:77:4c:68:1f:34:
49:f4:64:fe:76:3f:77:b4:90:29:1d:5d:de:e4:87:
c8:17:eb:35:0e:45:c8:21:3a:cd:e7:25:32:c4:bb:
23:58:5c:aa:2a:a8:ec:6d:dd:9d:41:80:c8:c5:47:
d8:e6:32:d7:37:77:55:a2:33:4a:85:75:2e:58:04:
7a:f1:17:49:16:50:13:d4:bf:aa:63:37:1f:7a:41:
5a:b9:a9:d8:47:72:bb:3c:ba:6b:9b:75:bb:2a:08:
fb:81:99:d6:37:f4:ed:6d:68:c0:13:5a:d1:d3:b4:
cc:90:e1:1e:e3:46:d6:f6:9a:4a:8b:29:4b:e7:24:
c7:5f:57:f2:08:20:55:5e:14:97:d5:e8:9a:88:fb:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B4:42:BC:64:3E:C7:EF:FB:A8:DB:02:FE:F3:FD:47:57:87:87:1D
X509v3 Authority Key Identifier:
keyid:F3:3A:E5:D2:C1:A3:10:7E:F1:2F:4D:6D:D9:C9:0F:24:9C:26:78:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8zrl0sGjEH7xL01t2ckPJJwmeBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/cbbdc8-a180-4fd9-ade4-fa2566e58286/1/8zrl0sGjEH7xL01t2ckPJJwmeBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6f:87:11:34:bb:3a:c1:a1:6d:f7:09:59:9e:84:c9:fe:e6:
3f:fe:da:ed:f4:2a:30:00:96:58:2f:9e:4e:61:02:50:a7:df:
2b:68:3d:6e:6f:06:77:2b:07:b5:14:16:0e:8b:79:14:ea:c8:
89:9e:73:2d:1e:25:d7:79:2f:54:2e:f7:38:17:72:a6:cf:d9:
18:6c:4c:dd:f9:cb:b8:c2:81:0c:68:85:4b:5c:87:d6:76:1e:
ae:36:b8:1c:76:33:a5:c0:8f:6c:3b:58:5e:a3:c0:d9:ab:37:
a9:c4:96:90:59:13:24:5c:77:3a:fd:7b:3c:bd:65:36:68:54:
26:27:56:31:42:45:67:79:ed:d8:65:50:51:b6:38:6b:65:14:
cf:29:53:86:5d:6b:f5:6a:55:d5:31:95:20:5e:17:12:0c:85:
4c:69:f7:c3:3d:b8:e3:64:f0:45:63:92:6d:e2:2c:4d:75:4a:
b5:69:23:7a:10:32:33:0d:b0:53:b2:37:12:70:0b:7a:5c:3d:
9e:70:23:cf:b0:38:5f:ef:3c:19:61:17:7a:2c:20:04:c3:a7:
3f:df:0e:cc:fb:ba:fe:cd:4b:72:fa:3b:d2:12:50:2d:8b:5d:
31:6a:4d:6a:88:8a:3c:e4:aa:32:09:35:78:46:b6:26:82:f4:
3d:a9:39:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JcpChX2d3qPPvkf+g8xNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzM2FlNWQyYzFhMzEwN2VmMTJmNGQ2ZGQ5YzkwZjI0OWMy
Njc4MWIwHhcNMjYxMDE1MDYwMDI2WhcNMjYxMDE2MDYwMDI2WjAzMTEwLwYDVQQD
EygyMGI0NDJiYzY0M2VjN2VmZmJhOGRiMDJmZWYzZmQ0NzU3ODc4NzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/d8YRqe4JAF1H/cXSoyTKXt3Lyx
ODjxa5zkiu1fTpRs9JcQ4gKAVvhuGoQSzSWiNI38pngCpUT4hf5GonfmsqJDGOZi
aT7RfGWqnmeuydLfhJTvbMw5l5I5n71ii7r7Uh+h9HE/B4GBNi6C0EA9/0pBd0xo
HzRJ9GT+dj93tJApHV3e5IfIF+s1DkXIITrN5yUyxLsjWFyqKqjsbd2dQYDIxUfY
5jLXN3dVojNKhXUuWAR68RdJFlAT1L+qYzcfekFauanYR3K7PLprm3W7Kgj7gZnW
N/TtbWjAE1rR07TMkOEe40bW9ppKiylL5yTHX1fyCCBVXhSX1eiaiPuiqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCC0QrxkPsfv+6jbAv7z/UdXh4cdMB8GA1UdIwQY
MBaAFPM65dLBoxB+8S9NbdnJDyScJngbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQt
ZmEyNTY2ZTU4Mjg2LzEvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jYmJkYzgtYTE4MC00ZmQ5LWFkZTQtZmEyNTY2ZTU4Mjg2
LzEvOHpybDBzR2pFSDd4TDAxdDJja1BKSndtZUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcW+HETS7
OsGhbfcJWZ6Eyf7mP/7a7fQqMACWWC+eTmECUKffK2g9bm8GdysHtRQWDot5FOrI
iZ5zLR4l13kvVC73OBdyps/ZGGxM3fnLuMKBDGiFS1yH1nYerja4HHYzpcCPbDtY
XqPA2as3qcSWkFkTJFx3Ov17PL1lNmhUJidWMUJFZ3nt2GVQUbY4a2UUzylThl1r
9WpV1TGVIF4XEgyFTGn3wz2442TwRWOSbeIsTXVKtWkjehAyMw2wU7I3EnALelw9
nnAjz7A4X+88GWEXeiwgBMOnP98OzPu6/s1Lcvo70hJQLYtdMWpNaoiKPOSqMgk1
eEa2JoL0Pak5xA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:47 2026 by rpki-client