Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: 2TtBqt2ScHyLcyWMe2CgcCgtW6ENG3DEXJp7gEySIGw=
Subject key identifier: 8D:F1:C9:C4:1C:B3:A5:AD:CB:5D:42:A7:5D:41:7D:DA:3E:C1:2E:CF
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 019D2BF2F57A24C9D61C0FEB4FA978035D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 1299
Signing time: Thu 26 Mar 2026 21:00:35 +0000
Manifest this update: Thu 26 Mar 2026 21:00:35 +0000
Manifest next update: Fri 27 Mar 2026 21:00:35 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: eetIMd8qZNGOKYoBhJv5LkKaGp1laERJ9cDuDldPW/c=)
2: GOJdmQeTfRZxvLli-b1t8ivPIP0.roa (hash: rE4/LNjEHFf2tYypahcaP12dhBhPp76Zx6vdg4QGZdc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:f2:f5:7a:24:c9:d6:1c:0f:eb:4f:a9:78:03:5d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Mar 26 21:00:35 2026 GMT
Not After : Mar 27 21:00:35 2026 GMT
Subject: CN=8df1c9c41cb3a5adcb5d42a75d417dda3ec12ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:87:4e:20:17:80:f6:86:95:b5:63:3b:fd:
67:e1:35:a7:44:9a:4d:ce:0e:1b:c8:0b:43:53:2d:
48:49:3b:15:77:b9:5b:87:c0:d6:68:b7:ec:de:26:
fc:b2:63:ec:29:13:55:7f:7d:80:fa:d9:41:85:4d:
63:96:76:54:3f:db:6f:be:e5:fc:45:18:21:35:dc:
f7:34:39:e3:62:df:16:aa:8f:23:8b:8a:66:3c:89:
80:24:f0:9a:ae:43:90:5f:bb:bf:ea:79:a8:fd:5c:
02:4f:db:47:f7:89:02:0b:9c:32:9e:e8:87:ac:bd:
3b:9e:8a:af:d7:66:f6:fb:ee:59:6c:c0:a2:a7:ec:
66:29:88:06:86:de:1c:53:38:f5:f9:25:a9:29:fa:
a2:41:63:93:d8:f0:f1:9a:5c:58:a5:dc:d9:77:aa:
01:44:7f:b8:fb:fd:36:b5:48:b6:c9:e7:b2:52:b8:
d2:c3:d6:34:4c:3c:e4:ff:e6:3f:76:dc:01:49:58:
68:17:a9:3a:c2:f2:13:3e:f1:c0:88:2b:1f:bf:ad:
c3:7c:f6:cf:f1:42:6c:10:63:97:00:89:7b:df:5a:
88:20:f1:68:08:6e:25:f7:6b:1c:a4:54:82:f1:d2:
ea:00:80:d0:77:1a:f2:7c:e7:fd:69:41:52:6a:d1:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F1:C9:C4:1C:B3:A5:AD:CB:5D:42:A7:5D:41:7D:DA:3E:C1:2E:CF
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0a:68:da:ac:ee:c4:08:09:5f:e6:a8:2b:e5:1a:68:fe:42:
6e:18:b7:98:91:4c:69:2c:5e:9a:24:70:e1:6e:6c:10:8b:bf:
82:3e:e3:e7:bb:f5:35:53:bd:83:07:98:ce:33:21:ab:03:0c:
17:f7:17:a1:7a:58:c1:48:13:4b:6c:18:af:94:2f:34:6a:b8:
3b:6c:dd:af:0f:92:a7:0f:e6:44:37:c5:ad:46:1e:df:85:fb:
e3:5a:2a:8e:40:bf:1e:bb:d0:c2:3a:fb:b0:20:c5:db:5c:75:
44:2d:60:6a:30:ac:d3:a8:4a:ee:6e:b5:b2:35:53:8b:dd:6b:
5c:60:71:f7:66:86:91:ac:51:73:63:eb:cb:81:ce:eb:fc:51:
7b:e6:5e:e5:49:aa:06:aa:de:9b:3b:42:a9:17:c1:db:a1:21:
8b:64:1f:11:6b:bd:9c:f6:c1:64:f0:04:d5:3e:85:cf:16:99:
c4:59:63:60:da:be:87:57:d2:fb:b5:19:24:8a:d5:ad:74:ed:
35:0a:61:9e:ed:6b:61:a1:bb:03:f0:ef:66:dd:db:0f:61:64:
11:d5:61:85:89:de:e7:67:a8:67:f1:b5:b9:ce:b3:73:6c:96:
96:c6:ef:b6:87:92:f2:73:fd:88:92:2b:28:1d:6b:74:1a:05:
6b:eb:23:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:50:20 2026 by rpki-client