Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
File: 8phZtw6kUOE62ockwOtr7syNqpE.mft (raw, json)
Hash identifier: kWQb6xiFh7aSbVEwTqqAHhDXlFM98RD/Wju00Nn5xp8=
Subject key identifier: 47:80:12:7A:72:5C:6C:6D:62:B6:06:6A:4B:1F:87:89:ED:68:B5:0F
Authority key identifier: F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
Certificate issuer: /CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Certificate serial: 019D2A725DE717D38BEFFD23E32178DBD8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
Manifest number: 08EA
Signing time: Thu 26 Mar 2026 14:00:31 +0000
Manifest this update: Thu 26 Mar 2026 14:00:31 +0000
Manifest next update: Fri 27 Mar 2026 14:00:31 +0000
Files and hashes: 1: 8phZtw6kUOE62ockwOtr7syNqpE.crl (hash: X9rJBHuGDA+UMMSKnN87ZMWyiP6GJOqS7x1/lfDkwzU=)
2: NSu3QEv-adix_Q5roohaGM-bpUY.roa (hash: VnW6Wcl5mZCO2kBW9kdAmVPadw5Gk+HyABLxpyWmKB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:5d:e7:17:d3:8b:ef:fd:23:e3:21:78:db:d8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f29859b70ea450e13ada8724c0eb6beecc8daa91
Validity
Not Before: Mar 26 14:00:31 2026 GMT
Not After : Mar 27 14:00:31 2026 GMT
Subject: CN=4780127a725c6c6d62b6066a4b1f8789ed68b50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:65:4c:f6:1a:e4:b2:5e:7c:d8:4f:23:13:6f:
c9:9e:d8:c7:3d:ad:05:d7:6c:d4:fd:c9:3a:49:7b:
43:ba:4f:dd:0a:cb:f5:77:30:43:0d:c5:50:04:9f:
de:7a:58:b9:08:cc:18:98:4c:af:fe:d9:b8:5f:fb:
6b:20:b9:f3:1f:c1:0b:22:18:29:da:89:54:fe:0e:
82:61:68:dd:ed:3a:a8:56:02:99:2a:8f:6c:4e:d3:
35:8f:f5:d4:2e:86:2e:23:62:75:0c:30:79:24:2e:
e6:22:a7:48:5e:c6:b4:ad:28:0b:e1:a5:2c:4c:c3:
77:cc:32:10:8d:e9:5a:e1:a9:54:f1:c2:a3:06:41:
a0:0e:7e:a4:e2:b5:85:b5:d4:6a:75:f7:b6:6e:59:
85:ef:59:84:46:3b:e9:cb:16:e2:6d:69:ac:3d:19:
f4:1c:a2:f4:37:e3:ae:13:cf:51:e1:e6:3c:61:9b:
df:9e:3c:a0:af:eb:c1:62:67:a8:f0:fc:3d:29:40:
d4:e1:64:2b:92:01:92:f3:cf:fe:40:1b:50:c2:ec:
2d:d6:e4:56:bb:fa:23:d0:cb:6f:4d:e2:d6:9f:11:
a6:4b:70:86:32:e4:31:22:7c:6a:d7:1c:0c:e8:d1:
3b:be:b7:1f:cd:ad:f7:06:07:71:34:bb:4f:21:d5:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:80:12:7A:72:5C:6C:6D:62:B6:06:6A:4B:1F:87:89:ED:68:B5:0F
X509v3 Authority Key Identifier:
keyid:F2:98:59:B7:0E:A4:50:E1:3A:DA:87:24:C0:EB:6B:EE:CC:8D:AA:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8phZtw6kUOE62ockwOtr7syNqpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/1f040b-b310-438b-b15e-3df47b620d60/1/8phZtw6kUOE62ockwOtr7syNqpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:19:5f:cd:81:bf:08:9b:20:c5:a2:29:d2:54:e3:2e:7a:80:
54:88:80:91:11:db:04:a6:ea:9b:a0:4e:f2:34:a8:33:c0:48:
af:e3:74:0d:3a:58:f8:02:e0:31:4f:49:25:ea:17:31:08:da:
91:95:98:74:76:ed:0c:31:52:e9:00:4e:bf:dc:9e:78:bd:49:
0f:14:30:45:9b:c6:53:53:e5:02:ea:47:2e:f3:db:9b:17:f9:
45:45:72:f7:77:c7:12:e3:f5:bc:86:ad:a9:12:a4:7d:a3:b3:
9f:a9:a0:1e:f2:2a:d3:3c:7e:fb:18:08:94:6c:ce:86:5d:1b:
dc:8a:05:72:3a:0f:4e:be:89:e7:e7:f5:1c:0f:d6:50:43:e7:
8e:1f:f8:7a:2d:bc:6c:d7:24:cd:0d:19:2e:6b:63:bd:5e:f8:
b5:cc:51:6d:5a:b7:dc:76:b4:66:3c:b7:0b:84:9a:de:89:96:
17:1f:23:ba:a9:26:0e:83:cf:8f:04:33:59:b7:4c:10:8d:50:
dc:09:30:74:1b:72:54:36:64:ef:0b:1f:b8:43:a4:ad:31:b2:
ab:ef:0f:33:11:73:00:f5:47:cb:47:91:15:14:19:3d:63:52:
dc:f9:57:65:e7:66:50:5a:33:96:c4:6f:da:c4:7d:74:6c:ae:
21:db:29:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:27 2026 by rpki-client