Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json)
Hash identifier: GAU14KG0d60donHktrd9eoc4L04GTaRToxuxFGDMiq8=
Subject key identifier: FF:D0:60:F5:94:56:BA:FB:A1:EA:68:A2:2C:79:C3:FC:DD:AE:9D:1D
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 019D2772989D70F8BCA7B50741E2E99D584F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
Manifest number: 1408
Signing time: Thu 26 Mar 2026 00:01:54 +0000
Manifest this update: Thu 26 Mar 2026 00:01:54 +0000
Manifest next update: Fri 27 Mar 2026 00:01:54 +0000
Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: lWAIRxhW9UJbfuuT6m6anYG/ik4rrJjZtXmH34xmbyQ=)
2: bPDQL4TDwBKyo0KglJ1jUDcS2mA.roa (hash: gTJOIMiebmbjMQAf62eTV7rVcUuFKkthtF5Z6hyFDNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:98:9d:70:f8:bc:a7:b5:07:41:e2:e9:9d:58:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: Mar 26 00:01:54 2026 GMT
Not After : Mar 27 00:01:54 2026 GMT
Subject: CN=ffd060f59456bafba1ea68a22c79c3fcddae9d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:ae:cf:8b:70:fd:8b:9b:2c:f4:0d:fa:fc:
d2:07:fd:78:fa:29:ee:cd:00:f0:ad:cb:79:8d:61:
26:6b:7e:cd:27:86:0e:04:ef:ef:53:5e:d3:ad:52:
c9:b8:a2:33:90:de:df:cd:9a:cb:95:d7:67:a9:12:
62:3c:6b:bc:a3:d1:57:ca:93:e4:43:ab:45:5c:a6:
5d:6d:a6:38:d0:f2:eb:9c:11:e3:92:25:d5:69:df:
3a:fc:6f:15:35:28:5d:27:a7:12:75:77:33:2a:67:
62:98:66:57:aa:02:1f:53:2a:e3:ee:38:22:5a:1d:
32:15:ad:ff:1f:f9:53:a1:ee:07:09:65:c3:40:22:
9f:85:ca:e0:2e:19:29:8e:81:7a:17:38:d3:8e:fe:
51:39:b1:1d:ac:b8:3e:06:11:9c:96:6f:cf:71:4b:
5b:aa:2e:ab:18:1f:4d:2c:cc:72:39:27:47:00:ed:
42:a9:d1:9e:47:dd:bb:e4:b0:29:de:bb:d5:c1:b5:
7d:e3:cb:95:ee:85:2c:78:19:69:a8:44:17:8e:64:
9f:e3:36:75:0b:27:d1:6c:43:ba:38:22:f8:28:2a:
03:fb:35:0b:9d:10:90:2e:2a:8f:30:54:0b:8e:43:
4e:08:82:97:4d:42:bf:0a:6f:71:41:d7:3d:bd:c6:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:D0:60:F5:94:56:BA:FB:A1:EA:68:A2:2C:79:C3:FC:DD:AE:9D:1D
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:05:d5:94:4a:b1:e9:24:87:9d:39:09:92:c1:b5:ea:52:02:
bc:25:2d:09:c2:2c:cf:51:24:d5:df:47:c2:b6:48:8d:b2:de:
1b:96:00:53:2f:86:75:66:f7:fd:be:65:bf:c4:df:fa:d5:58:
01:e1:05:6a:76:ec:f8:3d:e2:39:86:56:b4:67:bc:ab:99:dc:
76:71:c3:5d:c0:07:cb:74:85:ba:ee:f4:29:c4:f9:3d:ad:66:
10:87:ce:ed:a0:88:2f:de:63:7f:42:35:3f:3e:80:e5:e2:e3:
81:0f:92:df:da:7c:9f:4d:47:bb:00:d3:7e:44:ba:0c:69:9b:
c9:e4:bf:4e:d9:61:e9:32:b0:bf:56:09:4a:0e:db:ab:50:80:
44:c8:88:73:f9:bb:1f:8f:1a:c8:49:97:58:7f:39:1a:8d:c5:
50:8d:f2:03:bc:f9:2d:fa:71:28:2f:cd:b2:1f:db:d0:fa:e9:
23:c6:e5:7c:7b:ad:92:c1:8e:56:81:8e:1a:08:32:3f:c6:9e:
26:56:47:14:ca:d6:dc:7a:d6:58:07:b2:4a:ec:ac:38:ea:b2:
58:c9:50:e1:f9:15:1e:b7:ef:ec:83:f7:fe:fb:a2:73:d8:e5:
4a:06:93:30:d9:55:6a:06:c3:20:8c:30:bc:e6:d6:5b:23:94:
83:75:4b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:28 2026 by rpki-client