Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
File: 8nptTTKDKDFyXEjbUYokAPGpJL0.mft (raw, json)
Hash identifier: xPSYvFcGGZCyKa4qTnbhAU7cwaYO99khTgAub0evV9I=
Subject key identifier: 84:A6:60:99:DD:7A:EC:35:1D:DD:44:C4:AC:3E:C9:05:44:57:F4:3A
Authority key identifier: F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
Certificate issuer: /CN=f27a6d4d32832831725c48db518a2400f1a924bd
Certificate serial: 019D27044AEA19BEC4D72645B2FAA3783843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
Manifest number: 1798
Signing time: Wed 25 Mar 2026 22:01:25 +0000
Manifest this update: Wed 25 Mar 2026 22:01:25 +0000
Manifest next update: Thu 26 Mar 2026 22:01:25 +0000
Files and hashes: 1: 8nptTTKDKDFyXEjbUYokAPGpJL0.crl (hash: ZrNomc763YlrIzmuu5VJBlaYpcsfFSip5CCag+C6bTw=)
2: lWqEQF0aFyTLgW-NFz8-Hzv0C6U.roa (hash: ht7qKNgmNwlg0mr9NDGMiwl5H8f2BO9IP2v8m07eRCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4a:ea:19:be:c4:d7:26:45:b2:fa:a3:78:38:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a6d4d32832831725c48db518a2400f1a924bd
Validity
Not Before: Mar 25 22:01:25 2026 GMT
Not After : Mar 26 22:01:25 2026 GMT
Subject: CN=84a66099dd7aec351ddd44c4ac3ec9054457f43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:03:b7:60:19:dc:f7:6e:ee:f3:ab:f0:b8:43:
2e:f4:fa:6c:20:32:a2:25:30:f2:13:2d:a2:4e:68:
b6:43:29:fd:07:c1:3f:4c:b7:f3:d7:b9:e0:f3:d7:
1a:ec:53:e6:14:15:88:65:ce:7d:35:d4:0c:15:d0:
d4:cf:ee:70:a5:62:4c:d2:a7:2c:d5:6d:cd:31:d4:
27:4d:55:97:1a:47:95:3c:24:71:86:d6:ab:ae:d5:
b9:0f:94:fb:33:2f:98:16:6e:b6:a2:15:03:84:f4:
09:3e:e2:3c:4d:fd:fe:b7:14:8e:43:e8:f0:43:bd:
29:18:57:17:6b:57:3a:c8:61:f7:b8:20:13:fe:a1:
e6:29:1d:44:7b:65:81:a3:be:32:9b:e1:e9:2e:a1:
1f:02:67:ac:68:3f:09:f7:08:0a:f5:d5:cd:d4:82:
24:0c:7b:33:15:61:98:e3:e7:12:18:5a:f4:48:4b:
9a:bc:7b:b2:18:83:c6:6f:0a:40:3f:41:60:f6:85:
f8:57:66:ec:a8:b3:4e:b7:3d:77:ca:bc:e7:a2:f6:
0b:fe:09:0c:d4:32:67:fe:2a:2d:38:18:6a:de:0b:
cd:1c:b5:c9:1f:33:d3:51:a8:90:c0:10:13:f2:27:
12:dd:d8:9b:74:d6:47:43:9f:b2:51:0c:9f:84:2a:
f6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A6:60:99:DD:7A:EC:35:1D:DD:44:C4:AC:3E:C9:05:44:57:F4:3A
X509v3 Authority Key Identifier:
keyid:F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:39:88:61:90:7f:59:a4:51:fc:cd:c0:b0:31:6d:e9:da:28:
2e:07:1a:5a:dd:4f:5c:7b:c7:27:52:89:de:2d:ae:4c:27:df:
f3:0e:6f:44:c4:2e:de:ce:f8:94:e1:74:26:72:a7:d9:44:31:
98:a6:cb:13:2f:37:a4:83:2d:50:c8:d2:cd:fd:50:74:19:18:
54:7d:7a:41:f4:74:6b:21:89:78:5e:09:aa:23:9a:14:52:06:
9b:17:ed:36:32:9c:5c:62:29:7b:36:09:71:ff:3a:78:f8:80:
6f:31:bf:35:2c:c6:3b:fa:d6:e9:e1:0d:ae:ef:21:a6:89:21:
9b:36:e9:44:91:bb:49:a6:f0:27:7c:c2:43:d7:5d:b5:cf:e1:
43:ba:7d:0f:81:4a:8d:dd:f0:3d:d2:c6:d0:51:8a:6a:12:af:
c7:17:de:a9:a1:a8:b7:6a:3f:ae:bc:dc:15:f2:cb:3a:cf:b9:
69:f2:d6:2f:1b:b3:8a:ab:12:62:52:2c:45:f2:47:fa:00:c9:
2d:ad:b9:b2:ef:f0:ae:3e:e3:d9:da:89:5a:7d:5b:9c:b1:c2:
1d:4c:d0:f8:9f:13:c1:06:06:b9:32:8b:25:be:83:a1:ad:3c:
0c:45:67:a9:f6:4a:f2:39:57:5c:f8:68:c6:68:c5:5f:57:7e:
a9:48:46:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:00 2026 by rpki-client