Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
File: 8nptTTKDKDFyXEjbUYokAPGpJL0.mft (raw, json)
Hash identifier: Migt8f9ltWtNIsHkmSJ4tghOU5hk7XgnOMN52RBlBW8=
Subject key identifier: 86:7F:A0:A9:9B:93:B9:1D:A9:64:E5:4D:5D:C9:3E:CB:DD:FE:F5:D9
Authority key identifier: F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
Certificate issuer: /CN=f27a6d4d32832831725c48db518a2400f1a924bd
Certificate serial: 019E1E360393DC56A400C1BC2E46E8ACDB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
Manifest number: 1818
Signing time: Tue 12 May 2026 22:01:56 +0000
Manifest this update: Tue 12 May 2026 22:01:56 +0000
Manifest next update: Wed 13 May 2026 22:01:56 +0000
Files and hashes: 1: 8nptTTKDKDFyXEjbUYokAPGpJL0.crl (hash: uDwg8dW2hgIYqkaRhnenGEYe+BCmv70POr+AVkpVjxM=)
2: lWqEQF0aFyTLgW-NFz8-Hzv0C6U.roa (hash: ht7qKNgmNwlg0mr9NDGMiwl5H8f2BO9IP2v8m07eRCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:36:03:93:dc:56:a4:00:c1:bc:2e:46:e8:ac:db:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a6d4d32832831725c48db518a2400f1a924bd
Validity
Not Before: May 12 22:01:56 2026 GMT
Not After : May 13 22:01:56 2026 GMT
Subject: CN=867fa0a99b93b91da964e54d5dc93ecbddfef5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3e:0f:b9:44:65:65:54:30:28:1d:8d:b5:67:
11:b2:44:ad:cb:41:29:64:c7:50:e4:4e:90:a3:19:
95:16:41:41:05:8f:19:bb:dd:07:a3:32:23:eb:89:
ef:7f:8d:1e:39:e3:4e:7e:ec:6a:bc:54:0b:fc:df:
28:64:cd:e3:b2:7a:b2:78:aa:08:8b:7f:e1:5e:7d:
cb:f7:50:3e:a6:a6:c5:33:79:de:eb:46:40:5d:a5:
14:b3:e9:bb:a9:f3:d1:9d:ba:a6:6c:47:9f:75:d2:
ff:ba:2f:d1:d7:e8:eb:3a:1b:0b:a0:5d:14:c1:c0:
80:ab:05:a1:1a:9a:2f:ed:51:71:25:b3:ab:48:14:
32:39:72:fd:35:7f:ad:ba:4f:0a:c5:14:3e:f6:f2:
a1:ef:96:3a:c8:c5:1e:f1:c9:bc:07:9c:31:96:ff:
ed:45:e3:1f:c5:f0:6e:af:43:3f:b4:f1:e1:79:c6:
f9:dc:69:f8:7f:c2:2d:38:2d:3e:1e:a8:b8:26:0b:
48:c0:20:7a:67:87:a8:bb:44:9d:7b:46:b2:ad:6e:
39:d9:33:b2:d1:e8:24:75:d1:b5:97:77:f8:f9:29:
1b:ca:49:40:0a:45:02:28:fd:13:c5:04:29:f2:ed:
45:9c:e9:cc:71:e4:48:5c:6a:77:29:aa:ce:ed:e3:
df:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7F:A0:A9:9B:93:B9:1D:A9:64:E5:4D:5D:C9:3E:CB:DD:FE:F5:D9
X509v3 Authority Key Identifier:
keyid:F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:44:16:a1:30:04:b2:58:22:c5:63:67:15:71:f7:b0:f3:e5:
ee:91:03:9f:b1:45:36:0c:41:89:76:03:e9:41:a9:ca:56:cf:
b7:88:a6:f1:39:82:06:82:d2:cd:a2:e1:cd:1a:68:02:6a:27:
f3:81:d1:4b:61:a0:24:ba:ee:84:22:9d:cd:a9:ef:63:35:b8:
9c:d9:d0:14:99:6c:e8:75:f9:e9:4f:5c:43:8e:b2:db:78:0e:
1f:cf:06:aa:ce:a3:1e:3f:98:f7:64:4e:fb:3d:0c:75:bb:ad:
56:2c:44:c0:62:34:54:f4:bc:40:8f:86:3a:fc:67:67:46:e6:
83:d6:42:8e:e4:9d:ec:cc:96:1c:5e:fc:1e:7d:9c:16:0a:4b:
eb:34:d3:eb:b2:b8:68:81:5d:ce:23:e8:2f:b3:62:c1:85:1a:
9e:c0:c6:af:96:da:15:ba:f4:5d:23:5e:80:65:df:02:77:85:
2f:18:65:4c:2e:5e:60:a1:f2:c4:69:7e:7f:c1:4f:6e:b1:e6:
74:d5:0c:b2:14:ca:d6:58:f4:14:d5:b5:28:5e:8a:75:bb:d0:
9c:fa:c3:b3:af:0f:c3:7e:fb:d0:a7:46:38:50:ba:22:5b:20:
11:2b:bf:ad:c6:1f:60:5e:f2:f1:11:30:5d:12:fb:dd:d5:e8:
19:23:b7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:26:09 2026 by rpki-client