Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json)
Hash identifier: Tpc7cuzOxO7Slnt30XiGxAOUeaUvnMnzz5evD2BU3yU=
Subject key identifier: 3D:B0:03:BF:6F:4D:BB:D8:7E:03:B3:32:73:C2:7A:44:89:59:C7:F5
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 019CABD9849006CDD4570BB4F7092433E44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
Manifest number: 13C8
Signing time: Mon 02 Mar 2026 00:01:25 +0000
Manifest this update: Mon 02 Mar 2026 00:01:25 +0000
Manifest next update: Tue 03 Mar 2026 00:01:25 +0000
Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: Q7IFeN1gu7FlMDoiQLOaXBdLCQNmwZ2RQko3lyPCSNA=)
2: bPDQL4TDwBKyo0KglJ1jUDcS2mA.roa (hash: gTJOIMiebmbjMQAf62eTV7rVcUuFKkthtF5Z6hyFDNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:84:90:06:cd:d4:57:0b:b4:f7:09:24:33:e4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: Mar 2 00:01:25 2026 GMT
Not After : Mar 3 00:01:25 2026 GMT
Subject: CN=3db003bf6f4dbbd87e03b33273c27a448959c7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d5:97:d8:c8:5e:b0:31:13:14:3f:09:e3:e4:
72:e0:49:2b:47:d2:a9:23:33:5d:6a:4a:4f:97:db:
1c:68:59:56:0a:9d:73:16:fc:fa:37:5f:77:f0:bf:
37:af:74:7f:c1:2d:3b:02:41:cf:cf:b1:1d:8e:65:
b6:9f:27:79:fa:5f:84:94:38:6b:e9:a8:3d:6b:6e:
a1:84:09:3a:f3:93:30:9d:ad:9b:a9:7d:81:73:23:
35:18:f2:86:df:73:63:1b:96:db:66:ae:52:f3:2e:
11:9c:c5:f7:1f:b7:78:bf:10:ff:93:f1:1b:b1:c8:
8a:b4:69:9e:8e:4d:8e:a3:ad:7f:09:7c:d1:d3:c5:
b0:95:3f:20:50:45:19:b0:09:7f:4f:0b:77:d9:04:
66:d9:49:b7:c5:e2:dc:30:26:af:dc:73:8b:a3:54:
ec:af:f1:08:2a:a5:0f:73:4d:66:d1:7d:d8:8b:ce:
4c:0b:7b:81:56:94:e1:10:79:b5:a1:f5:68:4a:85:
90:d0:1f:c7:9e:e9:fa:c2:45:1e:f1:45:d5:86:fa:
d2:55:c4:c8:04:b1:ca:84:b7:a4:50:7f:69:ca:e9:
a7:30:8e:8e:b9:d5:75:30:d7:64:ef:79:68:db:2c:
9f:32:96:de:58:fc:be:7a:f8:9c:0c:0f:e8:6a:05:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B0:03:BF:6F:4D:BB:D8:7E:03:B3:32:73:C2:7A:44:89:59:C7:F5
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:96:61:0a:f8:c0:18:fa:71:e8:e6:8c:1d:c1:b5:67:b6:2a:
6e:6b:29:4f:53:98:72:5c:3a:d6:13:1c:bc:33:d3:73:f6:26:
23:53:a9:5f:10:01:d7:c4:33:91:26:86:1c:a0:96:dd:f0:cb:
2d:34:7c:c8:57:bf:82:39:87:73:34:2d:b8:5e:3a:45:a4:7e:
ce:2c:30:cf:02:1f:cf:b6:ef:19:02:80:04:32:80:b4:d7:99:
f4:26:b3:74:4a:f1:c6:93:53:bf:13:ac:d4:06:09:7c:9b:82:
9d:4e:44:07:33:3f:72:59:3d:3e:1a:2f:bb:c2:c7:74:6f:85:
63:63:3a:e8:ad:92:51:b4:3c:d0:4f:81:e0:c3:9d:08:a0:9f:
ab:73:8b:15:b4:e9:d3:5c:e1:93:7c:6a:bb:a2:da:eb:88:c2:
c0:47:52:d3:a7:4b:c2:e6:fb:50:a2:4c:5c:41:47:8f:46:77:
62:be:77:0e:dc:89:1b:33:20:b5:44:6d:25:cb:32:cf:f4:a9:
06:bd:09:ae:74:0b:7f:a0:0a:c5:8f:6b:8c:46:a4:9d:aa:1b:
2b:8a:e0:dd:9b:66:dc:67:d9:d2:85:65:e0:be:f3:e2:08:9a:
d2:e5:b5:87:fa:65:7c:56:d5:ef:17:61:3b:e6:43:d2:ca:a9:
0e:ae:95:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:50 2026 by rpki-client