Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
File: 8nptTTKDKDFyXEjbUYokAPGpJL0.mft (raw, json)
Hash identifier: EY4hUswLluT0pPqCa+BzK4WPmnBzw5SufF2XaHAt2Iw=
Subject key identifier: 8B:CA:9C:70:8D:92:D1:69:EA:83:B3:C7:F8:96:44:20:0D:33:A5:7B
Authority key identifier: F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
Certificate issuer: /CN=f27a6d4d32832831725c48db518a2400f1a924bd
Certificate serial: 019D98F4026F72171F778E15219213D0590A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
Manifest number: 17D3
Signing time: Fri 17 Apr 2026 01:00:21 +0000
Manifest this update: Fri 17 Apr 2026 01:00:21 +0000
Manifest next update: Sat 18 Apr 2026 01:00:21 +0000
Files and hashes: 1: 8nptTTKDKDFyXEjbUYokAPGpJL0.crl (hash: AtkhhPL6X+9HeBnOLDKVpVMX8wGywouFc2q76d0O/MI=)
2: lWqEQF0aFyTLgW-NFz8-Hzv0C6U.roa (hash: ht7qKNgmNwlg0mr9NDGMiwl5H8f2BO9IP2v8m07eRCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:02:6f:72:17:1f:77:8e:15:21:92:13:d0:59:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a6d4d32832831725c48db518a2400f1a924bd
Validity
Not Before: Apr 17 01:00:21 2026 GMT
Not After : Apr 18 01:00:21 2026 GMT
Subject: CN=8bca9c708d92d169ea83b3c7f89644200d33a57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f7:80:92:2d:1f:e5:3b:4d:fe:a1:f5:2c:b9:
61:2b:c3:af:2d:a3:bb:0f:58:92:9c:58:85:e0:c0:
37:c3:d0:0e:d1:19:54:04:29:34:42:08:3a:ba:fe:
bb:1f:1c:67:09:ad:d6:c9:63:27:c4:d5:39:22:dd:
4e:d9:6a:25:6a:9b:df:0f:41:c8:0b:0c:fb:bd:f5:
bc:e7:3e:1d:73:b9:77:4b:6c:4b:a3:5f:44:f0:7b:
e0:a0:32:4f:9c:18:5e:10:57:de:7b:f7:d9:2f:d3:
b6:5b:bc:7e:d9:44:aa:df:79:7b:fb:4a:96:23:8e:
2a:9b:6f:62:86:76:30:a1:50:58:ef:a2:68:fc:04:
a9:2b:8b:42:e0:08:dc:88:e2:44:cd:f2:bb:33:c5:
04:1b:50:58:74:19:1a:51:10:5b:c7:90:71:1c:53:
ac:1a:41:fe:b5:ea:0a:e1:5a:c2:74:cd:90:72:da:
c7:cd:bf:8d:e6:af:ce:2a:92:55:d6:9e:21:62:29:
f2:9c:66:04:d3:f9:b8:1d:c3:d2:4d:39:6c:4d:49:
6c:91:48:9b:00:f1:39:35:b1:f4:f2:a9:86:c2:1a:
33:b6:21:af:58:d8:84:8c:72:4f:ff:63:2f:f5:1c:
8c:78:51:71:03:87:a5:ee:20:49:b1:c0:85:c9:0e:
b3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CA:9C:70:8D:92:D1:69:EA:83:B3:C7:F8:96:44:20:0D:33:A5:7B
X509v3 Authority Key Identifier:
keyid:F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0d:b4:4b:37:da:f4:c2:0d:ca:5e:11:57:45:5a:52:da:4c:
d9:d3:b5:ee:16:ed:d4:8d:74:b0:9d:96:33:4a:e7:94:d0:df:
a2:24:9e:93:c9:d6:dd:04:d3:8d:c1:05:3b:4b:3e:80:f6:55:
fd:e1:31:6c:dd:06:a4:f6:76:d5:58:33:9f:01:ed:00:4e:9f:
1f:2b:35:86:b5:99:7c:7b:2a:34:0b:04:bb:88:75:e6:fd:39:
f1:ae:c7:9b:ca:6d:b1:a2:50:57:6c:f2:1c:97:38:97:c6:09:
14:05:b3:35:ac:18:15:17:15:50:0a:7c:39:40:da:bc:6e:a4:
e1:47:48:9e:df:9b:fc:5a:ac:bb:56:16:e7:80:46:d7:e2:8a:
93:50:57:ce:31:be:59:49:dc:31:48:eb:4b:7f:78:53:e2:54:
8c:84:da:40:26:d4:ae:4b:c8:96:0b:e2:a0:03:12:00:12:16:
63:b3:96:6e:d1:f0:17:b7:e4:1e:9e:9b:80:da:f5:10:1e:52:
7f:c3:c9:56:8b:a4:e2:37:10:24:01:1d:98:bf:ce:05:b7:5d:
e4:6a:a3:ae:24:40:33:9c:8c:e7:4f:ae:11:d4:40:44:a0:0c:
ba:62:73:8c:70:28:1d:2f:52:b7:04:66:55:20:95:9c:80:7b:
77:26:f0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:01:02 2026 by rpki-client