Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
File: 8nptTTKDKDFyXEjbUYokAPGpJL0.mft (raw, json)
Hash identifier: /7Q8ZNWPVwr14RQzqdtGLv5kDjbjKlyHdhmylZQavzk=
Subject key identifier: DF:AD:42:B2:42:2B:C2:6D:A5:CD:16:34:EC:46:0A:F8:1B:03:D1:69
Authority key identifier: F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
Certificate issuer: /CN=f27a6d4d32832831725c48db518a2400f1a924bd
Certificate serial: 019FA82B6C5150682E294D50D221A7EB47D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
Manifest number: 18E4
Signing time: Tue 28 Jul 2026 10:00:45 +0000
Manifest this update: Tue 28 Jul 2026 10:00:45 +0000
Manifest next update: Wed 29 Jul 2026 10:00:45 +0000
Files and hashes: 1: 8nptTTKDKDFyXEjbUYokAPGpJL0.crl (hash: K4d0aPw+QRIUycaPjNACbZXMSaMXbZgRAEyqNK1FTs8=)
2: lWqEQF0aFyTLgW-NFz8-Hzv0C6U.roa (hash: ht7qKNgmNwlg0mr9NDGMiwl5H8f2BO9IP2v8m07eRCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:6c:51:50:68:2e:29:4d:50:d2:21:a7:eb:47:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a6d4d32832831725c48db518a2400f1a924bd
Validity
Not Before: Jul 28 10:00:45 2026 GMT
Not After : Jul 29 10:00:45 2026 GMT
Subject: CN=dfad42b2422bc26da5cd1634ec460af81b03d169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a9:18:16:a4:86:37:7d:e9:48:df:89:c6:90:
6f:c2:d5:a5:c5:1c:94:7b:d0:a7:59:9a:c7:d7:09:
63:79:11:a5:c2:6b:d3:28:63:26:52:ba:9f:dd:da:
60:21:be:b7:0e:87:46:c8:21:ca:05:75:04:0e:f5:
01:6e:b6:53:55:ea:77:24:eb:fe:b1:bb:ac:12:11:
1c:d3:4c:40:69:96:db:21:26:c7:43:1a:d7:22:9f:
1e:51:ed:56:d0:8d:c3:35:c5:9c:f4:53:d8:2a:4e:
1f:c8:7f:e7:11:85:8c:50:4a:0b:8f:21:0b:0e:8e:
dc:eb:a9:c6:37:50:2b:5c:5d:15:d0:bd:f0:47:1c:
2f:df:82:41:5a:2c:79:d9:66:6a:d0:68:7b:5f:35:
b6:6a:df:4b:f3:1d:93:b2:d3:57:83:e2:06:d7:19:
8b:8e:27:21:df:fd:37:14:e8:7e:fd:26:59:03:08:
8e:71:a8:05:37:0f:14:28:2d:ab:83:9e:14:2a:a3:
e7:de:3f:c7:9e:ce:f0:ff:bf:cf:ca:5e:a7:37:85:
a5:80:d8:88:52:14:ab:fc:b3:5c:2e:87:f5:13:1e:
67:87:1b:5b:3d:13:a2:74:6e:9e:d9:c8:96:f6:f0:
36:04:1b:b5:5a:2f:ff:fe:fe:ae:3f:cd:b0:09:01:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AD:42:B2:42:2B:C2:6D:A5:CD:16:34:EC:46:0A:F8:1B:03:D1:69
X509v3 Authority Key Identifier:
keyid:F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:55:e6:00:fb:7c:f8:22:95:fc:34:5e:55:ac:ba:be:80:22:
17:db:5c:c0:34:b0:42:cb:f0:9d:e2:9d:52:b2:4d:a6:96:3a:
84:b1:2c:f5:06:0b:35:e9:cd:f6:ba:1d:42:fc:fc:e7:63:f7:
bd:27:9e:76:5f:da:7c:03:e1:e5:e5:28:17:6d:a2:71:d6:33:
50:d6:77:b6:12:eb:34:ec:90:87:bd:b2:02:0f:cd:45:f0:1e:
95:a5:0e:39:8c:2d:98:56:ef:02:06:50:a4:96:93:8c:41:ef:
86:26:4a:6d:53:dd:76:a1:f2:e8:39:b8:7d:51:67:20:9b:6d:
f2:00:7f:48:d9:65:3d:39:e7:bd:0f:43:85:1f:ba:ca:cc:a4:
03:19:3e:7f:4b:19:4b:cc:d2:0e:f8:67:87:a4:0c:39:a8:fa:
68:8a:47:4e:5c:45:d4:a4:49:88:fa:cf:8e:7d:dc:9f:69:8c:
d0:ce:89:87:8d:e7:7d:c2:1f:94:3d:65:52:ab:0d:d1:7f:ee:
dc:e8:18:d8:ba:df:b2:85:68:b6:fd:2d:ae:fb:c8:a9:9f:5c:
a4:e6:15:39:dd:d6:d2:12:f7:d8:90:67:c7:30:38:a0:5b:63:
b0:4c:5c:0d:68:64:9e:1b:27:62:12:ad:2a:53:01:f6:7e:6f:
a5:87:5e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:23:55 2026 by rpki-client