Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
File: 8nptTTKDKDFyXEjbUYokAPGpJL0.mft (raw, json)
Hash identifier: 88PaiIhD50pdbVeZy8gtoe2TmQKzLPtzemzieD+8eK0=
Subject key identifier: 94:2D:C8:9F:DC:64:5F:1E:03:3E:88:EC:DF:21:9D:D1:A5:ED:02:86
Authority key identifier: F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
Certificate issuer: /CN=f27a6d4d32832831725c48db518a2400f1a924bd
Certificate serial: 019CAB6B6564FFA3DFB513D1A2F8BD8EDE1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
Manifest number: 1758
Signing time: Sun 01 Mar 2026 22:01:08 +0000
Manifest this update: Sun 01 Mar 2026 22:01:08 +0000
Manifest next update: Mon 02 Mar 2026 22:01:08 +0000
Files and hashes: 1: 8nptTTKDKDFyXEjbUYokAPGpJL0.crl (hash: S7zFELAHP4wPNCsT49oRHWI0itZAYJ/c5Sry0IHKmdg=)
2: lWqEQF0aFyTLgW-NFz8-Hzv0C6U.roa (hash: ht7qKNgmNwlg0mr9NDGMiwl5H8f2BO9IP2v8m07eRCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:65:64:ff:a3:df:b5:13:d1:a2:f8:bd:8e:de:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a6d4d32832831725c48db518a2400f1a924bd
Validity
Not Before: Mar 1 22:01:08 2026 GMT
Not After : Mar 2 22:01:08 2026 GMT
Subject: CN=942dc89fdc645f1e033e88ecdf219dd1a5ed0286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:d9:bd:5d:84:7e:60:16:2e:27:62:3a:66:
e1:2c:43:28:9a:b7:af:09:de:f6:7b:51:58:78:6a:
59:6c:50:7b:c8:d9:86:cb:7d:3f:78:87:8e:43:fd:
cb:e9:55:fc:77:d0:ec:c5:78:c1:05:aa:cf:fc:42:
34:80:d4:c9:3a:f4:ac:69:0c:e4:d1:0f:c3:6f:6e:
f4:08:a5:70:6a:22:9c:23:0b:76:2b:ae:ab:f7:7c:
47:5c:7c:ae:da:82:c7:e2:3d:ad:9d:4a:49:d7:9c:
07:a0:b8:31:e7:ff:e2:25:2c:a7:f4:19:70:f1:f6:
ea:3e:5b:04:fc:ab:78:21:55:34:21:3f:d3:05:c9:
a6:90:e0:41:d6:19:8e:16:9e:c1:bd:1e:cf:83:8d:
2b:2d:d2:e0:8c:4e:86:fa:a1:24:cf:1b:9e:6b:f1:
90:6b:ac:8e:9e:53:e1:55:e3:cf:76:01:3f:09:e7:
35:05:4e:0f:df:dc:70:4e:b3:78:a2:6d:f2:43:54:
3e:b5:71:3b:69:75:9b:3f:d9:27:56:ee:f4:bc:b2:
ee:9e:3f:71:d8:85:66:09:a8:ba:4e:9c:68:eb:09:
6e:a4:83:b4:50:c0:1a:45:c8:50:af:d8:d8:e6:49:
b5:92:82:35:78:f7:76:ff:21:44:ff:a9:ea:d4:7f:
43:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2D:C8:9F:DC:64:5F:1E:03:3E:88:EC:DF:21:9D:D1:A5:ED:02:86
X509v3 Authority Key Identifier:
keyid:F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e3:9a:99:6a:0c:66:eb:9a:1a:91:d4:00:aa:00:2d:5a:8e:
ec:d4:9f:05:06:5c:5d:07:8c:2a:f8:18:1a:fa:28:f4:d5:b4:
ba:b6:df:32:01:24:b5:0d:c4:58:d7:22:04:06:06:a5:31:fb:
7a:bd:04:4e:6f:bb:19:a1:f1:77:c9:55:af:44:59:63:f2:20:
1c:53:38:cc:95:db:4f:88:52:fd:c6:32:e9:e2:64:a6:89:d4:
e5:ac:cf:a0:6a:3f:b5:75:78:83:b6:ef:2c:b2:27:b8:20:8b:
93:18:ec:b4:43:4b:51:90:ff:29:2b:c0:d9:87:6d:7d:12:ad:
e6:12:4a:43:74:c6:cf:f9:69:ce:8a:b6:1f:84:6b:15:af:0f:
2e:07:21:1f:78:d3:50:40:eb:26:13:45:29:7e:60:2c:23:c4:
a9:70:08:f3:ee:14:41:f9:1f:74:a0:9f:a3:08:6b:56:81:9f:
f5:88:18:70:4e:7d:7a:24:93:92:c3:2f:13:11:54:3b:d3:30:
3d:7f:70:8b:80:74:60:11:f4:4e:db:bc:46:62:17:56:4a:78:
49:b9:5c:0d:e1:68:20:0f:b6:c5:4b:34:50:76:24:fa:7e:4c:
73:5d:1b:9e:97:ee:d6:40:ac:3e:6f:5f:f1:85:6d:3a:66:81:
bc:a8:6d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:07:51 2026 by rpki-client