Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
File: 8n7hjEY57qoWphkIzLRcepjV3Ws.mft (raw, json)
Hash identifier: Yn+UoMt7UV/5S5ltYe3+gw6CXTWHMHWLyFxDqdD7Iv8=
Subject key identifier: 12:87:FB:A3:95:C9:D2:AF:A4:B4:DD:AA:EF:18:43:CE:69:12:21:28
Authority key identifier: F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
Certificate issuer: /CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Certificate serial: 019CAB3495F4C4701591BB824C9DC1A01368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:01:16 +0000
Manifest this update: Sun 01 Mar 2026 21:01:16 +0000
Manifest next update: Mon 02 Mar 2026 21:01:16 +0000
Files and hashes: 1: 8n7hjEY57qoWphkIzLRcepjV3Ws.crl (hash: pEaY8uETRs+1xlgXqJ2sB1cMErs5PpXJ2aFB3HuZgYo=)
2: WRypO8-yDgb6NJZCCYorwXfwXbM.roa (hash: 4tIQDxaiySk1n1Tes8D8u/dP8eWmOAzkRZI8pT57S7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:95:f4:c4:70:15:91:bb:82:4c:9d:c1:a0:13:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27ee18c4639eeaa16a61908ccb45c7a98d5dd6b
Validity
Not Before: Mar 1 21:01:16 2026 GMT
Not After : Mar 2 21:01:16 2026 GMT
Subject: CN=1287fba395c9d2afa4b4ddaaef1843ce69122128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:bb:49:90:e9:3b:1a:2c:1c:61:d9:ca:8c:
23:ec:53:a8:3d:f7:c4:b6:d8:5f:20:fa:c0:b9:0f:
73:75:c1:05:eb:9a:73:72:66:d9:63:0b:b3:d3:e6:
ab:ff:50:cc:da:be:3e:e4:d0:b6:72:f2:c2:4d:36:
c5:cd:4c:ba:bd:5b:37:7b:f5:36:87:6e:9f:5c:b2:
a8:5b:8f:b1:df:d4:ec:b2:1b:2f:26:7d:7f:74:f0:
d3:39:31:07:64:ce:ab:e5:45:d9:27:52:21:e2:09:
55:28:d1:39:b0:27:04:7b:22:f6:04:30:80:76:e0:
26:33:bd:ee:ee:0a:d4:3c:a3:36:fb:16:8b:b4:e7:
de:a5:e0:01:03:d2:d6:df:41:d4:a1:75:ef:6a:af:
57:a9:fb:96:13:1c:ac:4f:d6:5d:c9:d8:8d:d6:a0:
20:e0:9b:e3:16:04:47:8d:3f:a8:51:6c:00:4b:2d:
4d:be:bc:cb:a1:e5:bd:0e:30:bb:c7:dc:a9:c5:9c:
95:be:cc:6c:68:77:87:34:cb:53:35:a6:3a:34:83:
8e:d4:d6:c1:78:45:7b:ae:3d:0c:72:49:b2:fb:5c:
c9:91:06:3f:d8:dd:45:0a:32:26:07:d3:4e:bb:68:
e0:f8:6f:fd:63:a7:fb:56:d3:64:ae:07:cb:89:87:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:87:FB:A3:95:C9:D2:AF:A4:B4:DD:AA:EF:18:43:CE:69:12:21:28
X509v3 Authority Key Identifier:
keyid:F2:7E:E1:8C:46:39:EE:AA:16:A6:19:08:CC:B4:5C:7A:98:D5:DD:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8n7hjEY57qoWphkIzLRcepjV3Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f58a2a-0f25-4831-bb09-a0dd3b5f15f8/1/8n7hjEY57qoWphkIzLRcepjV3Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:2f:4f:fc:c8:e9:1f:f7:80:66:d0:8d:4f:a3:97:20:e5:39:
f1:13:4e:cc:a0:41:6f:48:5d:a7:a9:23:48:63:7a:fc:0f:dc:
e2:1d:c0:6a:f3:18:89:04:a8:62:ee:58:46:4b:43:00:34:b8:
7d:67:27:de:bb:5c:98:22:34:7a:01:d8:54:0c:eb:56:7f:95:
fb:31:27:12:50:5c:91:fb:68:4f:c6:cf:61:3a:24:6d:3d:12:
b3:87:fd:ac:14:e8:99:b7:ff:8e:da:65:51:84:e3:c1:a9:92:
f8:5c:11:56:10:d1:5d:3a:14:7e:95:a4:91:2a:2b:44:4b:ac:
28:63:43:67:a3:eb:8c:c7:a1:75:8d:df:1b:ea:f9:d3:d4:2b:
8b:50:4e:56:07:43:75:8a:c7:a0:b8:84:9d:10:f8:69:99:c0:
ec:e4:ec:6b:a5:37:e2:cb:b3:d9:74:d9:12:3b:bf:7b:63:e2:
f1:74:4c:2c:49:0e:c8:15:c0:52:07:cd:94:8e:9b:f4:81:95:
b0:2b:8a:b4:51:ed:19:bf:c1:07:62:7d:40:2b:7e:16:91:6d:
d7:1e:41:d7:d6:fb:78:8d:3b:08:17:7c:92:d7:37:3a:19:ae:
ce:70:f7:30:d2:42:99:b0:b0:3e:54:54:f9:a6:4f:ff:51:e0:
a9:dd:57:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:28 2026 by rpki-client