Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json)
Hash identifier: gbnETWiBeUlkxY/Kr28zi+fwgPkR8EZEB3fWetF7mfA=
Subject key identifier: D7:82:7C:E1:6D:73:F7:8D:9A:32:23:9D:C3:9D:74:A3:5C:C1:D9:05
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 019E300523FB284AF5276BCE40EE6A8D03B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
Manifest number: 1491
Signing time: Sat 16 May 2026 09:01:43 +0000
Manifest this update: Sat 16 May 2026 09:01:43 +0000
Manifest next update: Sun 17 May 2026 09:01:43 +0000
Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: K1ldY6ELnxd27Gwsq38RMaI2/k8pYy9BsiiFofNlJdA=)
2: bPDQL4TDwBKyo0KglJ1jUDcS2mA.roa (hash: gTJOIMiebmbjMQAf62eTV7rVcUuFKkthtF5Z6hyFDNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:05:23:fb:28:4a:f5:27:6b:ce:40:ee:6a:8d:03:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: May 16 09:01:43 2026 GMT
Not After : May 17 09:01:43 2026 GMT
Subject: CN=d7827ce16d73f78d9a32239dc39d74a35cc1d905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:a3:11:fc:cd:26:76:8f:04:5c:06:b2:17:
44:f4:44:82:38:d8:42:97:75:5f:6d:86:3f:ac:a3:
2b:9f:d0:c8:83:f0:9c:e6:94:3c:ac:0f:b9:a9:e8:
9c:7f:52:9f:6a:0b:1d:63:5e:e8:f7:8c:d7:70:04:
71:9d:cd:82:16:e3:59:aa:a7:9c:51:4e:cd:35:cb:
56:e8:8f:ae:97:c9:f2:ee:c9:22:13:ee:2b:b4:5e:
8d:37:f4:ee:c9:8a:01:f4:2f:65:f1:3f:fd:c9:24:
37:7d:73:06:6b:e7:2f:e5:d1:4a:70:42:50:ba:25:
9b:17:91:ca:ff:b4:0b:17:0b:33:f5:e1:24:87:b4:
ee:26:ed:d3:07:a8:56:7c:4e:27:ba:47:43:77:66:
8d:57:94:2f:37:51:4a:08:a3:c0:72:db:fd:1b:8d:
d4:05:98:da:f7:ec:c8:22:75:00:88:0f:83:a1:17:
f4:72:ee:fd:7d:db:4b:2a:d6:6d:d2:ae:08:79:d1:
d9:65:ca:6d:0f:f1:b1:ef:95:8c:7a:29:eb:bb:8a:
f4:f9:83:31:e4:cf:5b:e2:c5:4f:8d:03:6d:cb:6a:
44:7a:5b:ea:0b:8b:ce:d2:87:fb:be:3b:7d:90:ac:
f2:15:89:ec:a9:27:ca:ad:5b:99:e3:24:7a:46:32:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:82:7C:E1:6D:73:F7:8D:9A:32:23:9D:C3:9D:74:A3:5C:C1:D9:05
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:9f:c5:c0:8e:50:0b:cd:db:72:f6:1e:43:5c:1a:69:a9:f8:
d3:3c:3e:8a:29:96:f8:af:02:3e:1a:1b:fd:2c:35:fd:5f:5f:
43:d4:36:e7:5f:88:a2:76:ae:26:12:41:43:57:92:78:2a:fe:
c3:8d:69:ab:28:4b:f3:af:34:65:48:55:1b:d1:28:f4:24:5b:
b9:ea:52:b2:b5:85:85:cf:ad:46:63:be:da:20:40:57:d8:10:
e1:89:2d:ec:bf:29:60:18:30:97:d9:61:8d:a7:a6:bb:30:38:
dd:a2:b5:43:52:ad:dc:35:23:35:dd:a9:56:f8:2f:70:6c:7e:
79:fe:5c:cc:4b:05:c3:89:96:ce:d6:69:ee:b7:3a:6b:11:65:
57:60:3c:22:ba:7d:cb:cc:42:30:bb:a1:f5:d2:16:2e:d1:ac:
94:b4:35:ea:52:d6:62:3d:c3:0c:fa:7b:e5:34:58:9b:80:66:
a8:e7:14:93:66:19:b7:4d:38:9c:d8:2b:1b:e7:8f:c2:ac:1b:
47:0f:97:fc:2c:8a:cd:a8:43:57:a4:6d:e2:bf:20:27:c9:c9:
8f:a8:94:8e:27:b2:52:f7:43:2a:94:95:df:43:c0:e7:5a:26:
ed:cf:9b:b1:94:02:6f:3b:4b:c8:5e:91:bd:0c:f3:c1:b2:53:
ba:1d:02:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:54:50 2026 by rpki-client