Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json)
Hash identifier: Zrntv40VSxBjSC+uGYpuMBP+V0l9CpWxr38H3yhyBEc=
Subject key identifier: 1D:60:FB:62:C6:11:3E:DD:04:AC:7C:4F:1A:DF:8D:6D:1C:CA:9C:F0
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 019D38D376F8D21787F728CE416CEC269732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
Manifest number: 1411
Signing time: Sun 29 Mar 2026 09:01:15 +0000
Manifest this update: Sun 29 Mar 2026 09:01:15 +0000
Manifest next update: Mon 30 Mar 2026 09:01:15 +0000
Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: K2Wk+eJtolLYyImdRVvHd2rVr1mt/aX9/JUoUnFL7KI=)
2: bPDQL4TDwBKyo0KglJ1jUDcS2mA.roa (hash: gTJOIMiebmbjMQAf62eTV7rVcUuFKkthtF5Z6hyFDNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:76:f8:d2:17:87:f7:28:ce:41:6c:ec:26:97:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: Mar 29 09:01:15 2026 GMT
Not After : Mar 30 09:01:15 2026 GMT
Subject: CN=1d60fb62c6113edd04ac7c4f1adf8d6d1cca9cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:f2:55:7b:c0:8e:e6:6c:b7:05:48:19:55:
e8:2f:b9:37:83:81:86:38:b8:af:ab:f8:98:3f:55:
5a:50:c5:1c:29:7d:00:c2:09:76:b5:e5:f8:ef:65:
14:fd:bf:55:22:6c:ae:06:a8:b6:bd:08:e1:c7:47:
21:ac:ca:c7:36:71:7f:3d:32:17:f5:29:3d:3b:12:
17:e2:eb:48:13:d1:7b:2f:f0:e1:6b:1b:51:f4:cf:
76:fa:b3:e1:0f:e5:b6:66:04:4d:2d:ad:f8:a8:9f:
a8:c0:a4:9d:c7:a6:c4:01:6d:5d:48:16:93:c5:3c:
37:9e:a7:e2:ff:d0:c0:d3:99:f0:e5:4a:91:b1:69:
33:26:aa:32:7a:a0:f3:86:c2:32:10:e5:29:d6:ef:
4f:d8:00:eb:de:de:18:01:26:43:a9:2f:39:e4:5f:
e7:e5:84:8c:8c:53:ed:36:d9:65:c5:d1:db:25:17:
b2:4c:6a:e0:f0:98:cc:c4:0c:d3:4c:4c:93:32:6b:
3d:49:e7:0d:12:ab:38:ab:fd:cd:18:fb:c2:9c:c9:
3a:9f:85:a2:10:33:e0:38:a7:d1:1a:1c:06:7a:51:
26:df:28:54:00:85:5a:ce:79:5e:d0:24:6e:0e:17:
21:c5:ed:e5:2b:da:1b:67:eb:99:7e:cc:fd:e5:4c:
94:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:60:FB:62:C6:11:3E:DD:04:AC:7C:4F:1A:DF:8D:6D:1C:CA:9C:F0
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b3:46:09:2e:c2:75:b9:32:21:dc:48:4b:79:09:a2:44:69:
58:30:76:09:0f:db:db:60:b0:df:67:1e:18:58:75:8b:63:d8:
2a:70:dc:f1:f4:ac:d6:52:b6:c9:2b:f5:ac:5e:b9:05:c8:7b:
e5:ce:aa:fe:5b:12:49:75:27:ec:f0:95:e8:6d:85:af:56:3b:
6c:d9:eb:35:08:b1:3d:40:dd:2c:6f:96:cd:32:cf:1f:96:1c:
f0:eb:fc:10:64:1f:89:61:b7:da:70:87:64:90:00:a7:70:55:
c1:23:46:d4:53:45:98:43:f1:77:05:58:b4:1a:c9:cf:39:3c:
a0:89:8a:ad:52:9b:40:47:9e:9d:8e:6c:b8:b1:55:13:02:8a:
7d:e2:ff:8d:0e:cc:7f:36:3d:03:c3:5f:e8:3b:cb:0f:85:31:
fc:4c:f7:25:76:40:d7:cf:86:30:34:0c:9b:52:76:3f:49:60:
3d:ef:4c:61:7e:2e:fb:34:5d:32:e8:74:b0:c3:18:a3:68:ff:
b8:85:82:c8:0a:4e:ed:f2:77:ac:48:14:20:a4:0f:e2:82:c7:
a0:49:50:64:24:71:81:03:0d:57:8e:4f:d1:81:c5:04:1b:32:
eb:80:d5:d4:76:52:e8:e1:c0:a1:ba:22:81:28:f5:49:ab:0b:
94:40:55:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:22 2026 by rpki-client