Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
File: _-BD2zfqJckthc5lp20aTlE2JKo.mft (raw, json)
Hash identifier: K4cUV+aYmuGQDdCMMn2UzRiouSkfiNpebIiNYRc0gPw=
Subject key identifier: 99:EB:5E:50:CC:1C:A0:15:23:7E:B7:32:F8:E0:C5:3B:95:0F:33:7B
Authority key identifier: FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
Certificate issuer: /CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Certificate serial: 01A0205664FF371CD03EF8974264B7A0B170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
Manifest number: 8A
Signing time: Thu 20 Aug 2026 18:02:07 +0000
Manifest this update: Thu 20 Aug 2026 18:02:07 +0000
Manifest next update: Fri 21 Aug 2026 18:02:07 +0000
Files and hashes: 1: 9StrTLCfqGV3R6lUHBbjcUPbtgE.roa (hash: hKyGuDQdq7Wwmsr9xKC9vViQNuynbDmlDvA0XQY2P9E=)
2: Qagt2LqaMAntgU09nCJSjOteJGI.roa (hash: hVVNYLozOrGf2eg6nP90ee7AH3HGnRwNnmP01BLSjaQ=)
3: _-BD2zfqJckthc5lp20aTlE2JKo.crl (hash: 2K5BKA42/nfxh3j9q2UdRRHkswCFc8eV5JkkeoWYnw8=)
4: jGolEufnyPDfW166GsYrvcDadWI.roa (hash: MhUSPPX1/ZIFQ+uQDE4vWXmxQ4zd9lEULvZBslHM2Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:64:ff:37:1c:d0:3e:f8:97:42:64:b7:a0:b1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe043db37ea25c92d85ce65a76d1a4e513624aa
Validity
Not Before: Aug 20 18:02:07 2026 GMT
Not After : Aug 21 18:02:07 2026 GMT
Subject: CN=99eb5e50cc1ca015237eb732f8e0c53b950f337b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:a9:3a:78:98:3c:43:dd:7b:02:44:d8:e7:
92:2b:c5:91:dc:7e:19:5f:79:1b:3a:00:88:26:ac:
2d:4b:4d:08:25:17:59:dd:55:30:a3:0a:9e:91:f3:
31:60:2d:e7:d7:ec:01:1b:f8:3a:64:22:9b:a8:62:
70:e4:77:a2:be:37:c8:08:84:21:af:3a:da:b4:c0:
80:60:cb:fc:3f:b1:83:c6:3d:75:dd:0b:f6:db:0f:
3f:af:10:3a:d5:ee:0c:93:9a:e6:c5:78:ba:d8:13:
19:c2:51:f5:97:e3:14:64:f7:3b:46:89:ec:69:5b:
90:c8:ba:42:7f:87:af:22:1b:c7:52:35:a8:04:aa:
07:d2:4c:03:2f:69:05:a0:3a:12:fe:33:77:eb:e1:
d2:77:1b:c0:9d:62:b8:c6:79:93:aa:5c:25:5b:db:
ec:b2:73:6b:33:f6:4a:b3:05:48:e3:8e:ed:ea:50:
7b:13:c9:28:60:a6:47:f5:a8:c1:61:fa:e5:5c:8a:
99:6e:c3:6b:9e:09:4f:5e:c8:01:65:02:f7:b6:45:
0d:cb:9e:9c:b3:44:46:dc:52:aa:50:52:71:9b:04:
5f:d5:29:c0:47:bd:ae:c6:c0:65:e5:44:9e:f0:34:
14:47:21:3f:00:9e:ac:5c:7e:a1:c1:00:5c:f8:62:
30:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:EB:5E:50:CC:1C:A0:15:23:7E:B7:32:F8:E0:C5:3B:95:0F:33:7B
X509v3 Authority Key Identifier:
keyid:FF:E0:43:DB:37:EA:25:C9:2D:85:CE:65:A7:6D:1A:4E:51:36:24:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-BD2zfqJckthc5lp20aTlE2JKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f74914-dda8-4d45-9992-4bef8328aaab/1/_-BD2zfqJckthc5lp20aTlE2JKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1e:8a:4d:40:91:34:09:6e:32:3b:ed:24:51:3a:4e:01:56:
8f:4e:80:4f:ba:69:50:17:e5:8f:9c:ff:3e:92:9a:a9:29:75:
a0:1e:09:9b:3c:9d:2e:02:2d:be:36:e9:97:4d:a7:d2:88:dc:
26:76:70:a5:e8:63:4c:0c:20:87:5c:ef:5d:7f:48:8e:a0:2b:
48:64:be:c2:40:bc:f5:91:d5:4f:7e:66:18:60:6c:64:1c:91:
36:b9:b3:b4:57:d7:6c:4f:9d:aa:88:e1:e7:17:18:7c:db:ba:
72:b5:2e:c6:68:6c:d9:b7:2b:89:08:a6:cb:d2:88:9a:5d:a1:
78:2f:a0:b2:77:a9:a8:be:61:33:74:06:57:99:2f:b0:e9:50:
e3:f6:2e:16:52:fa:d8:78:bb:7a:4b:89:2f:46:f3:da:dc:ce:
03:2e:84:b4:d3:98:8f:a7:e3:54:f3:81:a4:d7:f8:4e:cd:62:
fa:18:75:53:58:16:a3:ef:12:d7:26:50:e7:74:b5:70:60:f1:
00:1d:c5:8c:de:3f:a7:98:9b:b3:ae:45:02:50:61:7d:d6:5e:
00:85:71:21:b3:d2:8e:22:2a:21:46:4d:b7:04:f6:5f:af:0c:
d9:de:0f:fb:21:40:26:6d:64:68:22:71:f9:93:8e:ca:8d:f3:
66:fa:0d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:30 2026 by rpki-client