Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: 4t/1ox8u4nhWPkMkZ5eNwnMt3plyW5MOh/n+SNlmZ8k=
Subject key identifier: 38:6C:CF:1B:22:4B:15:50:6D:EC:29:D0:1B:02:70:D1:4C:74:71:24
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 01A11861DC5B955835866F980D311C9CF399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 1138
Signing time: Wed 07 Oct 2026 22:00:28 +0000
Manifest this update: Wed 07 Oct 2026 22:00:28 +0000
Manifest next update: Thu 08 Oct 2026 22:00:28 +0000
Files and hashes: 1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=)
2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: VjgovDUaPRcL5Lpny60r/LxOGIPS+evpdpboXTRuBlA=)
3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:61:dc:5b:95:58:35:86:6f:98:0d:31:1c:9c:f3:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Oct 7 22:00:28 2026 GMT
Not After : Oct 8 22:00:28 2026 GMT
Subject: CN=386ccf1b224b15506dec29d01b0270d14c747124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:90:4a:52:cc:46:35:69:54:a2:e9:19:5d:8e:
18:3a:b2:71:32:d5:4a:9d:ad:0b:bd:d4:d7:78:e2:
ed:56:c8:24:75:56:15:67:58:db:44:32:90:7d:3d:
e3:84:70:ed:79:64:e3:c4:f6:31:88:3e:92:6e:cd:
dd:19:27:4e:46:f6:e6:f9:6c:8e:5a:e4:d5:37:b8:
6c:28:49:15:6f:50:e7:2b:f1:ff:05:b8:c3:95:3c:
20:d9:88:a3:79:9c:8f:81:9b:73:b8:af:f0:b1:a7:
39:23:24:4c:6e:af:ca:a6:00:9d:59:24:26:73:97:
3d:48:fd:a4:40:a1:5e:95:90:87:a3:d7:98:70:a3:
16:44:75:ec:fa:de:bc:21:13:c4:37:78:12:c5:5e:
b0:75:fa:df:07:8a:62:3b:7c:6f:3f:42:f2:39:f5:
71:78:74:bd:89:e8:0b:65:83:4e:db:94:5d:eb:94:
83:36:78:21:04:55:86:04:c0:6d:20:d0:16:d5:bb:
b5:6d:bd:4a:c0:0f:4a:ba:28:4b:f8:b1:59:33:fe:
63:3e:ad:bf:72:2e:09:bd:12:7d:3c:2a:3e:18:1f:
b5:7a:8d:cb:d1:1c:73:27:aa:bb:dd:9b:42:c6:f6:
c1:87:63:b3:fb:8c:73:7e:a0:3f:69:59:32:f4:cb:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6C:CF:1B:22:4B:15:50:6D:EC:29:D0:1B:02:70:D1:4C:74:71:24
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:de:19:81:da:e9:9c:94:f9:ae:8a:8b:63:31:d6:45:23:f6:
f4:9a:c6:fa:28:d5:a7:39:7e:02:2c:51:a6:0a:82:61:ff:87:
15:a0:a5:f6:19:70:35:a3:de:37:cf:35:d3:bc:e7:c2:24:3b:
eb:db:ae:dd:6a:1e:06:77:53:1a:cc:08:bf:0d:e8:20:75:20:
4b:e1:39:af:f0:74:a1:ed:ba:9d:75:7d:b9:4b:c9:94:5c:e7:
c3:27:d2:c7:93:5b:1e:e0:25:a8:6a:33:6c:de:7f:a9:d7:71:
8c:83:af:9f:23:74:ad:a6:86:d9:f0:6c:09:f1:f1:31:f1:fb:
69:3a:6e:da:21:d8:07:41:4f:0d:d4:72:3b:dc:0b:96:4c:2e:
20:e3:b4:83:58:3a:0e:ed:f2:5b:78:7c:1c:93:99:f6:6e:e3:
91:d4:06:fd:7f:68:61:73:fa:bd:c3:dd:67:36:48:9a:a1:d4:
92:8b:4e:66:61:a4:0a:aa:87:a4:4c:77:69:2f:af:1c:9a:2b:
78:d9:3d:6d:05:a8:12:bf:51:87:39:83:a3:ba:67:61:95:7a:
53:bd:ca:10:81:a2:24:7f:41:bc:9a:cf:21:0e:9e:73:d9:cb:
ae:fa:ba:95:40:dc:ab:d0:6e:11:0c:2d:89:11:af:de:ab:df:
68:4d:4c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:40:02 2026 by rpki-client