Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: AV6PXg60uOTo5RsYGD1QAAPJLHnHn01/8ySPep303Yk=
Subject key identifier: A9:A1:67:C3:59:11:A3:64:11:41:43:BF:2D:7B:20:69:0D:86:F5:A1
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 01A0005C1F818128DECE44CF1B301ED673C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 10A7
Signing time: Fri 14 Aug 2026 13:00:32 +0000
Manifest this update: Fri 14 Aug 2026 13:00:32 +0000
Manifest next update: Sat 15 Aug 2026 13:00:32 +0000
Files and hashes: 1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=)
2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: jsT5gjhJTrUvyzLWIAXg/EYM/xUGmRXe7F5NklkdnYE=)
3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:1f:81:81:28:de:ce:44:cf:1b:30:1e:d6:73:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Aug 14 13:00:32 2026 GMT
Not After : Aug 15 13:00:32 2026 GMT
Subject: CN=a9a167c35911a364114143bf2d7b20690d86f5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:91:a1:da:78:57:06:b0:32:4b:b9:12:42:a2:
11:86:6e:dc:64:3c:78:99:c5:66:8d:d1:6b:f5:ff:
bb:9f:6a:45:86:b4:26:d2:61:09:6a:0b:8c:1e:06:
0c:99:e7:ea:d6:f3:19:21:d9:34:b7:81:67:76:97:
53:c8:8e:71:8d:70:df:77:6c:0c:bd:25:73:3f:4b:
41:0f:4a:1b:ab:15:1e:47:c3:2b:99:25:a9:1d:4a:
19:53:5a:10:4e:fe:01:40:12:ed:fc:45:4d:a0:47:
8d:c5:67:82:0e:af:43:be:72:71:81:59:9e:23:51:
4d:9b:b6:05:26:5e:9f:2d:d5:8e:23:91:fc:63:60:
07:cf:26:24:96:e5:c8:3c:53:47:0d:7c:03:e4:aa:
30:a0:53:b5:80:fd:62:3a:64:29:07:b0:46:8e:12:
eb:bc:82:62:5e:c4:80:11:c9:94:39:1c:ac:c1:57:
fc:d1:f2:b1:ea:6e:5c:08:34:ab:a5:1a:46:4e:86:
98:46:ed:f0:82:c5:66:66:2c:65:36:be:0e:37:3f:
22:a3:c0:85:9d:b0:d1:6d:64:fe:1f:73:4f:f5:eb:
a2:67:a4:1c:9e:99:f9:06:0e:40:7e:47:f2:af:53:
fa:bc:39:74:9f:d0:e9:b0:cb:f6:c1:94:a0:a7:c3:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A1:67:C3:59:11:A3:64:11:41:43:BF:2D:7B:20:69:0D:86:F5:A1
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4c:68:b9:68:7d:4b:5a:a5:dd:d8:d8:56:0e:b2:13:97:a7:
03:fe:04:a2:4e:63:36:b8:cd:90:0a:75:db:cc:26:a8:e5:b7:
4b:da:36:a3:2f:8f:16:a3:e2:26:62:e9:13:32:20:68:b2:e9:
0b:e4:1d:c6:92:07:f7:b6:ca:ff:d7:06:d1:95:9d:6b:cb:6b:
27:ec:58:93:e1:cc:24:c4:77:99:ed:86:6c:86:06:55:0c:55:
fe:86:7c:50:ec:f2:e5:f7:c4:38:37:bf:9e:d7:9d:ef:a6:aa:
f0:ec:2a:7e:94:7c:f8:0a:d2:49:6c:b3:98:10:bd:e9:33:e8:
60:cf:19:f9:bb:47:94:67:f8:9e:6d:6a:9a:26:d5:8a:ff:56:
4f:59:1a:7d:e7:68:93:d9:f9:56:b8:e4:cd:f0:99:1b:fb:d5:
72:27:a1:b9:0b:d5:cf:08:7b:00:4d:2b:88:82:37:e5:9d:6c:
91:d5:ef:71:6d:6e:ba:04:8c:80:0b:e0:f6:d4:dd:90:7c:3e:
31:be:f9:cf:d7:a4:fb:66:d8:f5:06:ef:89:0d:43:ad:dd:0d:
9e:ed:65:01:e9:fc:59:aa:86:55:eb:0a:50:a5:26:4b:d4:79:
df:df:80:9b:a2:92:42:dc:e4:7f:26:d6:4c:60:8a:ea:61:61:
51:cb:b2:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXB+BgSjezkTPGzAe1nPDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzE4MjQ3YTUzMjY0NzNhYmM5NmY1YTEwNzFkMTU5YzFl
YjdlY2QwHhcNMjYwODE0MTMwMDMyWhcNMjYwODE1MTMwMDMyWjAzMTEwLwYDVQQD
EyhhOWExNjdjMzU5MTFhMzY0MTE0MTQzYmYyZDdiMjA2OTBkODZmNWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pGh2nhXBrAyS7kSQqIRhm7cZDx4
mcVmjdFr9f+7n2pFhrQm0mEJaguMHgYMmefq1vMZIdk0t4FndpdTyI5xjXDfd2wM
vSVzP0tBD0obqxUeR8MrmSWpHUoZU1oQTv4BQBLt/EVNoEeNxWeCDq9DvnJxgVme
I1FNm7YFJl6fLdWOI5H8Y2AHzyYkluXIPFNHDXwD5KowoFO1gP1iOmQpB7BGjhLr
vIJiXsSAEcmUORyswVf80fKx6m5cCDSrpRpGToaYRu3wgsVmZixlNr4ONz8io8CF
nbDRbWT+H3NP9euiZ6Qcnpn5Bg5Afkfyr1P6vDl0n9DpsMv2wZSgp8Mf5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmhZ8NZEaNkEUFDvy17IGkNhvWhMB8GA1UdIwQY
MBaAFAfBgkelMmRzq8lvWhBx0VnB637NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEt
M2E1NzE4YjQxZjdiLzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEtM2E1NzE4YjQxZjdi
LzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIExouWh9
S1ql3djYVg6yE5enA/4Eok5jNrjNkAp128wmqOW3S9o2oy+PFqPiJmLpEzIgaLLp
C+QdxpIH97bK/9cG0ZWda8trJ+xYk+HMJMR3me2GbIYGVQxV/oZ8UOzy5ffEODe/
nted76aq8OwqfpR8+ArSSWyzmBC96TPoYM8Z+btHlGf4nm1qmibViv9WT1kafedo
k9n5VrjkzfCZG/vVciehuQvVzwh7AE0riII35Z1skdXvcW1uugSMgAvg9tTdkHw+
Mb75z9ek+2bY9QbviQ1Drd0Nnu1lAen8WaqGVesKUKUmS9R539+Am6KSQtzkfybW
TGCK6mFhUcuyWg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:54 2026 by rpki-client