Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: BbDnKLc+zzdpgc8BFxhUf4ome+NIVc9jWbQZDpzrtz8=
Subject key identifier: B1:CF:41:28:6D:C5:DE:50:A1:A6:22:D9:69:54:B6:71:61:45:C4:CF
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 019E29277D8978A812C64F6C86700408C734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0FB3
Signing time: Fri 15 May 2026 01:01:54 +0000
Manifest this update: Fri 15 May 2026 01:01:54 +0000
Manifest next update: Sat 16 May 2026 01:01:54 +0000
Files and hashes: 1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=)
2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: /Qj7jiFJTeZkPaoDE8tmc6tLe5Ks+IrII2sK7cUmzKI=)
3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:27:7d:89:78:a8:12:c6:4f:6c:86:70:04:08:c7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: May 15 01:01:54 2026 GMT
Not After : May 16 01:01:54 2026 GMT
Subject: CN=b1cf41286dc5de50a1a622d96954b6716145c4cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:47:e0:fb:96:44:89:1c:a3:9f:1f:0e:b1:cb:
d1:9e:d3:1b:8c:0b:15:92:b0:94:a9:9a:3c:37:9d:
23:4e:27:31:28:2c:da:41:65:71:83:0c:d6:f2:cd:
3b:53:b3:61:be:50:60:d6:a8:b0:15:08:5d:26:05:
7c:e7:90:92:2a:92:b0:65:5d:e2:6f:74:08:00:54:
60:e5:91:8b:1e:27:b6:05:ae:71:74:53:87:bc:79:
5b:c4:d6:2f:5f:a9:88:98:5b:be:db:88:53:d4:ca:
5a:6f:ac:c5:be:a8:70:c7:b0:78:ab:26:35:18:11:
fa:35:f9:32:0c:86:be:5c:cc:ac:66:84:7a:61:f2:
4e:e0:6a:fa:65:2c:26:a8:e5:5e:d2:c5:03:f4:f7:
36:c0:fe:ac:f4:8b:49:5b:3f:c3:fb:cc:23:c1:ac:
3b:aa:10:64:6f:a9:d7:7b:1e:22:3d:7d:3c:1d:2b:
e1:28:56:4b:65:9c:c0:e4:51:0b:f2:e6:67:48:9c:
55:db:77:ec:a0:6b:b2:aa:d8:c9:e1:6f:04:ac:b4:
6c:51:e6:38:91:90:0b:a9:87:da:69:8d:72:5e:f4:
84:f5:b0:2c:59:f2:b1:e9:a5:11:83:0c:a1:4f:71:
d1:8e:af:ef:44:35:44:c6:e9:07:68:44:07:86:78:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CF:41:28:6D:C5:DE:50:A1:A6:22:D9:69:54:B6:71:61:45:C4:CF
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6c:27:34:b5:e9:cb:69:e1:01:66:e7:5c:40:09:9e:f6:1b:
32:ab:a4:e5:6c:3f:b9:c8:11:96:5c:28:5c:5a:41:a6:c1:d3:
f5:07:fc:95:67:9a:81:2e:97:37:46:d1:a8:43:e0:33:fe:9a:
6c:83:9a:f0:a4:5f:6b:78:d5:cd:34:f4:74:db:da:11:9a:4d:
c6:3a:1b:98:2c:9b:9c:5c:3f:c7:f9:46:09:10:f5:ac:83:54:
bc:ca:31:9e:bd:db:26:24:3b:d8:18:36:5a:50:45:63:89:23:
d5:ac:25:b8:46:6e:2e:d7:3e:85:ac:47:b2:b9:93:82:44:62:
7d:65:c4:2f:fe:cf:bd:da:1b:f6:09:a0:06:bf:59:de:06:ab:
97:39:b6:2b:c8:2e:cc:13:8a:db:17:75:71:d8:f9:25:c5:0a:
89:1d:bb:55:a4:92:28:25:43:1f:3b:6f:77:20:1d:66:b9:24:
8f:ca:fc:bc:df:60:f0:04:be:45:e8:84:7f:f4:d7:e7:67:78:
1e:d2:e8:2b:1c:82:fa:49:d5:d2:bb:2c:45:4f:22:74:35:4d:
d6:cb:84:c5:25:7f:0f:7b:c9:8f:33:d2:75:31:af:c9:77:d1:
2e:92:d4:6a:f2:e1:1c:2d:fd:45:3b:2e:f4:b8:bc:55:f3:5a:
4f:2a:80:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:15:54 2026 by rpki-client