Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: nNsektewSqiGVn/S2TQslvT2hMZBleUtRcb5y24UpnU=
Subject key identifier: 40:87:65:F9:E2:45:F4:25:19:10:65:50:50:F0:B2:0A:FC:2B:BA:3D
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 019D37C002F228A3CFF310AABB2B7C55D3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0F36
Signing time: Sun 29 Mar 2026 04:00:23 +0000
Manifest this update: Sun 29 Mar 2026 04:00:23 +0000
Manifest next update: Mon 30 Mar 2026 04:00:23 +0000
Files and hashes: 1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=)
2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: KKoE1zFh1+rBnzTdaaH9jV7GPSs5WS8taBvoV5slqak=)
3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:02:f2:28:a3:cf:f3:10:aa:bb:2b:7c:55:d3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Mar 29 04:00:23 2026 GMT
Not After : Mar 30 04:00:23 2026 GMT
Subject: CN=408765f9e245f4251910655050f0b20afc2bba3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:37:f0:6c:87:30:a6:25:97:68:10:e4:88:24:
00:12:81:1d:7e:70:38:61:d8:ba:84:9f:0c:d7:c5:
f1:29:e0:d9:eb:cf:cc:f1:a9:46:29:fd:88:33:37:
b7:bf:15:e7:86:40:79:9e:18:73:c9:d6:97:99:b7:
6b:97:96:aa:1b:00:7a:7f:93:c3:47:50:a2:8d:98:
a6:a2:8a:24:4f:a7:51:9c:2c:b3:b3:cc:20:ef:58:
62:e6:d6:e1:ec:c9:8b:b3:0e:f8:83:4f:e2:35:3d:
05:a4:09:28:f4:eb:4c:e7:73:c4:46:42:1e:6e:54:
95:67:2d:54:c2:5b:ac:5a:01:bf:85:a1:bc:f9:ec:
1f:67:cc:43:81:09:ce:b7:7f:dc:ee:8b:36:30:1a:
fd:ff:f7:a5:4e:33:ae:de:b3:4d:78:b0:77:f9:03:
89:30:e3:2c:c0:bb:c3:96:7e:94:22:ef:12:19:4b:
cf:8c:bf:29:59:e9:b3:44:db:a1:3b:0e:50:ff:0f:
cc:d4:0a:e1:c6:bd:a0:f4:b6:01:68:a2:91:16:c8:
cb:33:c4:35:01:4e:31:6d:21:aa:11:9a:0d:22:ed:
a1:a7:a6:7c:e8:f6:a7:e8:fa:b4:bf:11:11:71:e4:
ba:d1:a5:f7:02:49:c6:e0:35:56:65:57:36:7f:cb:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:87:65:F9:E2:45:F4:25:19:10:65:50:50:F0:B2:0A:FC:2B:BA:3D
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:c1:5d:0b:23:13:9c:76:a5:4d:9a:96:ca:3f:ad:ac:79:28:
79:42:09:cb:f0:fc:13:fa:45:9f:b4:c2:76:d1:5f:05:32:88:
1a:c7:30:8c:4b:82:e4:58:44:25:ef:b6:4b:b7:58:36:2c:a4:
78:32:e3:0b:d8:d4:06:df:81:b9:e0:ee:a0:13:15:96:6b:b0:
07:de:c4:13:28:4c:16:b8:a8:c4:ae:12:82:8e:13:00:32:e0:
69:88:d5:5d:f7:fc:00:ee:25:8d:8d:3e:2b:f5:93:b8:67:ec:
c3:ac:6b:03:08:46:4c:86:b7:79:8b:33:57:39:33:fb:a0:f2:
39:45:f4:27:e2:3e:c7:d2:fc:95:4d:9a:70:67:f5:e4:7f:7e:
5d:01:78:f1:91:93:85:c2:b2:44:89:08:2c:5f:3c:e3:ce:64:
6c:77:67:f4:89:6f:04:df:7c:4f:6d:22:76:c4:4d:68:5f:26:
fa:46:48:c8:47:eb:6e:e7:4e:05:9f:a3:da:8d:e6:ca:e6:1b:
70:bb:ed:c6:a1:b9:d5:4e:da:25:78:48:79:ad:be:92:ae:1d:
02:5c:84:b4:f3:c2:50:fd:c8:eb:ce:a0:cd:54:cb:10:34:da:
e5:2d:30:5f:1e:5c:2b:4b:30:49:e6:aa:1f:b8:00:e7:7b:79:
3b:4e:ae:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:23 2026 by rpki-client