Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
File: 8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft (raw, json)
Hash identifier: kTRk/+wP2HVpIz197hccwYXJccSCrJE/H8c7wAHb6OE=
Subject key identifier: 19:3A:2C:55:9A:FC:7E:E8:8E:9D:FC:E8:F3:44:CC:A7:EC:0F:33:7D
Authority key identifier: F0:19:8D:5F:BD:25:23:E2:2D:B8:2F:10:C3:DA:37:A9:43:5B:6C:BB
Certificate issuer: /CN=f0198d5fbd2523e22db82f10c3da37a9435b6cbb
Certificate serial: 01A06D9586CDE76498FE27CFB4283D97776B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:01:50 +0000
Manifest this update: Fri 04 Sep 2026 18:01:50 +0000
Manifest next update: Sat 05 Sep 2026 18:01:50 +0000
Files and hashes: 1: 8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl (hash: gQGLXPxG+17joHYgQ792zz6nzrDHtO6jaABZRMMCCyg=)
2: f85ANWeKKEbi4pK19Z060OvY_XI.roa (hash: qV+HKaGs2anI4Q/Iy3DcGeZYfOs1cg3GI50On0iw4rQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:86:cd:e7:64:98:fe:27:cf:b4:28:3d:97:77:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0198d5fbd2523e22db82f10c3da37a9435b6cbb
Validity
Not Before: Sep 4 18:01:50 2026 GMT
Not After : Sep 5 18:01:50 2026 GMT
Subject: CN=193a2c559afc7ee88e9dfce8f344cca7ec0f337d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5a:fb:46:7d:47:7b:65:e3:28:7b:f8:b0:64:
f4:4d:00:41:38:8f:4c:cf:49:18:8f:ee:2e:58:fc:
23:4a:6b:31:09:4a:a8:e6:51:68:8d:3a:19:c3:60:
dd:16:5e:02:1c:23:53:ce:c1:79:66:9a:ef:6a:90:
9c:d4:c2:28:6e:49:dc:46:31:b6:96:9b:5e:4b:e6:
b8:66:55:f2:2a:a5:df:a1:f0:29:e4:c2:34:5f:70:
17:f0:f7:96:3c:1f:21:df:11:2b:86:f8:aa:80:44:
bc:af:a5:dc:2d:81:9c:f0:d7:44:05:98:30:be:1c:
0c:f5:4b:1d:a7:4e:4c:28:e1:e2:65:e3:f1:1e:54:
e7:32:b1:3d:f0:ba:68:fd:5d:6f:c0:41:da:d4:4f:
92:41:d3:ba:93:b0:a7:a3:cb:70:44:09:c4:f1:22:
d5:7b:45:fc:f7:4c:85:2d:0f:f9:61:d0:fc:99:d8:
20:66:9b:ba:37:50:e7:34:15:c2:cc:f5:98:5b:67:
27:d1:a9:26:7e:30:be:93:7e:65:ad:74:d3:03:6d:
f7:7a:54:8a:64:e8:58:ba:23:50:48:d8:b0:de:20:
fc:40:58:80:9b:c0:77:24:d3:09:05:b5:ac:ab:7d:
84:77:9f:db:15:9b:5e:ca:58:41:8a:84:7c:eb:ef:
5f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:3A:2C:55:9A:FC:7E:E8:8E:9D:FC:E8:F3:44:CC:A7:EC:0F:33:7D
X509v3 Authority Key Identifier:
keyid:F0:19:8D:5F:BD:25:23:E2:2D:B8:2F:10:C3:DA:37:A9:43:5B:6C:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BmNX70lI-ItuC8Qw9o3qUNbbLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/56a006-919f-487c-9316-0bb6a83f9f40/1/8BmNX70lI-ItuC8Qw9o3qUNbbLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:11:35:67:a7:c2:13:9b:37:d2:d7:30:b3:2a:28:10:27:4b:
54:0e:ce:2d:35:23:d9:6f:7b:19:5f:13:90:a5:a6:fd:6e:be:
0e:4e:38:32:a0:d2:ce:38:9f:e1:a3:4e:52:ef:f1:87:74:c2:
ef:11:08:89:98:96:7f:b8:a9:15:86:9a:51:89:1c:f3:f7:fe:
07:7e:8d:77:79:8a:1e:7d:b8:a1:e7:82:68:6e:50:20:eb:10:
70:a6:d7:58:11:6c:8c:4b:25:d8:05:be:e6:99:d5:46:1b:d4:
68:c2:1d:40:50:89:e5:37:a1:e6:45:e2:0d:37:ec:ee:e1:94:
8c:23:1d:a3:73:14:44:55:95:b0:f4:94:f2:59:95:ea:7a:e6:
ea:28:00:32:07:29:49:e2:4b:e6:2f:eb:b8:de:4e:43:f6:dc:
65:39:ea:db:a6:94:ae:70:cc:b5:87:4a:7c:a9:4f:43:c9:58:
9f:ad:9f:9f:b8:19:d3:ec:59:95:b9:08:02:38:3e:1f:7f:99:
8b:59:06:3f:b6:18:d2:e2:41:63:ef:1b:e7:48:6b:d2:68:e9:
45:23:5d:fb:97:ca:b2:db:dd:fd:05:3a:20:2e:89:99:94:34:
09:05:48:5c:75:83:6c:da:27:53:54:d5:73:8d:eb:ea:11:0a:
0f:a2:eb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:56:02 2026 by rpki-client