Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
File: B8nKHieDB7riQFpINK9EfAZBRwE.mft (raw, json)
Hash identifier: P5rDymfVhZwHLqsWO++pt7NRPV9a64kFWd+jIDNm7TI=
Subject key identifier: 20:0D:88:30:9E:60:63:83:86:A0:2C:95:79:35:97:7A:03:72:19:93
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 019F17C3282190892A1EDA25C6F245FE63CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
Manifest number: 0A11
Signing time: Tue 30 Jun 2026 09:01:33 +0000
Manifest this update: Tue 30 Jun 2026 09:01:33 +0000
Manifest next update: Wed 01 Jul 2026 09:01:33 +0000
Files and hashes: 1: B8nKHieDB7riQFpINK9EfAZBRwE.crl (hash: N+20VFOWD/ZqjKZYMQNiZbTDu4PwUmH37f9GMeRvyeU=)
2: zXN2_wYgwI6PDqftPeFqf6vyJhA.roa (hash: +ACIhEpK9FdviN7dvinvYgo97L9G6OP8mQIkUkahIdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:28:21:90:89:2a:1e:da:25:c6:f2:45:fe:63:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: Jun 30 09:01:33 2026 GMT
Not After : Jul 1 09:01:33 2026 GMT
Subject: CN=200d88309e60638386a02c957935977a03721993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:2e:9d:61:f4:1e:2f:a3:f9:ce:1d:c1:97:
97:75:10:d6:ee:f7:da:0a:cd:f5:2e:ad:53:87:52:
25:67:ab:c1:4b:31:6b:43:2b:b7:71:9a:38:90:27:
d1:8c:06:34:6a:0d:93:aa:0b:b7:c1:e6:e1:9c:17:
05:24:82:22:c4:25:e2:1a:8b:58:ed:63:fb:46:ef:
95:5a:dd:cd:82:69:85:fc:4d:64:d0:bd:3f:7c:e7:
d6:7e:22:ec:e5:ca:82:1e:ea:70:b4:1a:13:9f:0f:
21:bb:85:0d:b0:c9:0e:f9:07:89:75:18:cb:e9:3e:
f5:ad:9b:e7:a3:c5:78:87:fe:6a:24:2e:10:82:9e:
57:d8:3c:71:f4:f5:34:cc:ee:0e:51:cd:85:b9:d3:
6d:70:fc:67:59:f9:0e:95:a2:21:6b:4d:68:4d:d7:
7b:6c:ca:d6:ac:03:c8:9c:d4:79:f9:9c:30:fd:59:
8c:6b:41:06:46:1b:ff:81:d5:50:df:8a:fe:a8:d0:
11:38:43:84:c6:fa:14:e1:0e:c7:40:e8:7e:5f:d4:
aa:16:5e:a6:96:88:58:2e:08:84:a4:88:6f:6e:a1:
ff:25:6a:f4:9e:82:5d:a8:10:c1:a2:a8:f9:98:e4:
26:3f:dc:8a:cf:77:6e:80:a4:5d:fc:c1:33:a7:9f:
8f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0D:88:30:9E:60:63:83:86:A0:2C:95:79:35:97:7A:03:72:19:93
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a2:02:c0:2b:63:fd:5f:ba:0a:16:89:95:6a:2b:d8:ea:18:
df:2d:52:8c:f4:c7:d2:10:d0:3d:cf:d3:ed:51:ae:8a:22:73:
79:70:30:dc:90:92:71:db:01:ac:28:8b:40:da:3a:53:db:e4:
ae:34:7f:55:10:bf:8f:4c:59:75:fd:27:b5:ba:1b:49:e0:52:
4b:97:2e:37:f4:b6:d5:cf:93:42:cc:b7:8c:0c:6d:5d:1e:e6:
54:e5:46:4d:93:d2:63:4e:80:c6:fd:a1:fa:2e:40:32:88:5f:
2e:09:47:81:b6:de:76:9e:cf:ba:80:63:59:b7:e0:8f:ce:a2:
0b:87:0c:54:45:c4:63:5a:ce:91:d8:45:2a:fa:a2:42:af:f2:
25:91:53:28:2d:8c:d1:eb:b3:86:fa:ab:55:33:3f:77:6c:61:
dd:b9:5d:c0:2b:cc:0e:f6:32:cf:56:d5:a3:a9:7f:aa:88:b4:
f4:10:81:9b:e2:1f:1d:43:3b:c8:a2:f1:35:82:00:c1:4e:dd:
4d:32:75:d1:b0:4d:72:83:c1:9a:c2:94:5e:f6:10:c6:63:4b:
c1:75:eb:7e:a5:b6:d5:7b:b9:a1:78:2a:44:bf:76:e8:35:0c:
45:9d:0b:fb:c5:1c:c2:34:26:7e:2a:87:c4:7e:fe:fa:cb:ad:
72:c7:f5:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwyghkIkqHtolxvJF/mPOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzljYTFlMjc4MzA3YmFlMjQwNWE0ODM0YWY0NDdjMDY0
MTQ3MDEwHhcNMjYwNjMwMDkwMTMzWhcNMjYwNzAxMDkwMTMzWjAzMTEwLwYDVQQD
EygyMDBkODgzMDllNjA2MzgzODZhMDJjOTU3OTM1OTc3YTAzNzIxOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlw8unWH0Hi+j+c4dwZeXdRDW7vfa
Cs31Lq1Th1IlZ6vBSzFrQyu3cZo4kCfRjAY0ag2Tqgu3webhnBcFJIIixCXiGotY
7WP7Ru+VWt3NgmmF/E1k0L0/fOfWfiLs5cqCHupwtBoTnw8hu4UNsMkO+QeJdRjL
6T71rZvno8V4h/5qJC4Qgp5X2Dxx9PU0zO4OUc2FudNtcPxnWfkOlaIha01oTdd7
bMrWrAPInNR5+Zww/VmMa0EGRhv/gdVQ34r+qNAROEOExvoU4Q7HQOh+X9SqFl6m
lohYLgiEpIhvbqH/JWr0noJdqBDBoqj5mOQmP9yKz3dugKRd/MEzp5+PNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCANiDCeYGODhqAslXk1l3oDchmTMB8GA1UdIwQY
MBaAFAfJyh4ngwe64kBaSDSvRHwGQUcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNjNjMjYtN2RjYS00NTEyLTgzNGYt
MDA1ZWRmYjc2MWM2LzEvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yNjNjMjYtN2RjYS00NTEyLTgzNGYtMDA1ZWRmYjc2MWM2
LzEvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6ICwCtj
/V+6ChaJlWor2OoY3y1SjPTH0hDQPc/T7VGuiiJzeXAw3JCScdsBrCiLQNo6U9vk
rjR/VRC/j0xZdf0ntbobSeBSS5cuN/S21c+TQsy3jAxtXR7mVOVGTZPSY06Axv2h
+i5AMohfLglHgbbedp7PuoBjWbfgj86iC4cMVEXEY1rOkdhFKvqiQq/yJZFTKC2M
0euzhvqrVTM/d2xh3bldwCvMDvYyz1bVo6l/qoi09BCBm+IfHUM7yKLxNYIAwU7d
TTJ10bBNcoPBmsKUXvYQxmNLwXXrfqW21Xu5oXgqRL926DUMRZ0L+8UcwjQmfiqH
xH7++sutcsf1iw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:25:57 2026 by rpki-client