Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier: 0Ty7+/IiYjBaSAVyY8o2yjrdfbo7rihusYU5N3DYipU=
Subject key identifier: 0B:99:13:73:20:E8:71:A6:BF:4D:9D:72:1E:95:B1:1A:F3:21:A3:AB
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 019D3AC11E6D115D0F093648AE2551654129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number: 114F
Signing time: Sun 29 Mar 2026 18:00:27 +0000
Manifest this update: Sun 29 Mar 2026 18:00:27 +0000
Manifest next update: Mon 30 Mar 2026 18:00:27 +0000
Files and hashes: 1: 7ctM-nfqVD_f5N8yCIgCf9_quM4.roa (hash: wja6n3HaPhEfG0qesMSoRitaVxtS1y7cOYduGiD52SU=)
2: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: gJngPqZ5sSUF18x4WDl1YLM5M2GAwXXORsMmKEV1SS8=)
3: CdGW6i18Yr035U0dUT-j8WcoJNo.roa (hash: Rxp+OcdpmAsKNqBYYDsjZgGcVdgHuz2oel8FBpzkdoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:c1:1e:6d:11:5d:0f:09:36:48:ae:25:51:65:41:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: Mar 29 18:00:27 2026 GMT
Not After : Mar 30 18:00:27 2026 GMT
Subject: CN=0b99137320e871a6bf4d9d721e95b11af321a3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:0a:b1:5d:c1:2a:1d:c5:79:00:75:1e:3f:
cd:3f:af:13:c5:f5:9d:9f:64:14:59:2d:88:62:71:
29:26:9b:55:90:ea:5d:3c:9b:71:c6:2e:0d:0b:5c:
1f:03:eb:cb:c6:90:65:d0:93:88:1e:fd:6d:01:e7:
62:11:8d:c5:ca:ba:87:37:81:8d:95:84:24:0e:e1:
c2:a5:5b:11:d3:23:72:ad:34:e2:83:74:4a:c6:b4:
92:9e:61:42:96:52:0f:a5:4f:77:cd:f7:e4:60:99:
4c:9f:7e:28:9f:a3:f6:4d:df:dc:d3:c1:1f:27:7c:
b8:99:c5:25:6d:1e:54:10:8c:e6:ec:d8:00:99:d7:
fa:36:97:7f:34:a2:37:70:06:5a:7d:bd:c0:d6:eb:
9a:fa:e8:8b:3a:45:67:b8:97:7c:c2:77:68:8a:70:
4f:d7:7b:74:3c:a8:cd:e4:00:d4:76:62:d5:3d:46:
cc:51:e1:f1:71:18:02:cf:28:53:08:19:f9:60:20:
98:1f:78:1a:0a:20:7d:58:f2:b8:af:4f:c9:24:4f:
74:a2:bd:14:0e:56:84:1c:d0:00:2d:92:9a:57:3a:
ea:0b:fd:51:df:af:28:82:2d:71:7b:e9:e2:23:df:
76:83:63:40:a6:00:d9:d5:56:61:39:0b:8d:2f:05:
92:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:99:13:73:20:E8:71:A6:BF:4D:9D:72:1E:95:B1:1A:F3:21:A3:AB
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a7:67:29:a4:95:53:8d:fc:62:5c:d4:2b:9a:c7:5f:23:85:
cc:b9:ed:1f:27:2d:aa:85:71:e3:fc:1a:a6:53:6f:30:4e:27:
66:c8:fd:bf:48:9a:e7:ee:52:54:c2:ea:65:f5:69:53:d4:7b:
21:ff:cb:d0:4a:37:88:c4:61:69:6a:c3:b5:85:48:c4:64:cd:
b8:a9:03:b5:95:bf:9b:ba:37:50:43:5a:9c:66:8c:9e:d7:d5:
84:bd:ff:a7:a9:92:1b:42:61:1a:e9:44:62:4b:79:8f:48:60:
74:a7:95:08:65:92:c4:e6:5c:64:f3:d0:5d:6a:a5:2d:90:d0:
8b:07:54:b2:78:14:36:76:b3:5c:e0:ba:26:01:ef:cb:7c:11:
96:9a:fe:a0:39:0d:c5:00:ef:c1:8e:5b:d7:4c:b7:1c:69:36:
4d:d1:2f:1e:38:49:56:67:38:7f:25:fd:21:cb:9e:58:25:dd:
a8:f6:a1:d6:b7:24:c8:b2:f3:f4:cf:0b:d0:8b:2d:c9:ac:76:
1d:f1:b9:c6:0f:47:72:e3:c1:bc:17:ad:1e:4f:84:63:b8:32:
9f:9a:b1:34:57:85:07:39:4b:a8:a9:7e:a4:5f:3a:e6:b9:84:
8b:01:2e:13:e5:c9:17:72:9c:ba:bf:5c:af:8b:5f:ca:2f:86:
63:7c:fa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:45:18 2026 by rpki-client