Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier: wqAvomZi+HqUrT5Y1WmY8Pwtx3YuvwbhKSsjTXW8w0U=
Subject key identifier: C1:00:5D:B9:16:53:AE:7A:3C:CD:91:9B:CC:0E:D5:37:0A:89:9B:7A
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 01A001700A7A5823BF84C0E5794B6AC2A76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number: 12BF
Signing time: Fri 14 Aug 2026 18:01:54 +0000
Manifest this update: Fri 14 Aug 2026 18:01:54 +0000
Manifest next update: Sat 15 Aug 2026 18:01:54 +0000
Files and hashes: 1: 7ctM-nfqVD_f5N8yCIgCf9_quM4.roa (hash: wja6n3HaPhEfG0qesMSoRitaVxtS1y7cOYduGiD52SU=)
2: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: bAjpfuKV61PYDp0UYcucFVGGyt9BYSPy66XYqi1r+8Q=)
3: CdGW6i18Yr035U0dUT-j8WcoJNo.roa (hash: Rxp+OcdpmAsKNqBYYDsjZgGcVdgHuz2oel8FBpzkdoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:0a:7a:58:23:bf:84:c0:e5:79:4b:6a:c2:a7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: Aug 14 18:01:54 2026 GMT
Not After : Aug 15 18:01:54 2026 GMT
Subject: CN=c1005db91653ae7a3ccd919bcc0ed5370a899b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4b:bb:4a:cf:04:65:49:e6:06:f4:7e:66:ce:
5b:6f:ba:5e:18:11:08:cc:29:53:ad:28:9f:c1:d8:
b3:78:3a:4d:88:a1:fb:33:e3:2c:51:5d:28:9f:c0:
45:5a:b7:25:83:5b:1f:9d:d7:e1:e2:88:0e:4b:02:
6d:07:06:6e:0c:c1:fe:f1:be:f9:ef:d5:34:85:57:
e0:fa:df:dd:a7:7c:3d:07:ca:82:f7:b2:c9:2c:02:
f7:42:1c:3e:93:77:3c:26:19:06:a7:74:a5:ad:3b:
4c:29:8e:bb:7b:2f:2c:ee:fe:1b:08:a9:3a:81:51:
42:08:ad:b3:1d:5e:c1:0a:3b:9b:2e:8e:8b:28:5b:
23:8f:a3:2b:11:b1:6b:54:c0:b7:8e:2b:f6:d9:90:
93:3d:a1:20:12:1b:7a:6c:bf:03:0f:20:5e:7c:91:
72:60:41:83:96:c1:07:fa:18:e1:46:05:b5:a0:d5:
ea:91:b3:92:60:c7:02:06:b5:d4:ad:49:60:55:ad:
81:9b:75:23:aa:be:9a:14:5a:2a:ae:5f:b1:0e:a7:
4c:94:51:6b:9a:e7:72:cc:8f:5a:94:c6:9a:44:00:
0f:6d:53:6c:14:f4:c8:97:2d:34:61:b5:6c:b8:a0:
c7:98:1b:2b:50:3c:bb:b7:f0:37:4d:40:aa:85:9a:
ba:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:00:5D:B9:16:53:AE:7A:3C:CD:91:9B:CC:0E:D5:37:0A:89:9B:7A
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:19:2b:10:71:24:c2:be:e4:03:0c:80:b1:b8:90:6b:a6:94:
9c:21:87:83:b6:3e:c0:81:f1:3b:b2:8c:51:0f:d6:e2:a4:d3:
18:b5:87:47:2b:7e:fc:d7:5d:d4:73:d3:de:30:4c:fb:e1:40:
22:ef:d2:b4:88:c2:2a:b5:f5:55:a7:64:ab:bc:eb:54:1d:53:
8a:77:7d:0c:78:5f:53:be:2c:ff:ef:d1:e6:e7:cf:b5:ec:0e:
43:b2:1a:c7:76:44:33:10:76:4d:10:62:aa:4c:f8:cf:d7:59:
97:2a:78:98:71:81:9c:ea:5c:dc:08:b0:6a:9c:0d:4b:1b:71:
98:97:42:d3:ca:47:f2:25:7d:a9:69:23:2c:14:20:09:1e:3c:
f0:ac:04:26:38:c6:17:6a:37:d6:9e:55:55:d6:1e:37:75:e7:
ce:f5:f2:75:57:33:70:46:97:54:7c:8b:8e:d8:2c:72:60:7f:
a9:ce:b9:d1:21:13:2e:f3:8f:98:61:ac:ad:ba:02:a5:53:e9:
8a:27:12:89:bf:73:67:8c:da:81:c5:54:c9:5f:22:2c:a7:79:
ea:8c:34:9c:92:4e:66:cb:ee:33:c1:ed:91:36:79:ae:89:8d:
96:cc:e1:3d:ff:48:08:91:9c:52:5b:75:86:e2:a6:9d:2a:a8:
42:1a:35:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:05 2026 by rpki-client