Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
File: B8n9CgjdBL-Yalvahugx34BI8q4.mft (raw, json)
Hash identifier: ra6wn0PCnffdl8OUQG46e9Uq7UXqV1e2f/p2hlHG77U=
Subject key identifier: 52:C4:EB:11:97:0C:AA:A2:C8:16:7C:57:93:1C:5A:E6:BC:AB:DE:FC
Authority key identifier: 07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
Certificate issuer: /CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Certificate serial: 01A138C99520916E9F1640BFA61E0E218092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
Manifest number: 1AA3
Signing time: Wed 14 Oct 2026 05:01:37 +0000
Manifest this update: Wed 14 Oct 2026 05:01:37 +0000
Manifest next update: Thu 15 Oct 2026 05:01:37 +0000
Files and hashes: 1: 1-xRGaCyxpLa6u8HMSUq_h770gD0.roa (hash: 8uRfxkLyO0BWin82mTedgqRyj+vQcxTq42ILakeqyaU=)
2: B8n9CgjdBL-Yalvahugx34BI8q4.crl (hash: Kq3kkIE1InFUSspJHbzy2lx0rqldLx46uH5pYi3xbjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:c9:95:20:91:6e:9f:16:40:bf:a6:1e:0e:21:80:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Validity
Not Before: Oct 14 05:01:37 2026 GMT
Not After : Oct 15 05:01:37 2026 GMT
Subject: CN=52c4eb11970caaa2c8167c57931c5ae6bcabdefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:32:14:e1:2b:13:67:17:e6:7f:0c:c0:81:
64:9b:4a:e3:39:c6:28:f6:f6:27:dd:9c:08:2d:8f:
9c:c4:65:64:38:b8:50:e8:db:70:c0:83:2a:55:99:
4e:dd:51:d0:62:17:b8:94:d5:2b:f3:9c:b8:8b:28:
cf:0b:b5:a7:5f:9c:42:b3:b9:fa:c4:d2:9c:6c:96:
6c:2f:72:d9:86:93:53:a5:d3:a9:06:0e:2f:24:51:
f4:5e:fb:3e:2a:8d:70:92:44:f3:c7:bc:6c:bc:cb:
c1:4c:62:4d:df:6b:f3:66:d4:0e:e4:5a:f1:34:b9:
dd:85:b8:d1:f9:09:db:a5:eb:ae:0f:de:89:92:17:
9e:08:6b:d5:89:33:56:cd:b3:0e:b7:d6:16:74:12:
20:85:4e:17:a0:ed:91:85:a7:a7:9c:b6:ed:71:20:
42:c8:d0:74:0c:3b:b5:94:cc:f6:c6:3c:dc:46:32:
af:85:01:7c:aa:cd:f4:aa:4b:30:6b:5a:83:7c:ac:
b5:94:82:60:49:4d:43:e7:7e:a0:4d:16:ad:4d:73:
ed:71:18:0f:30:0c:52:f8:e5:b7:bd:83:d0:18:38:
3c:dc:1c:61:ba:a6:32:b4:84:7c:6f:a4:2e:5b:18:
7d:5f:7d:80:e6:51:7b:70:a5:0e:7c:1a:5a:16:cb:
56:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C4:EB:11:97:0C:AA:A2:C8:16:7C:57:93:1C:5A:E6:BC:AB:DE:FC
X509v3 Authority Key Identifier:
keyid:07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ea:c6:d1:6e:79:eb:6b:04:a2:0f:0a:2c:08:ac:13:53:97:
42:ab:cb:73:a9:0a:5f:6b:0e:aa:f4:47:a8:1b:8a:1f:63:0a:
aa:ff:05:4e:2f:40:a3:bf:48:fb:21:b1:b5:7c:b1:fc:44:66:
70:73:2b:3d:24:0b:06:0b:bf:6b:41:54:bd:71:a9:95:1b:a8:
c8:91:cd:2d:1a:08:fe:20:d1:dd:e7:b5:ae:77:60:86:dd:48:
c7:33:24:a0:bc:65:f8:b7:f4:d9:f3:6a:5d:1a:d5:fd:33:44:
43:ae:6c:61:a3:be:61:f3:86:54:b7:89:27:af:f6:23:bb:c9:
36:ec:34:c8:26:e1:4d:fd:95:39:d3:6e:87:ca:fc:c1:af:06:
d3:29:35:79:b5:9d:90:1f:e8:14:92:8b:95:d6:d9:65:9f:e4:
a3:cf:06:a1:e2:b6:be:45:19:dd:c4:9d:55:65:19:71:75:d3:
d7:77:ba:cd:9a:5f:34:2f:12:4b:a3:da:3b:d1:b6:a2:a8:fb:
e2:99:b0:45:ae:bb:e6:93:4a:f8:e2:74:03:8b:10:e7:62:14:
7f:1a:1c:75:90:56:61:15:1e:80:b0:76:f3:3e:2e:56:a1:24:
27:c9:ed:db:93:be:9d:21:d9:c6:b1:06:ce:37:e3:20:1c:d5:
6a:0c:05:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:04:27 2026 by rpki-client