Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
File: B8n9CgjdBL-Yalvahugx34BI8q4.mft (raw, json)
Hash identifier: 4H9g8eLu9mn3bYuiHsRmxigZubuEkDTJrRd+HLnX7cE=
Subject key identifier: 28:BA:39:70:B4:95:40:C5:DA:9C:9D:35:26:B1:04:1B:AC:20:7D:ED
Authority key identifier: 07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
Certificate issuer: /CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Certificate serial: 019F1A1F482D3266A886A68AAF6776ADC630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 20:01:25 +0000
Manifest this update: Tue 30 Jun 2026 20:01:25 +0000
Manifest next update: Wed 01 Jul 2026 20:01:25 +0000
Files and hashes: 1: 1-xRGaCyxpLa6u8HMSUq_h770gD0.roa (hash: 8uRfxkLyO0BWin82mTedgqRyj+vQcxTq42ILakeqyaU=)
2: B8n9CgjdBL-Yalvahugx34BI8q4.crl (hash: AZII/iSp//95qXm/uJFoVkt5mkD9ABAeo42nGLyAul4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:48:2d:32:66:a8:86:a6:8a:af:67:76:ad:c6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Validity
Not Before: Jun 30 20:01:25 2026 GMT
Not After : Jul 1 20:01:25 2026 GMT
Subject: CN=28ba3970b49540c5da9c9d3526b1041bac207ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:64:56:04:91:ec:d7:e1:0b:12:d8:9e:23:
fe:82:0a:36:f6:4f:66:36:dc:87:c4:ee:98:8e:0d:
96:16:62:25:04:59:e4:a6:13:ca:31:be:93:7f:2f:
d1:3b:7c:b2:7f:21:b9:f3:47:35:e1:09:eb:25:97:
0d:8c:d5:f5:e1:59:a9:73:cb:f4:41:7a:fa:d8:3a:
90:8c:5d:a9:05:b9:66:00:9b:c9:e0:cd:27:ec:f0:
0d:4e:2f:ec:50:93:4b:63:ee:10:e6:9a:13:c0:53:
14:9a:d8:29:48:7c:69:ef:31:62:31:aa:6b:18:27:
9b:76:50:0e:a4:d7:7f:bc:31:d3:99:f7:56:25:16:
a5:48:ce:05:80:0f:d7:09:79:df:3f:2f:2f:26:8c:
30:88:25:bc:bc:1d:06:35:31:d1:bd:98:0e:58:a4:
ea:ee:8b:d5:29:d6:3b:b8:84:32:2e:59:bc:b4:0d:
76:ee:d8:73:57:ff:6d:98:2c:22:f6:38:1c:fc:a6:
f0:c6:08:0f:5d:dc:40:80:cc:b9:ea:a3:d3:f8:6e:
19:61:de:09:69:d1:61:5f:51:b5:0d:7b:dd:89:63:
3e:fe:56:f8:e5:2b:1b:22:81:89:63:82:a7:cb:90:
09:d9:5f:81:d1:d6:0a:76:f3:cf:81:e7:7f:f7:13:
72:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BA:39:70:B4:95:40:C5:DA:9C:9D:35:26:B1:04:1B:AC:20:7D:ED
X509v3 Authority Key Identifier:
keyid:07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:2c:4c:4d:12:86:06:72:67:c5:d1:24:10:67:45:d3:79:08:
dc:78:5a:e8:cb:e4:94:8f:e3:a4:71:9b:b9:39:82:95:c7:55:
72:f4:84:7f:0a:5a:ef:f5:4b:ce:8c:af:ef:a1:71:46:a1:81:
11:7d:1c:52:4e:f6:06:29:85:1c:79:ba:42:d6:f0:3e:a9:dd:
d8:1b:98:63:ca:87:40:22:9a:13:73:e6:f7:a6:8e:78:a2:3b:
33:18:fc:df:84:5d:ab:d8:5f:94:16:fc:19:c3:11:2d:9f:4a:
20:55:41:ae:71:06:60:e9:ca:71:23:8d:53:ef:1f:f6:4e:4d:
6b:50:9f:3a:9d:35:26:5b:c5:4d:a1:84:5e:10:9a:ca:20:d7:
d4:43:4a:8d:4a:78:f2:9a:c3:b1:82:2d:48:7d:c3:e6:e3:48:
f5:c7:30:01:c7:a4:ae:a3:45:67:fb:fc:66:e8:68:50:87:e1:
85:39:81:24:9f:01:5f:3a:f8:06:d6:7f:95:b9:2c:c5:5a:c3:
23:78:a0:b0:1c:86:22:24:6b:5d:0a:46:33:a9:9c:ef:ac:3b:
4c:50:2a:f5:35:44:7c:d3:fa:43:8b:de:b1:ed:aa:29:04:c7:
9b:eb:49:d9:ed:f7:9a:16:30:89:48:a0:17:ae:e6:d9:32:47:
f4:32:95:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:42:41 2026 by rpki-client