Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
File: B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json)
Hash identifier: hOIfOi3l4HCH2aiF1CzuPdgit+rUXdSJ1C7SWj/fGRM=
Subject key identifier: 3D:69:04:48:A0:FC:03:A4:B1:DB:7A:07:3D:09:E2:3D:B1:33:35:1F
Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
Certificate issuer: /CN=07c610b2a06db1831854b6726c33090336287415
Certificate serial: 01A13FA7722C80DC38D7DB6FF60DFB591C10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 13:01:40 +0000
Manifest this update: Thu 15 Oct 2026 13:01:40 +0000
Manifest next update: Fri 16 Oct 2026 13:01:40 +0000
Files and hashes: 1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: nawyYoCAI1rF3OzCNZHa6DSk87xKw/nMpPzuWtxefSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:72:2c:80:dc:38:d7:db:6f:f6:0d:fb:59:1c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c610b2a06db1831854b6726c33090336287415
Validity
Not Before: Oct 15 13:01:40 2026 GMT
Not After : Oct 16 13:01:40 2026 GMT
Subject: CN=3d690448a0fc03a4b1db7a073d09e23db133351f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:28:14:87:ae:a9:4e:ef:2b:5c:ff:03:34:
09:3e:3d:31:79:3e:ba:94:6e:8f:c1:24:e5:89:bf:
dd:24:e2:8e:ab:44:7d:61:ed:a0:69:44:90:b6:de:
39:f1:ce:87:91:e0:fe:41:cd:d1:ec:05:3e:2a:1e:
9d:0f:9e:8b:4c:60:9c:42:d3:22:7f:c5:b2:0a:25:
af:ca:a1:fe:58:00:1e:2e:78:25:68:81:04:c0:4f:
2a:25:0d:eb:7a:39:25:f5:55:b8:2b:b5:4b:2b:a0:
d0:64:67:48:f1:98:dd:9c:bb:46:40:a2:3c:a4:37:
11:33:40:7e:03:b1:c4:a7:d8:74:72:4f:8d:fc:b2:
e4:df:3d:7a:d7:e8:db:ce:5d:34:54:fc:7e:5c:50:
da:86:70:c0:ba:cb:ed:f7:5b:e1:28:4e:05:2a:f2:
7e:93:e5:6e:cd:88:24:ad:d0:b1:7d:f7:58:6b:0c:
40:04:87:b8:7e:21:28:30:f6:67:a0:0b:b3:13:c9:
ce:02:38:b4:ce:ec:d7:bb:22:63:91:c9:9f:9c:a8:
4f:60:f1:92:6f:96:5d:07:0e:d7:4d:76:93:bb:74:
83:ea:31:c2:39:73:95:ea:4e:4f:3b:b6:37:c1:19:
10:52:d6:bd:dc:87:68:38:86:59:ed:3d:0b:f1:b0:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:69:04:48:A0:FC:03:A4:B1:DB:7A:07:3D:09:E2:3D:B1:33:35:1F
X509v3 Authority Key Identifier:
keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f4:e9:1d:62:9a:aa:71:8c:7c:47:9f:0f:70:95:93:6d:ac:
09:bd:c9:aa:92:c2:cc:b4:81:6a:d3:33:91:b5:80:5d:47:3e:
2d:b3:7e:89:b5:f8:e7:c9:dd:65:22:33:13:ae:37:f4:ed:c0:
cf:55:57:78:33:fc:30:6f:68:a2:5c:7e:b1:23:3d:21:08:9c:
fb:3d:b7:5a:18:23:ae:c9:af:a1:ce:98:12:a9:19:df:80:18:
ed:97:09:e3:be:48:d7:fd:af:e4:26:20:43:46:07:d9:eb:d1:
54:d7:39:a4:9f:04:48:b4:25:1c:a7:98:60:7c:5d:2e:ad:1f:
1a:ba:5c:20:98:ea:db:3d:f2:33:ec:99:f2:92:55:fb:60:d6:
3b:d7:d2:aa:1d:f5:09:c4:2f:bb:66:c3:3d:4a:df:ec:ad:7f:
b5:bd:56:65:01:9d:6a:64:48:8a:0e:b0:b0:2f:28:8e:5e:17:
89:98:30:25:b3:46:16:08:1c:db:dd:33:be:4b:16:0f:24:cd:
42:4b:43:91:fe:78:1e:f9:29:f7:ae:e6:43:ff:f1:a3:4a:73:
8a:91:d4:16:84:91:57:3e:5b:7c:41:bb:ec:a4:88:d0:25:42:
eb:0a:96:83:a3:17:7b:6c:e4:16:e2:31:9f:16:bd:ea:33:8f:
da:7c:3c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:09 2026 by rpki-client