Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
File: B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json)
Hash identifier: PoxgMfUibFSQ9+9RhQyU3tHOWvYXgvB4sdKrKSHjUE0=
Subject key identifier: 08:F7:74:17:D4:08:F3:10:7F:66:DF:71:37:65:22:DF:C7:79:D2:F3
Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
Certificate issuer: /CN=07c610b2a06db1831854b6726c33090336287415
Certificate serial: 01A0010191CCF7E9BF1F5BB7A84ED0E2AFB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 16:01:15 +0000
Manifest this update: Fri 14 Aug 2026 16:01:15 +0000
Manifest next update: Sat 15 Aug 2026 16:01:15 +0000
Files and hashes: 1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: KJk6PwYwk7DAZtTK9zkDL5QvcbDuh0Fkbrx4LX8ljTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:91:cc:f7:e9:bf:1f:5b:b7:a8:4e:d0:e2:af:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c610b2a06db1831854b6726c33090336287415
Validity
Not Before: Aug 14 16:01:15 2026 GMT
Not After : Aug 15 16:01:15 2026 GMT
Subject: CN=08f77417d408f3107f66df71376522dfc779d2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:60:4c:63:cd:53:30:d6:38:4e:73:86:02:53:
ba:17:ed:4e:5b:18:7b:f7:04:02:c5:d6:a7:e3:ce:
a1:17:ab:6a:5b:f3:47:84:a1:b2:d6:9a:a0:3d:99:
d3:b9:d2:a0:37:74:33:cd:ee:8c:82:9c:c5:e5:f4:
54:e6:d4:f0:76:7f:a5:5f:80:12:3e:05:0a:fd:e2:
53:e6:27:ac:d1:a5:8b:84:a8:27:33:61:62:e1:3c:
3c:99:ae:c5:bf:e6:77:ec:8a:fa:5e:c2:38:f4:58:
f1:b7:c8:15:13:74:1e:e7:6d:a2:3b:78:ec:82:ea:
5a:1f:6c:a5:50:9d:7a:1b:86:a0:a7:90:ba:a7:a6:
82:ff:e8:91:16:d5:db:8e:95:c9:6e:3a:39:94:46:
2e:c6:7c:0b:15:59:27:fc:0b:4c:60:54:eb:b9:38:
8a:5c:8e:cb:11:c6:2e:61:d2:4d:44:a1:5e:ae:a3:
1c:6f:76:48:ca:40:e8:ff:f2:28:5a:59:60:9c:16:
ca:ed:01:af:50:c8:1e:bf:7e:0a:c6:3c:22:3c:a5:
25:72:69:d5:ee:db:ae:d8:64:b9:6e:a8:b4:6f:77:
8e:5f:e3:a0:91:29:54:0a:22:8e:5e:40:04:99:ef:
3e:d1:a7:e4:92:d6:68:9e:40:6b:16:6d:b7:d4:a9:
c5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F7:74:17:D4:08:F3:10:7F:66:DF:71:37:65:22:DF:C7:79:D2:F3
X509v3 Authority Key Identifier:
keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ab:35:4b:1e:d0:a1:d8:e7:e1:32:33:f2:a8:0e:77:be:75:
b1:7f:7f:c6:9c:47:b5:74:fc:03:40:09:0e:cb:66:85:b8:27:
14:e5:db:7a:df:fb:bc:6d:86:b5:37:87:86:69:21:e2:44:7b:
87:5c:32:d1:55:68:a4:1d:bf:33:96:f7:0e:34:1d:df:00:44:
86:f6:37:d0:be:e7:7f:40:e8:a8:f1:1b:d5:92:64:6c:4e:85:
0c:99:39:d5:9f:61:ca:a3:38:49:7c:6c:9b:32:1c:59:b9:c8:
fc:af:f6:f1:d4:d1:5e:01:59:46:56:88:5c:49:81:f4:08:27:
0e:e2:e3:fd:b2:0f:b1:d6:16:7e:24:1f:85:da:9c:14:d4:40:
0d:9f:61:f1:e9:43:c4:b9:33:4f:47:77:20:69:59:dd:e8:14:
2e:0b:87:09:36:36:fa:0e:85:b5:cc:dd:5a:9f:b9:50:b4:4a:
36:21:1c:a5:f0:51:30:a2:a4:36:f3:0f:2b:ef:c7:69:96:6c:
14:2d:2f:d3:75:59:94:67:38:d7:d5:19:68:95:ad:34:49:58:
57:05:d2:1c:e8:31:ef:1b:e9:4b:3e:30:73:d1:31:ea:15:20:
d2:0a:af:e3:d9:20:04:a3:8f:4e:f6:4b:c3:da:22:28:dc:23:
82:17:a1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:12:48 2026 by rpki-client