Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
File: B7gNX0qckt2SpGBXGeCujRpiwEM.mft (raw, json)
Hash identifier: u0vZA2OEpgQixveMKlE0+FHsxymD/MZJjJ3HvtN07ec=
Subject key identifier: F8:11:BA:CE:AA:07:E9:BB:08:55:13:4F:43:23:8B:06:CB:C9:08:30
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 019E1DFE6E10368BEC9961E41C8F44CC3819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
Manifest number: 0F8A
Signing time: Tue 12 May 2026 21:01:14 +0000
Manifest this update: Tue 12 May 2026 21:01:14 +0000
Manifest next update: Wed 13 May 2026 21:01:14 +0000
Files and hashes: 1: B7gNX0qckt2SpGBXGeCujRpiwEM.crl (hash: xSqq4ND+iRLlcN7+GbvN4S4t4ODDP/gY1+Spunu3VCs=)
2: PCSAe779gtpQ1Sa05bIdrwV78eg.roa (hash: 1GxEJL4LImItt+ibKMd5aWwhrXtd/cVEdDLJESE/oBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:6e:10:36:8b:ec:99:61:e4:1c:8f:44:cc:38:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: May 12 21:01:14 2026 GMT
Not After : May 13 21:01:14 2026 GMT
Subject: CN=f811baceaa07e9bb0855134f43238b06cbc90830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2f:fc:6c:9b:99:db:92:cd:74:e5:78:20:82:
01:9e:4d:88:51:e3:ed:bf:43:dc:09:4e:dd:f7:b6:
63:47:07:69:19:9d:43:7b:fb:96:5f:b5:b5:c9:44:
ff:ff:b9:67:5e:54:e3:01:5c:30:4e:e9:9f:d0:98:
cf:3a:6a:19:b2:8d:a7:77:ee:63:d1:c8:e7:d3:22:
ca:aa:4c:ab:7d:d2:06:7a:44:63:ab:1b:7f:16:b4:
73:76:8b:d8:5d:5f:57:f7:c3:5b:60:2f:12:ee:94:
1a:1e:8b:21:03:78:7f:24:10:af:64:9e:40:2d:be:
05:ec:fe:b7:6b:2f:ec:69:24:37:eb:31:b5:94:6f:
b5:3e:b1:d0:b2:37:84:e4:82:14:eb:f8:b8:5d:76:
02:36:42:ce:fe:1e:8b:d2:b6:f2:70:81:8e:45:6d:
0c:4f:e9:ad:7f:4c:38:63:76:26:35:f5:32:8c:78:
99:fb:43:fb:1c:7c:9c:76:bb:ea:21:3f:72:20:d2:
86:2c:55:7a:ab:2d:a1:6d:19:99:d9:ef:3a:09:7b:
c1:f0:c3:eb:f3:d1:18:d2:1a:a8:f0:71:c2:e3:a1:
a1:f6:5a:54:f4:fc:37:19:48:0a:a6:a7:5c:8a:0f:
3e:ff:72:5d:7b:40:ba:9f:57:09:d8:9b:e7:eb:88:
fb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:11:BA:CE:AA:07:E9:BB:08:55:13:4F:43:23:8B:06:CB:C9:08:30
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f8:1d:77:43:11:c5:22:f3:1b:6e:e5:68:99:4c:e3:70:c0:
76:35:71:98:18:90:f8:e8:5d:24:1f:20:7a:68:7f:ca:fd:1c:
d7:1a:19:c7:ba:3d:0f:87:8d:d3:c0:4d:6c:37:51:a0:23:2b:
58:45:cb:cc:3a:0d:06:a1:82:16:b1:3a:1d:82:b7:7b:23:35:
40:2f:2f:e4:70:ad:01:c4:ea:26:49:3a:4b:0a:9a:88:81:73:
bc:13:58:31:74:f0:17:82:75:52:bd:c7:86:ea:d2:39:00:c9:
56:af:4b:a0:2e:bc:17:d4:c6:11:28:f4:15:00:a0:7c:18:6f:
32:fc:08:80:e8:46:f1:07:eb:ea:eb:32:08:81:4e:db:a7:dd:
1d:7d:df:8c:64:90:8c:26:b4:0a:35:9c:2e:4b:3c:49:5a:ed:
33:d5:57:23:01:79:3a:33:a4:5e:fc:89:98:05:fd:a4:38:e7:
be:c4:78:70:8f:0d:b8:d4:8e:52:f2:c1:e2:89:cb:7a:15:c6:
56:f8:80:37:89:20:2f:37:d9:0a:91:4b:ab:fa:d4:c1:54:00:
da:e0:da:50:a1:cd:45:63:e1:07:0d:94:09:97:54:ac:ff:4b:
b7:ee:82:ec:3f:5e:b8:4a:51:2a:8d:b2:f2:54:c7:8b:f1:c9:
c4:35:33:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/m4QNovsmWHkHI9EzDgZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YjgwZDVmNGE5YzkyZGQ5MmE0NjA1NzE5ZTBhZThkMWE2
MmMwNDMwHhcNMjYwNTEyMjEwMTE0WhcNMjYwNTEzMjEwMTE0WjAzMTEwLwYDVQQD
EyhmODExYmFjZWFhMDdlOWJiMDg1NTEzNGY0MzIzOGIwNmNiYzkwODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS/8bJuZ25LNdOV4IIIBnk2IUePt
v0PcCU7d97ZjRwdpGZ1De/uWX7W1yUT//7lnXlTjAVwwTumf0JjPOmoZso2nd+5j
0cjn0yLKqkyrfdIGekRjqxt/FrRzdovYXV9X98NbYC8S7pQaHoshA3h/JBCvZJ5A
Lb4F7P63ay/saSQ36zG1lG+1PrHQsjeE5IIU6/i4XXYCNkLO/h6L0rbycIGORW0M
T+mtf0w4Y3YmNfUyjHiZ+0P7HHycdrvqIT9yINKGLFV6qy2hbRmZ2e86CXvB8MPr
89EY0hqo8HHC46Gh9lpU9Pw3GUgKpqdcig8+/3Jde0C6n1cJ2Jvn64j79wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgRus6qB+m7CFUTT0MjiwbLyQgwMB8GA1UdIwQY
MBaAFAe4DV9KnJLdkqRgVxngro0aYsBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xNjVmM2QtYTRmYS00ZGE1LTg0ZTUt
YTI2NWYzODA5M2EwLzEvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8xNjVmM2QtYTRmYS00ZGE1LTg0ZTUtYTI2NWYzODA5M2Ew
LzEvQjdnTlgwcWNrdDJTcEdCWEdlQ3VqUnBpd0VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvgdd0MR
xSLzG27laJlM43DAdjVxmBiQ+OhdJB8gemh/yv0c1xoZx7o9D4eN08BNbDdRoCMr
WEXLzDoNBqGCFrE6HYK3eyM1QC8v5HCtAcTqJkk6SwqaiIFzvBNYMXTwF4J1Ur3H
hurSOQDJVq9LoC68F9TGESj0FQCgfBhvMvwIgOhG8Qfr6usyCIFO26fdHX3fjGSQ
jCa0CjWcLks8SVrtM9VXIwF5OjOkXvyJmAX9pDjnvsR4cI8NuNSOUvLB4onLehXG
VviAN4kgLzfZCpFLq/rUwVQA2uDaUKHNRWPhBw2UCZdUrP9Lt+6C7D9euEpRKo2y
8lTHi/HJxDUzRA==
-----END CERTIFICATE-----
Generated at Wed May 13 03:07:19 2026 by rpki-client