Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: lwasEJbplrb8Rcs10l4x06+kzc0s0B2XD/cTO0KOSec=
Subject key identifier: BE:EA:7A:41:FE:9D:48:77:49:EB:18:07:98:DB:7D:59:BB:81:AA:9A
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 01A0E81D02EB0FBF8CD9C621B9989C85ABDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 111F
Signing time: Mon 28 Sep 2026 13:03:30 +0000
Manifest this update: Mon 28 Sep 2026 13:03:30 +0000
Manifest next update: Tue 29 Sep 2026 13:03:30 +0000
Files and hashes: 1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=)
2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: 2mBW6IB2KR4NEzAG/7xkIzbSb92udK4QbNsdPMsN96k=)
3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1d:02:eb:0f:bf:8c:d9:c6:21:b9:98:9c:85:ab:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Sep 28 13:03:30 2026 GMT
Not After : Sep 29 13:03:30 2026 GMT
Subject: CN=beea7a41fe9d487749eb180798db7d59bb81aa9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:19:fb:61:78:c3:56:01:e3:45:77:a4:53:
e4:70:2f:02:b5:60:52:9d:49:4b:d8:14:0f:fb:40:
f1:16:78:e3:21:cd:fd:fe:11:d8:65:95:5c:76:e9:
da:dd:8e:c4:4e:5e:b9:b5:56:f5:bb:e9:c4:4f:98:
8c:bb:1e:2a:19:18:f4:b6:3d:19:e2:61:59:60:53:
32:3e:18:f1:8a:6e:ab:12:40:ef:b5:4f:c1:bc:72:
d4:9f:5c:61:9e:6b:2b:12:c6:77:51:de:50:7c:8b:
e9:96:02:9b:01:a6:b9:e6:f8:b0:10:41:11:d5:13:
66:9e:f5:da:f1:7f:75:f0:c2:a0:19:92:cc:f4:01:
65:39:ed:0e:49:dd:63:09:cb:fe:bd:20:a0:8e:db:
bc:f2:1c:a2:c7:cc:b1:96:40:cb:db:a0:1e:d3:a7:
1f:81:13:1f:43:f1:78:56:77:be:62:ba:27:1d:4b:
c1:9a:f6:fa:d6:0d:22:2d:f3:89:81:1a:48:cc:c4:
95:ac:29:7c:d1:1f:bc:39:17:4a:cd:e6:a8:6c:1b:
d7:a6:33:9f:03:b0:98:0e:a3:39:7a:4b:9b:0a:19:
1b:aa:72:53:66:93:53:50:81:78:a3:83:90:02:fc:
30:93:90:ff:86:2d:1c:b2:42:38:37:06:d5:8b:a1:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EA:7A:41:FE:9D:48:77:49:EB:18:07:98:DB:7D:59:BB:81:AA:9A
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:28:f3:3d:88:7e:d7:6f:46:42:d3:07:07:d1:53:b6:ba:0b:
2e:cc:51:45:14:8d:c1:81:c2:fb:92:58:0e:4f:4d:1d:f2:0c:
80:0a:6e:25:fa:fc:64:4d:01:9b:17:b3:4e:fa:92:3e:fb:47:
4b:8f:51:d3:19:1b:8b:90:05:3a:57:e0:82:f3:46:cb:8d:e8:
f0:03:ba:1d:75:ca:61:a8:0f:40:4b:e8:e3:93:cf:9b:e5:16:
f7:3a:c8:71:c2:4a:75:77:37:5e:59:3e:80:5a:0c:f1:25:0e:
25:da:57:48:47:aa:7d:a1:37:0e:60:93:0f:18:51:08:2a:82:
8d:9d:0c:f3:29:71:df:c6:0b:21:0c:56:1f:e7:e9:f0:57:b8:
3a:47:5f:03:2e:ca:e1:56:73:32:76:f0:07:78:bc:dc:b6:19:
7b:94:af:af:41:a0:e5:f6:e3:4f:12:10:9b:39:9d:c4:a8:38:
f9:23:25:55:22:0d:9f:41:81:3a:49:21:af:2a:23:b7:5f:8c:
fa:08:27:73:27:b8:05:63:12:0f:5c:36:bb:23:44:f2:c0:cc:
d5:b6:bf:0e:ff:39:01:92:74:3b:d8:0e:8b:39:bf:67:91:b9:
12:4c:f1:64:9c:34:7d:fe:6e:89:2f:16:1d:49:83:d9:55:b2:
4f:a0:db:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:25:31 2026 by rpki-client