Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: UnfI/KaVqlsiLYZ9MNIX/FZOkQBAxWWP/mbbm6F9i1A=
Subject key identifier: C5:3E:49:79:53:7D:B1:E1:CD:2E:9A:F4:20:E5:0C:8C:58:0A:56:19
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 019E1D9062577EB06C378CA832823DC68F58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0FAD
Signing time: Tue 12 May 2026 19:01:02 +0000
Manifest this update: Tue 12 May 2026 19:01:02 +0000
Manifest next update: Wed 13 May 2026 19:01:02 +0000
Files and hashes: 1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=)
2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: uMFjpQraYbjV+1pnyjgw34Df+JTb+JOHai5R0eQgFDU=)
3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:62:57:7e:b0:6c:37:8c:a8:32:82:3d:c6:8f:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: May 12 19:01:02 2026 GMT
Not After : May 13 19:01:02 2026 GMT
Subject: CN=c53e4979537db1e1cd2e9af420e50c8c580a5619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6d:c7:4d:ea:87:e3:a6:df:ee:7a:2b:89:a2:
c4:08:51:28:42:7d:a1:cf:57:0f:cc:70:53:c3:1a:
47:57:7a:04:69:f9:6e:92:bd:e3:61:8c:87:73:e8:
c2:2f:9f:7e:7a:de:5c:27:44:cb:57:3a:0f:2f:ed:
a6:5b:11:3a:c0:cb:6e:6c:21:f6:05:f6:a2:28:02:
18:3f:66:00:ac:f9:8b:67:68:be:d1:4a:41:c0:68:
70:1e:1a:b7:66:20:29:a1:89:e1:18:fe:ec:fa:e7:
4c:6e:8f:58:76:16:fd:29:70:97:a7:82:e3:9b:0c:
80:24:f6:31:b3:b3:cc:dc:52:16:f4:54:db:d2:70:
02:c4:79:25:fd:05:80:fd:bd:4e:41:cf:ec:74:d8:
20:ba:a6:45:94:ed:74:f0:9f:1a:f2:d7:be:7e:21:
41:28:92:e3:ef:82:1b:32:53:e7:f2:5f:8d:fa:86:
02:8d:8b:c6:aa:4a:34:79:1d:ca:14:a3:ea:87:6e:
22:38:2c:eb:bf:b0:d2:e1:a2:ad:56:bc:62:dc:3a:
b4:80:28:14:88:06:97:a6:fb:fc:7c:9e:da:23:25:
86:83:a8:1a:39:0b:fb:f3:7b:9e:90:f5:e7:11:eb:
f3:38:1d:5a:06:f5:27:7a:3b:c9:b5:f0:fd:0a:f8:
9e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3E:49:79:53:7D:B1:E1:CD:2E:9A:F4:20:E5:0C:8C:58:0A:56:19
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:71:0f:29:14:c1:6a:75:06:f7:92:1d:91:ac:33:25:ac:24:
b0:1c:bc:d0:84:02:a3:95:71:b3:7c:d1:19:32:bc:ab:2b:26:
81:06:1c:93:bb:3b:27:59:09:b1:38:7f:51:f9:04:5e:ba:37:
e2:88:6c:21:9f:91:8a:a8:8b:9e:34:af:f9:21:60:f8:95:c8:
53:13:53:5c:74:1e:69:cd:38:aa:d9:26:2f:ad:ba:71:d3:24:
2b:91:bc:63:a6:b9:d0:c7:13:7f:de:34:7c:02:ae:4b:9e:12:
cc:60:55:bb:a5:bd:77:d5:b8:f6:9b:9f:26:14:f6:7c:ec:ca:
29:7f:14:34:8e:7a:2a:de:1d:f1:82:d0:f0:0b:0c:13:16:5e:
4d:bf:ee:e9:26:a2:e3:fd:65:f8:1a:d8:03:34:4d:92:3f:ca:
da:02:39:73:a8:ea:4b:00:52:1c:4c:ca:7c:39:7c:68:3b:25:
d4:d9:4d:ba:09:92:19:91:3a:3b:42:27:41:31:1a:65:a8:9f:
d3:09:3f:1c:13:b4:f8:da:1e:8c:31:d5:dd:44:5b:cc:1b:f2:
5a:ab:8f:ce:3b:5d:7b:dc:c3:99:94:f2:3c:3a:11:89:6f:33:
cd:87:64:21:21:e7:d0:3a:64:2c:23:bf:bf:c8:cc:dc:36:c8:
c0:c1:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:29 2026 by rpki-client