Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: r2mXGFHJ2kOadkRUy0cvkXKT0BmLyjB3lnpK/wuGM24=
Subject key identifier: 61:2B:78:CF:BB:4C:E2:81:AB:67:DA:23:E1:31:3D:B1:8F:2E:BE:B5
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 019D265F44510A0F942407EF9ADDE7225C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0F2D
Signing time: Wed 25 Mar 2026 19:01:10 +0000
Manifest this update: Wed 25 Mar 2026 19:01:10 +0000
Manifest next update: Thu 26 Mar 2026 19:01:10 +0000
Files and hashes: 1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=)
2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: xZjkv22prLbTMpyBBggRD2Ktjd9XODOMEhrRUOpb3f8=)
3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:44:51:0a:0f:94:24:07:ef:9a:dd:e7:22:5c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Mar 25 19:01:10 2026 GMT
Not After : Mar 26 19:01:10 2026 GMT
Subject: CN=612b78cfbb4ce281ab67da23e1313db18f2ebeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:39:d7:f6:75:01:63:f7:06:99:8b:c6:f8:20:
b7:27:e7:71:a1:bb:b2:41:91:d2:47:f8:33:73:b9:
9b:d9:5b:46:4b:f9:80:d0:32:db:ec:17:be:29:27:
93:fb:29:b1:a6:22:b7:ee:43:a3:1f:f5:5d:88:59:
59:bb:b6:e0:b7:18:31:59:84:ec:9d:19:f8:24:4a:
78:88:e9:1f:6b:dc:c9:fd:94:6a:e0:6d:f5:da:b7:
79:d8:aa:6a:f1:da:89:22:f8:0e:ce:e5:ff:6e:77:
6c:0a:f2:1b:c5:46:55:44:b7:9c:8e:b1:35:d1:45:
da:66:d4:27:ac:2a:ae:49:fc:cb:18:08:f1:8a:e9:
51:c9:ce:71:7f:11:12:a4:57:91:a1:d3:76:fc:fc:
e7:fd:31:67:01:3f:4c:21:48:32:14:4b:23:22:c7:
c7:bd:48:10:b4:ca:0c:ef:f7:25:97:8a:e6:2d:77:
35:2c:06:0a:bd:14:1c:0e:d1:db:0f:f6:9a:2e:f0:
06:94:72:08:97:b3:96:ad:47:9d:7b:e0:4d:28:21:
54:f5:b8:0f:a2:d2:2b:0d:a8:b8:dd:29:d5:9c:b8:
b5:31:8c:6c:2a:c1:79:4e:e3:c7:b1:3c:4b:5c:f2:
d3:8a:78:db:13:b1:f7:14:e5:a4:16:c9:9f:87:d1:
9b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2B:78:CF:BB:4C:E2:81:AB:67:DA:23:E1:31:3D:B1:8F:2E:BE:B5
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8b:bb:ea:d4:32:df:ea:eb:0a:8e:7a:33:99:c1:9e:2a:77:
f8:32:23:1a:f3:72:cc:49:6b:0d:aa:22:b9:84:36:b3:66:c0:
a9:d8:c4:5e:73:36:7c:23:92:8c:9e:08:f8:d1:64:73:d5:e9:
f9:a1:b8:4f:01:eb:4a:99:08:cb:72:62:83:86:b4:b3:53:87:
f2:45:f0:1b:61:18:b7:fc:12:a2:d0:52:48:64:5f:48:e8:eb:
6d:e7:f1:5f:0b:d9:b6:79:03:16:87:c3:4d:f9:0e:d8:c8:0c:
75:5e:93:8f:9b:4d:30:93:2d:42:68:d2:49:b2:33:28:4f:e5:
07:68:13:eb:6a:52:72:5f:c8:07:f8:f8:01:a9:9e:4f:94:16:
85:af:14:67:23:91:d6:3d:73:dc:40:56:f0:31:aa:de:40:8b:
77:6f:c8:2f:fb:b2:ec:79:dd:12:0b:12:87:4a:50:c9:f2:1e:
fa:10:36:27:4f:83:8c:d4:80:91:f0:0f:17:5f:1c:fd:97:6d:
1e:48:e9:20:b4:4f:a4:30:43:87:35:18:3c:7f:5c:03:96:67:
8c:34:cf:16:b0:72:e4:83:bb:29:4d:a5:8c:b9:fa:ca:d5:29:
1e:b4:a8:04:02:e9:c5:08:ea:bd:99:fc:63:7d:c0:33:b4:e0:
81:5c:1d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:29 2026 by rpki-client