Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: jRq+f1TWJtka+wWtS6ot+e9uKieX4a9ATEUQH40Zk9A=
Subject key identifier: 60:A1:7C:E1:90:A2:4A:4E:50:96:88:A8:5B:53:4C:D5:17:1A:7C:7A
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 019F905AA381CD8DBD156559F1A7F9BEEF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 106D
Signing time: Thu 23 Jul 2026 19:01:26 +0000
Manifest this update: Thu 23 Jul 2026 19:01:26 +0000
Manifest next update: Fri 24 Jul 2026 19:01:26 +0000
Files and hashes: 1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=)
2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: OcpSIXsYHaoSZYBlsnyQ+teDrn9O0sqTlZ12zW2+Rg4=)
3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:5a:a3:81:cd:8d:bd:15:65:59:f1:a7:f9:be:ef:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Jul 23 19:01:26 2026 GMT
Not After : Jul 24 19:01:26 2026 GMT
Subject: CN=60a17ce190a24a4e509688a85b534cd5171a7c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:53:00:1c:87:5b:50:1c:9a:1b:db:8b:a1:
4b:e3:99:1e:73:73:18:9b:15:d7:e2:2d:a2:cd:e6:
83:53:f6:9d:cb:42:7b:9b:8e:cb:cd:e6:a0:6f:86:
8b:89:cd:62:9e:fa:f2:e1:b6:2f:6e:f2:a2:00:c2:
da:37:17:ed:aa:82:c8:fe:88:6a:5f:0c:12:00:e2:
6d:bc:91:ec:f4:11:a6:4a:3b:f9:ec:3d:48:7d:04:
ad:ef:6a:bd:82:00:34:e5:b1:aa:e7:dc:6d:66:4f:
b8:a9:8b:60:3c:9d:cf:c2:3a:ab:13:7b:9d:dc:f3:
c9:95:3c:f9:ce:8f:52:36:48:5e:c4:d9:c2:43:25:
59:e8:b2:b0:f1:d7:6b:c3:4c:18:15:f7:b3:da:02:
b0:a8:9a:56:75:5e:d8:96:0a:0f:6b:e8:46:a6:4f:
5f:b5:a5:6c:59:81:b0:f5:d9:f7:86:8c:a1:26:34:
9d:2e:ad:e8:f5:62:bf:8b:06:fa:a8:de:5f:46:13:
1e:0b:c3:fe:98:d9:a5:04:a5:01:41:3a:16:83:c8:
7b:e3:82:28:99:62:b8:e8:9d:97:5d:64:24:36:9a:
10:c3:7f:30:7a:7e:2a:70:7a:a2:46:de:b8:7f:9e:
25:a0:c7:f2:54:0c:01:90:06:db:3c:9f:8b:1c:7c:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A1:7C:E1:90:A2:4A:4E:50:96:88:A8:5B:53:4C:D5:17:1A:7C:7A
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:41:8e:a5:94:1f:3c:e6:66:8c:9e:63:84:12:74:c9:6d:9e:
cb:b3:22:ca:40:30:7d:ef:71:ac:e1:f8:1c:a8:06:32:77:da:
22:bc:4f:01:bc:28:fd:4f:3e:00:50:60:e4:f7:7d:51:ba:9d:
cc:50:fc:89:1f:20:20:03:27:17:b0:85:9c:ae:2a:fc:10:06:
07:81:79:19:7a:70:6c:09:ef:e6:50:3a:7e:e8:d8:48:75:eb:
f6:1b:5f:62:59:e9:90:8f:2d:9f:96:47:29:08:44:f5:55:c6:
c7:fd:e1:38:a7:83:fd:93:81:63:89:5e:ed:aa:7c:bc:7e:da:
91:82:80:94:19:62:19:26:5b:c2:6f:05:e4:2e:62:78:e6:ec:
cf:1c:e2:11:de:99:23:78:d9:4c:73:ad:ba:2e:d3:f9:5c:fc:
ea:dc:21:51:a0:da:bf:4b:64:5c:18:69:5b:56:4f:63:96:17:
ac:76:a6:38:10:a3:47:8b:33:84:ac:4f:7c:73:5d:51:aa:35:
df:66:72:9f:90:ee:66:71:45:a2:4a:17:ba:82:e0:9e:ef:a2:
0e:e5:e3:24:e5:c9:1b:3f:cf:46:f5:5e:03:db:c7:94:a2:d6:
64:a7:d3:d0:83:bd:91:18:e0:14:d1:df:dc:36:12:55:71:1b:
28:c1:43:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:45:28 2026 by rpki-client