Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
File: B8nKHieDB7riQFpINK9EfAZBRwE.mft (raw, json)
Hash identifier: rM2yoVeyAv8FSUR2QPdSFtGszr3xOR2LyhTLljouro8=
Subject key identifier: CB:04:E2:26:24:AE:6E:44:69:DE:90:26:1F:2C:A2:E5:71:C5:55:89
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 01A0D3F0AA454165A4969001FEE09FD25108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
Manifest number: 0AF7
Signing time: Thu 24 Sep 2026 15:02:39 +0000
Manifest this update: Thu 24 Sep 2026 15:02:39 +0000
Manifest next update: Fri 25 Sep 2026 15:02:39 +0000
Files and hashes: 1: B8nKHieDB7riQFpINK9EfAZBRwE.crl (hash: 9jEDHVYSM6NoJV6QIwEe/m62nKKKnzHulNzocWHP9V4=)
2: zXN2_wYgwI6PDqftPeFqf6vyJhA.roa (hash: +ACIhEpK9FdviN7dvinvYgo97L9G6OP8mQIkUkahIdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:aa:45:41:65:a4:96:90:01:fe:e0:9f:d2:51:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: Sep 24 15:02:39 2026 GMT
Not After : Sep 25 15:02:39 2026 GMT
Subject: CN=cb04e22624ae6e4469de90261f2ca2e571c55589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d9:a1:00:3a:aa:8f:ec:52:27:d7:ab:fa:7b:
74:cf:9f:be:38:77:e1:51:d7:31:a1:ac:15:6d:de:
8b:8c:04:b5:12:d0:83:63:84:fb:14:40:e2:a6:e2:
5c:f7:ea:44:e0:d7:67:7f:57:bc:04:a9:91:c3:7c:
32:4d:95:09:ab:53:76:7d:95:58:0d:e5:28:96:49:
76:c6:cd:ea:5b:71:ac:a1:08:ea:ee:70:66:be:d1:
08:58:93:82:06:5c:3c:13:b8:01:34:91:7d:27:75:
42:76:e4:d8:19:13:2d:a5:5c:27:ea:72:03:72:3b:
a9:66:da:47:2e:10:7a:96:74:a9:ee:90:6c:57:03:
46:8a:dd:e3:d9:82:9a:d9:2c:8d:61:d0:56:6e:a9:
79:6a:ee:8f:89:04:f5:11:f9:35:b3:5e:0a:4e:68:
09:e3:a4:b9:bd:65:ad:ea:da:36:3d:25:b7:e6:65:
e6:b5:2f:c2:de:d2:38:9b:97:98:99:c1:70:a4:ca:
f3:73:a3:ce:15:1c:16:93:16:90:6b:cb:dd:47:94:
44:f1:09:23:ab:eb:da:d2:83:cf:01:7e:0e:0a:85:
04:73:c9:2b:04:83:3a:58:f7:1e:25:7a:61:ec:50:
f7:01:ba:f0:32:cf:40:7b:eb:5b:8f:52:ef:28:98:
6b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:04:E2:26:24:AE:6E:44:69:DE:90:26:1F:2C:A2:E5:71:C5:55:89
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5b:c9:33:c6:ad:af:ef:4e:86:c8:ee:00:a2:67:fc:4c:54:
e0:c8:b4:23:35:97:39:13:ee:00:44:68:6b:ca:b4:20:df:39:
56:b6:d1:66:d6:07:29:a9:42:e0:92:0b:09:10:f7:68:ab:94:
12:62:75:dd:d0:57:1d:e6:ab:f5:16:f6:1f:91:6e:28:19:ba:
04:05:66:7e:2d:99:ce:12:a0:24:01:79:94:8f:50:ad:3e:5c:
47:40:2f:77:79:0a:6d:cb:f7:90:0f:6b:f1:20:b2:a1:a3:c1:
13:6a:56:ca:16:48:b9:a3:26:31:84:5f:c7:cd:b6:cb:b7:3f:
08:c9:63:e0:41:66:55:7b:2a:b6:60:09:ca:f8:11:53:d7:98:
84:26:e3:00:e7:e0:46:4f:87:21:ad:bd:34:be:fe:55:09:20:
c6:39:92:9b:c7:73:eb:40:1a:49:b4:c1:68:ec:37:a4:cf:f6:
16:29:03:ef:2f:7f:20:dd:7c:94:8f:a9:d2:57:02:7f:28:37:
c5:0a:2a:27:86:4e:0b:71:9d:36:8d:18:72:54:ec:30:68:18:
4d:45:24:d0:46:ca:2f:17:ac:c4:00:5e:13:eb:94:8c:31:6a:
64:38:35:b9:88:49:96:ca:52:7b:83:b4:bf:35:10:c6:b6:20:
5f:25:c3:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT8KpFQWWklpAB/uCf0lEIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzljYTFlMjc4MzA3YmFlMjQwNWE0ODM0YWY0NDdjMDY0
MTQ3MDEwHhcNMjYwOTI0MTUwMjM5WhcNMjYwOTI1MTUwMjM5WjAzMTEwLwYDVQQD
EyhjYjA0ZTIyNjI0YWU2ZTQ0NjlkZTkwMjYxZjJjYTJlNTcxYzU1NTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtmhADqqj+xSJ9er+nt0z5++OHfh
UdcxoawVbd6LjAS1EtCDY4T7FEDipuJc9+pE4Ndnf1e8BKmRw3wyTZUJq1N2fZVY
DeUolkl2xs3qW3GsoQjq7nBmvtEIWJOCBlw8E7gBNJF9J3VCduTYGRMtpVwn6nID
cjupZtpHLhB6lnSp7pBsVwNGit3j2YKa2SyNYdBWbql5au6PiQT1Efk1s14KTmgJ
46S5vWWt6to2PSW35mXmtS/C3tI4m5eYmcFwpMrzc6POFRwWkxaQa8vdR5RE8Qkj
q+va0oPPAX4OCoUEc8krBIM6WPceJXph7FD3AbrwMs9Ae+tbj1LvKJhrTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMsE4iYkrm5Ead6QJh8souVxxVWJMB8GA1UdIwQY
MBaAFAfJyh4ngwe64kBaSDSvRHwGQUcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNjNjMjYtN2RjYS00NTEyLTgzNGYt
MDA1ZWRmYjc2MWM2LzEvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yNjNjMjYtN2RjYS00NTEyLTgzNGYtMDA1ZWRmYjc2MWM2
LzEvQjhuS0hpZURCN3JpUUZwSU5LOUVmQVpCUndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1vJM8at
r+9OhsjuAKJn/ExU4Mi0IzWXORPuAERoa8q0IN85VrbRZtYHKalC4JILCRD3aKuU
EmJ13dBXHear9Rb2H5FuKBm6BAVmfi2ZzhKgJAF5lI9QrT5cR0Avd3kKbcv3kA9r
8SCyoaPBE2pWyhZIuaMmMYRfx822y7c/CMlj4EFmVXsqtmAJyvgRU9eYhCbjAOfg
Rk+HIa29NL7+VQkgxjmSm8dz60AaSbTBaOw3pM/2FikD7y9/IN18lI+p0lcCfyg3
xQoqJ4ZOC3GdNo0YclTsMGgYTUUk0EbKLxesxABeE+uUjDFqZDg1uYhJlspSe4O0
vzUQxrYgXyXD8g==
-----END CERTIFICATE-----
Generated at Thu Sep 24 23:42:50 2026 by rpki-client