Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
File: B8nKHieDB7riQFpINK9EfAZBRwE.mft (raw, json)
Hash identifier: FZRHQviA/qqyqrejp9tpMfKPQqX7xGRud5/F2GJo9jc=
Subject key identifier: 35:B3:43:DB:3F:05:11:2D:F6:29:B1:3E:D9:AA:1B:5A:79:C2:0A:80
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 019E1EA2C60E982B5ADD53EDFF86368A54F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
Manifest number: 0990
Signing time: Wed 13 May 2026 00:00:44 +0000
Manifest this update: Wed 13 May 2026 00:00:44 +0000
Manifest next update: Thu 14 May 2026 00:00:44 +0000
Files and hashes: 1: B8nKHieDB7riQFpINK9EfAZBRwE.crl (hash: PtV++yBenzU7QztU4sPyk4rLFu/FeAVMQO9uPSiUmX8=)
2: zXN2_wYgwI6PDqftPeFqf6vyJhA.roa (hash: +ACIhEpK9FdviN7dvinvYgo97L9G6OP8mQIkUkahIdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:c6:0e:98:2b:5a:dd:53:ed:ff:86:36:8a:54:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: May 13 00:00:44 2026 GMT
Not After : May 14 00:00:44 2026 GMT
Subject: CN=35b343db3f05112df629b13ed9aa1b5a79c20a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:30:1d:82:4d:14:30:5f:87:a2:6b:66:fc:
e2:ab:0f:42:5f:42:be:99:46:46:7c:46:70:7c:ba:
b0:f6:1a:34:48:c2:c7:30:b6:6a:e6:4f:91:a5:79:
34:6e:95:08:d7:a9:83:f0:02:bf:05:ba:d0:01:4b:
3d:4f:3e:90:0e:ec:03:b4:48:36:2f:5a:40:f4:0c:
dc:0d:ca:3f:67:89:e8:a1:dc:d2:d8:69:f5:74:1b:
60:00:1d:8d:40:4b:6e:f5:df:86:72:13:cd:49:e1:
f3:71:99:c8:0a:48:5f:d1:cd:18:c6:aa:b4:e5:16:
a1:3f:35:f3:a3:e3:82:bf:a5:40:7e:bc:49:70:4f:
33:ce:54:a3:20:b0:27:e9:d3:c5:b9:bd:0f:84:58:
8c:91:4e:a1:93:9a:ef:65:2e:47:ba:b6:9a:0e:ab:
b0:04:43:c4:b1:b1:34:4a:a8:f8:4f:e8:3d:c2:5a:
c1:60:e9:85:2d:76:5a:cf:15:43:c7:e4:a4:dd:89:
33:92:35:39:83:5d:63:37:2d:ed:a8:c7:5f:9a:cc:
fc:a9:4d:21:1c:e7:36:0a:2f:dd:11:60:71:9c:7b:
e1:2a:48:e3:77:f6:c9:63:6d:4d:0a:2b:70:d8:f8:
42:e7:87:98:f5:00:82:a1:50:60:36:18:1d:37:21:
52:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B3:43:DB:3F:05:11:2D:F6:29:B1:3E:D9:AA:1B:5A:79:C2:0A:80
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:96:5b:d3:d3:88:a3:45:e0:55:83:b6:55:b5:18:0c:c1:da:
a2:d9:eb:b9:28:79:73:d2:e7:1d:27:ce:a5:4a:6e:42:d6:3e:
cf:07:74:d3:87:76:48:d2:74:4b:d7:c5:a7:a2:23:05:6d:cf:
63:7a:73:bc:a9:8e:6c:1f:98:d3:83:3d:a9:2a:49:c0:5e:35:
3d:10:35:57:72:2b:a4:ff:82:05:19:35:02:94:11:8a:52:2d:
24:81:9c:15:70:3d:30:81:24:d5:c8:0d:72:7f:5a:20:7d:fc:
4d:2e:8f:e9:61:9e:38:08:c1:d7:5b:f4:16:39:9e:5a:92:04:
48:40:6e:84:e7:3e:97:e4:de:c3:fa:01:9c:61:79:e2:a6:c5:
06:0a:22:59:c2:54:68:d2:5d:33:0c:89:10:53:a8:6b:70:4b:
bb:f1:f2:f3:a2:2d:ec:b8:f7:b7:81:a1:7b:90:e0:7b:d1:80:
2a:28:75:d2:79:88:0a:ea:2f:cb:11:74:ce:30:71:1a:59:74:
5c:41:bb:e1:14:93:dc:7b:0b:b2:fd:21:d3:ad:34:d1:72:b9:
33:63:28:c5:a1:54:3a:a3:df:66:c1:45:6d:32:8b:27:05:17:
ad:e9:10:98:bb:a4:2f:aa:67:4e:90:af:06:70:be:19:89:3e:
75:7e:91:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:52 2026 by rpki-client