Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
File: B8nKHieDB7riQFpINK9EfAZBRwE.mft (raw, json)
Hash identifier: VSeTcJcnCBK4l3hPW8G+c1AuKvlX3+riaoN5Orx9hmg=
Subject key identifier: 52:4C:2A:BD:84:32:FD:38:B9:63:F5:8F:C0:74:C4:A3:C7:D3:EF:12
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 019D27A8D1EB253DED257A1B3B27333CD224
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
Manifest number: 0910
Signing time: Thu 26 Mar 2026 01:01:08 +0000
Manifest this update: Thu 26 Mar 2026 01:01:08 +0000
Manifest next update: Fri 27 Mar 2026 01:01:08 +0000
Files and hashes: 1: B8nKHieDB7riQFpINK9EfAZBRwE.crl (hash: QU2dUFKqPPMng3or7UpRWSw0Owi6MQ7+/BfEHR5xhH4=)
2: sl4knhtspqwr9rTK7zf85jFL7x0.roa (hash: iYCXbN5+gyFAj++5EEfvSQ50xKes/KEYDwIBaztlKwY=)
3: zXN2_wYgwI6PDqftPeFqf6vyJhA.roa (hash: +ACIhEpK9FdviN7dvinvYgo97L9G6OP8mQIkUkahIdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:d1:eb:25:3d:ed:25:7a:1b:3b:27:33:3c:d2:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: Mar 26 01:01:08 2026 GMT
Not After : Mar 27 01:01:08 2026 GMT
Subject: CN=524c2abd8432fd38b963f58fc074c4a3c7d3ef12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a7:ca:8f:a4:bb:f2:96:9d:b9:20:43:47:51:
15:c6:6b:4f:df:9a:d3:5e:ca:5f:6c:5b:54:29:3d:
82:0e:f0:bc:cb:04:f4:43:f4:19:f0:50:2f:ff:7d:
40:23:ee:ea:8c:65:5f:e7:e4:28:b7:7c:9e:4c:ae:
d9:de:56:a3:c7:c2:db:f6:6f:cf:82:72:11:f9:fe:
dd:0d:4f:61:43:03:45:2d:5c:c8:33:24:3e:c4:d2:
fc:33:a9:22:a2:3f:01:d1:8f:12:93:5d:13:08:2e:
ee:16:60:4d:83:5b:4d:a3:1d:6d:d7:2a:c0:03:ba:
74:50:5b:cb:4f:fe:47:ea:2b:11:c0:54:2d:5e:20:
02:52:b5:8e:4b:df:98:65:ed:a8:2d:74:d0:81:9d:
2f:9f:a3:30:00:80:1a:81:a9:94:d1:ba:db:9f:33:
be:f1:ff:a0:de:ba:91:40:b6:bb:6a:a1:63:1f:33:
b9:c3:d0:c6:56:cd:6d:33:1a:49:26:a4:b5:31:85:
da:0c:f6:22:82:1c:1a:33:b4:76:12:3f:bb:6d:ea:
db:2b:fe:5b:92:9e:40:b1:58:b4:8b:8d:a1:db:c6:
f8:03:0f:23:a5:fb:39:64:be:5e:c6:89:e6:48:56:
9f:61:55:76:30:e7:8d:99:31:5b:b9:ae:6c:ad:21:
a6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4C:2A:BD:84:32:FD:38:B9:63:F5:8F:C0:74:C4:A3:C7:D3:EF:12
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:1a:a1:45:80:9c:fc:74:5d:11:0e:e8:a2:5c:3b:74:28:05:
02:e1:ae:b1:33:d3:7c:4a:48:83:96:f3:d3:0c:5a:c7:8a:42:
5e:3b:9c:5d:d6:65:1e:e8:84:96:4b:af:a3:7d:4c:2a:5d:75:
da:e7:b0:27:5b:4f:bf:86:e5:5e:33:33:be:32:60:89:06:6d:
f4:28:dd:7d:0c:d1:8c:f1:41:3c:a1:f6:6f:14:8c:8b:31:d4:
39:be:d3:68:e1:3e:26:a4:24:b8:75:57:50:6a:fd:09:34:09:
b7:83:0f:8c:38:95:9e:c0:b8:a8:07:18:c6:79:41:c0:72:a5:
7f:d3:09:92:d2:13:40:0f:44:b5:6f:08:73:b5:57:ec:03:ef:
2b:02:e6:56:95:71:f4:65:e9:40:11:87:e2:3f:87:c9:fd:de:
41:a9:cb:c9:5c:9e:fc:e4:ce:84:a7:82:7b:e4:06:41:d5:48:
7f:6b:fa:d4:68:a2:33:1e:1a:31:a5:74:d2:46:49:35:cc:ea:
c9:6d:8c:7d:59:26:85:01:1b:95:c5:7f:37:b7:2f:0a:40:89:
a5:08:10:7d:2f:41:7b:ec:30:16:30:9d:59:22:2d:bb:73:72:
d3:59:94:df:cb:55:f6:dc:7c:8b:94:45:ce:db:8f:6b:6d:d3:
24:08:20:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:36:44 2026 by rpki-client