Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier: UOwhtHlC3EyzP9euk8tfM6vE4fVcMz0wh90P4JTdYOk=
Subject key identifier: AA:00:03:E3:41:89:D9:61:39:25:87:BA:0B:BB:FD:94:5D:01:3A:69
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 019F935B398AA7780D0B19C737C179ED6E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number: 1286
Signing time: Fri 24 Jul 2026 09:00:56 +0000
Manifest this update: Fri 24 Jul 2026 09:00:56 +0000
Manifest next update: Sat 25 Jul 2026 09:00:56 +0000
Files and hashes: 1: 7ctM-nfqVD_f5N8yCIgCf9_quM4.roa (hash: wja6n3HaPhEfG0qesMSoRitaVxtS1y7cOYduGiD52SU=)
2: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: WZsua14vaDvq6xjSeCzjm1WhZi8uCg243/9KM1GOZE0=)
3: CdGW6i18Yr035U0dUT-j8WcoJNo.roa (hash: Rxp+OcdpmAsKNqBYYDsjZgGcVdgHuz2oel8FBpzkdoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:39:8a:a7:78:0d:0b:19:c7:37:c1:79:ed:6e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: Jul 24 09:00:56 2026 GMT
Not After : Jul 25 09:00:56 2026 GMT
Subject: CN=aa0003e34189d961392587ba0bbbfd945d013a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:70:2a:46:8d:f3:16:37:18:72:62:97:12:a9:
35:06:25:6e:71:a4:95:44:93:2c:ea:dd:b3:ed:85:
61:2c:c4:6c:be:fc:26:d2:b0:b5:0d:a2:8e:bb:5d:
b7:89:08:db:15:51:df:2c:27:1e:d5:e2:ac:b4:0e:
39:00:42:e8:7b:9b:a6:85:62:b8:1c:d5:86:45:a2:
91:10:ca:b4:c0:f5:59:81:3d:af:d0:71:69:76:18:
dd:88:ca:4c:61:56:16:b2:2c:5a:ff:47:76:f6:b3:
eb:62:79:5a:f1:b8:dc:b5:e0:9a:3f:b3:4d:b0:48:
2f:63:fb:04:61:e2:31:95:d4:40:28:62:72:ca:de:
b2:67:bb:93:12:82:57:7f:6a:c7:98:bc:79:31:26:
dd:5c:84:85:d1:01:74:81:be:dd:61:a5:8e:49:29:
ea:cc:ab:73:31:aa:17:a2:57:a0:f2:1e:6c:b2:76:
33:de:01:e9:58:21:d4:99:90:9a:57:e4:8a:d8:67:
aa:b2:e8:e6:32:af:03:24:81:f8:f5:47:a2:aa:b0:
d6:45:bb:22:34:64:bf:ee:58:8d:b0:15:16:b4:32:
ab:49:b7:10:ba:ba:8b:e1:1b:80:9a:2f:e0:56:bc:
3e:4a:12:2b:72:5d:8a:33:a9:05:14:88:28:fa:35:
10:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:00:03:E3:41:89:D9:61:39:25:87:BA:0B:BB:FD:94:5D:01:3A:69
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fe:73:ac:71:13:2d:81:0d:bc:6c:b7:80:82:8a:5b:18:2f:
e8:60:d2:22:92:4a:ab:99:5e:de:05:84:d2:77:8e:43:ca:9b:
ea:17:9b:d0:29:c9:0c:3b:22:00:c6:1d:29:69:70:e1:30:6b:
c8:ce:74:44:26:9a:af:5a:e0:17:a3:f3:d1:61:c6:f9:9e:c1:
92:70:a8:f0:d6:7c:07:fc:8f:ee:4f:94:41:6c:f7:2f:b8:a3:
69:c0:6e:12:fe:e7:c9:f9:e0:69:e7:a3:ad:9e:76:6a:4b:72:
09:ee:55:7d:6f:cc:da:7e:1e:4e:73:4d:48:b2:2f:17:1c:ad:
34:52:11:fa:a7:c7:97:19:b7:85:44:0a:b9:0c:de:00:73:1d:
e8:74:c3:30:2d:a6:b4:fc:f9:8d:85:01:88:84:a8:19:ed:f7:
d1:91:40:d7:16:ae:58:ae:25:d7:74:f3:83:9e:08:f3:ca:2a:
f5:7e:f3:06:ca:50:76:15:44:cb:49:ab:a6:3c:da:62:79:e7:
33:d7:5d:94:ea:a1:a6:39:d3:cc:64:24:9e:0f:38:e7:55:21:
ed:db:db:35:f6:24:41:cb:19:77:b7:7e:0e:f7:d7:64:41:e6:
38:db:5f:be:76:81:7b:80:15:5e:f4:8b:c2:ff:08:fd:f0:0f:
00:27:58:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:20 2026 by rpki-client