Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier: VmXxz+x0gq6Xspxo3DJq5x+MYqXPFJELfhM6xm/nI8s=
Subject key identifier: 42:40:76:3F:CE:7C:26:44:D5:59:8E:D8:54:47:FB:11:75:84:23:84
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 019E1CB4CF9F61BFBD32A2036732973FFCB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number: 11C4
Signing time: Tue 12 May 2026 15:01:11 +0000
Manifest this update: Tue 12 May 2026 15:01:11 +0000
Manifest next update: Wed 13 May 2026 15:01:11 +0000
Files and hashes: 1: 7ctM-nfqVD_f5N8yCIgCf9_quM4.roa (hash: wja6n3HaPhEfG0qesMSoRitaVxtS1y7cOYduGiD52SU=)
2: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: NrmTLd5iYTXKlcYf2oZjD6txuxaad5VTGioiAEEiU4g=)
3: CdGW6i18Yr035U0dUT-j8WcoJNo.roa (hash: Rxp+OcdpmAsKNqBYYDsjZgGcVdgHuz2oel8FBpzkdoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:cf:9f:61:bf:bd:32:a2:03:67:32:97:3f:fc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: May 12 15:01:11 2026 GMT
Not After : May 13 15:01:11 2026 GMT
Subject: CN=4240763fce7c2644d5598ed85447fb1175842384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c7:2f:8d:b1:a7:1e:1f:1d:c0:30:19:d8:95:
c7:e9:6a:6c:f2:80:f1:f9:e9:3d:7f:fc:71:be:97:
fb:32:f7:51:4e:b7:81:c1:94:34:e2:2e:61:41:90:
7e:a3:50:94:05:44:93:26:a0:32:19:f1:73:28:01:
c2:46:42:20:15:f0:34:67:29:40:bb:5d:f0:17:3a:
3e:15:cf:01:8f:54:fc:6a:60:49:8d:16:44:be:c7:
96:8b:fd:3e:06:98:40:e6:24:00:34:90:02:55:c1:
ca:1c:ff:e2:f8:fe:26:7d:38:68:32:34:75:b4:7b:
b2:21:95:48:89:1f:74:19:2c:62:40:2e:f4:5d:14:
59:d3:87:ee:4b:3f:48:88:6c:9f:29:2c:b8:76:92:
03:ad:74:fd:bf:70:b2:05:b8:13:2c:69:23:a6:89:
91:36:c9:75:60:88:7c:08:3a:64:6d:51:93:96:ad:
82:20:1f:0b:1f:31:d8:df:0a:d3:68:9f:55:dd:d0:
27:83:b0:39:ac:de:98:73:14:56:5a:e4:12:73:69:
dc:41:d8:d2:5a:1a:d0:fe:fd:41:b8:e0:8c:7e:8b:
6a:93:2b:06:c9:89:22:76:dd:99:14:8c:7d:a3:de:
47:d6:1b:fa:46:b5:82:e4:7c:35:76:3c:ad:b6:2c:
1a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:40:76:3F:CE:7C:26:44:D5:59:8E:D8:54:47:FB:11:75:84:23:84
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:38:27:23:17:e6:7d:49:85:cc:92:f6:8b:7c:7e:67:3c:55:
d8:cc:9d:31:47:ab:4b:97:97:c0:c4:86:1f:19:e8:35:da:6f:
3c:ec:c1:7b:68:2a:fa:05:83:51:df:70:8b:37:35:6c:db:1f:
ab:61:ad:19:d9:fe:0e:6e:4b:f7:e8:5e:e5:3a:b1:64:eb:fe:
55:7d:7b:f9:2b:07:75:5e:a4:24:7f:9e:7e:b5:0e:6c:22:07:
ce:64:9a:ac:6b:d0:85:ed:a0:a3:f9:b7:7a:03:c8:9d:8d:03:
d1:37:db:6e:13:2e:d3:90:33:bb:31:08:81:22:22:77:c8:ac:
fd:26:f9:30:20:c8:e9:ec:c8:cb:7e:55:70:89:32:b0:87:d3:
08:6f:f9:2b:c5:51:89:d8:9c:bc:bd:f6:eb:d6:9b:1b:ed:9c:
40:94:a7:c0:db:1e:75:9a:54:07:9a:5a:eb:0b:89:87:0f:1d:
e2:8e:74:ef:c6:55:37:d6:9a:c4:13:30:aa:71:d4:27:ad:12:
a6:07:6f:e1:8c:57:a1:a8:f5:20:45:b6:1a:b8:33:7e:df:99:
da:ff:58:3e:02:66:e1:4d:27:3a:08:19:aa:92:88:f1:3b:f4:
67:cc:ff:56:fa:47:ad:85:1b:aa:98:27:3b:1b:7a:dc:5f:97:
53:56:26:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctM+fYb+9MqIDZzKXP/y5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzQwZDcwMTYwZjMwODY0MjEyOWExYjcyYWU1YWU1MmRi
ODgzYzQwHhcNMjYwNTEyMTUwMTExWhcNMjYwNTEzMTUwMTExWjAzMTEwLwYDVQQD
Eyg0MjQwNzYzZmNlN2MyNjQ0ZDU1OThlZDg1NDQ3ZmIxMTc1ODQyMzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ccvjbGnHh8dwDAZ2JXH6Wps8oDx
+ek9f/xxvpf7MvdRTreBwZQ04i5hQZB+o1CUBUSTJqAyGfFzKAHCRkIgFfA0ZylA
u13wFzo+Fc8Bj1T8amBJjRZEvseWi/0+BphA5iQANJACVcHKHP/i+P4mfThoMjR1
tHuyIZVIiR90GSxiQC70XRRZ04fuSz9IiGyfKSy4dpIDrXT9v3CyBbgTLGkjpomR
Nsl1YIh8CDpkbVGTlq2CIB8LHzHY3wrTaJ9V3dAng7A5rN6YcxRWWuQSc2ncQdjS
WhrQ/v1BuOCMfotqkysGyYkidt2ZFIx9o95H1hv6RrWC5Hw1djyttiwaBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJAdj/OfCZE1VmO2FRH+xF1hCOEMB8GA1UdIwQY
MBaAFAfEDXAWDzCGQhKaG3KuWuUtuIPEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUt
OTdkY2JiMDA4NmUzLzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9lMTE2YzItOGY4Mi00Y2JhLWI1YWUtOTdkY2JiMDA4NmUz
LzEvQjhRTmNCWVBNSVpDRXBvYmNxNWE1UzI0ZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzgnIxfm
fUmFzJL2i3x+ZzxV2MydMUerS5eXwMSGHxnoNdpvPOzBe2gq+gWDUd9wizc1bNsf
q2GtGdn+Dm5L9+he5TqxZOv+VX17+SsHdV6kJH+efrUObCIHzmSarGvQhe2go/m3
egPInY0D0TfbbhMu05AzuzEIgSIid8is/Sb5MCDI6ezIy35VcIkysIfTCG/5K8VR
idicvL3269abG+2cQJSnwNsedZpUB5pa6wuJhw8d4o5078ZVN9aaxBMwqnHUJ60S
pgdv4YxXoaj1IEW2Grgzft+Z2v9YPgJm4U0nOggZqpKI8Tv0Z8z/VvpHrYUbqpgn
Oxt63F+XU1YmMg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:55:23 2026 by rpki-client