
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier: Up3e6pB/dVRGqQNrSMLSiw2JlW1h2+e2rXHSw8ajM78=
Subject key identifier: 69:FC:79:74:9A:A5:DE:21:4E:33:44:F5:74:7D:1D:CC:53:42:6D:AA
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 01A0CC35241506F86791C81C4D9322AEEE95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number: 1328
Signing time: Wed 23 Sep 2026 03:00:29 +0000
Manifest this update: Wed 23 Sep 2026 03:00:29 +0000
Manifest next update: Thu 24 Sep 2026 03:00:29 +0000
Files and hashes: 1: 7ctM-nfqVD_f5N8yCIgCf9_quM4.roa (hash: wja6n3HaPhEfG0qesMSoRitaVxtS1y7cOYduGiD52SU=)
2: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: d3VoWyQzvxWYs4JP3bnL5K69G5b1qEuLEju0u0jp+Ds=)
3: CdGW6i18Yr035U0dUT-j8WcoJNo.roa (hash: Rxp+OcdpmAsKNqBYYDsjZgGcVdgHuz2oel8FBpzkdoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:35:24:15:06:f8:67:91:c8:1c:4d:93:22:ae:ee:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: Sep 23 03:00:29 2026 GMT
Not After : Sep 24 03:00:29 2026 GMT
Subject: CN=69fc79749aa5de214e3344f5747d1dcc53426daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:2c:1c:a7:a0:c1:89:03:13:ad:4b:ba:da:
cf:30:ea:89:b8:68:c3:7c:b5:92:3c:bd:3b:d8:f2:
23:02:6b:31:6b:12:e6:7a:91:0f:ca:e5:64:32:7d:
2e:80:98:2b:42:30:92:0e:a4:3e:61:6a:fd:94:dc:
33:60:cb:94:c8:69:bd:7f:ff:21:5d:ec:41:71:ab:
d9:c5:1f:47:be:1e:c3:49:42:cd:77:47:f8:dd:79:
04:85:25:de:fa:93:da:3b:38:b1:2d:14:88:fa:7e:
4b:ea:1e:ad:db:41:11:ad:04:c1:7e:a1:bd:32:59:
87:e3:dc:25:12:42:eb:90:ad:5a:27:be:00:15:f5:
1e:4b:d5:94:c2:73:96:4e:43:eb:87:30:39:91:8c:
93:35:d5:34:25:33:ab:05:3d:f6:e5:b6:e0:8f:91:
62:f7:5c:b2:6b:7f:7c:87:42:60:82:8a:0c:ac:7f:
42:c8:a6:d9:97:a9:2a:f7:01:07:76:65:11:e2:91:
cb:a2:5e:98:07:45:16:13:0c:c8:6c:05:72:5e:05:
a7:7c:71:c8:97:a5:67:9c:6d:1f:76:0e:48:59:22:
31:cc:b8:11:f1:f0:f9:db:d6:8d:de:cc:61:68:71:
37:bc:19:a9:28:7e:d4:4e:44:ba:3c:83:b3:40:80:
20:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FC:79:74:9A:A5:DE:21:4E:33:44:F5:74:7D:1D:CC:53:42:6D:AA
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bd:78:8f:61:c6:39:45:c2:98:0b:bf:10:50:09:d9:de:d1:
62:26:91:08:69:1a:b7:0e:01:fe:e7:03:99:b4:c0:46:a0:74:
80:09:e1:d7:9a:f5:07:f4:a3:a5:e7:3b:78:49:6a:4d:2d:65:
86:98:a4:c8:a5:b1:f5:9d:d5:ca:a0:11:33:7d:13:5a:09:1e:
7b:f9:72:ca:35:be:a8:d5:9a:76:f7:c6:c9:47:d2:ad:4c:19:
5a:f8:0c:22:22:29:5a:9c:e4:b1:03:2f:0d:5b:ae:0a:71:e5:
d4:34:6f:be:7d:85:64:c0:12:76:db:3d:f7:7f:1b:8f:37:af:
e7:8f:e2:01:1f:1c:22:4e:14:82:e7:d8:33:5b:ca:bd:80:c3:
20:bd:55:66:69:46:6e:80:8b:77:45:8f:9f:76:34:c0:aa:c4:
af:24:b2:9b:81:fe:3c:1d:2c:1f:ac:de:75:6f:43:94:74:c7:
6e:87:25:8b:07:ef:9d:48:e0:49:28:2a:ee:ee:a0:d9:b1:31:
29:30:95:fb:f6:1c:3f:3b:83:51:42:16:bb:86:24:bd:0a:8f:
8e:ca:d8:40:4f:e5:88:14:dc:71:b0:04:47:2c:90:67:ed:14:
1f:60:74:61:26:63:46:1b:d3:b8:d7:65:1e:da:52:7a:83:aa:
6e:c2:78:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:01:46 2026 by rpki-client