Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
File: B8QNcBYPMIZCEpobcq5a5S24g8Q.mft (raw, json)
Hash identifier: L1i8oR1XP8r6Yk8nJszX4xU547waRkOYz3xFKwCS1AI=
Subject key identifier: B2:22:76:D6:62:B0:7D:B3:92:30:FB:87:CD:9B:CA:3F:B7:5C:7F:4E
Authority key identifier: 07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
Certificate issuer: /CN=07c40d70160f308642129a1b72ae5ae52db883c4
Certificate serial: 019D2583BDCF3B0EC746410714235855BE49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
Manifest number: 1144
Signing time: Wed 25 Mar 2026 15:01:23 +0000
Manifest this update: Wed 25 Mar 2026 15:01:23 +0000
Manifest next update: Thu 26 Mar 2026 15:01:23 +0000
Files and hashes: 1: 7ctM-nfqVD_f5N8yCIgCf9_quM4.roa (hash: wja6n3HaPhEfG0qesMSoRitaVxtS1y7cOYduGiD52SU=)
2: B8QNcBYPMIZCEpobcq5a5S24g8Q.crl (hash: fBKb8lqSqehIlzmBSxZM7V2PPyI+ay6OT6IdQ5be7y8=)
3: CdGW6i18Yr035U0dUT-j8WcoJNo.roa (hash: Rxp+OcdpmAsKNqBYYDsjZgGcVdgHuz2oel8FBpzkdoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:bd:cf:3b:0e:c7:46:41:07:14:23:58:55:be:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c40d70160f308642129a1b72ae5ae52db883c4
Validity
Not Before: Mar 25 15:01:23 2026 GMT
Not After : Mar 26 15:01:23 2026 GMT
Subject: CN=b22276d662b07db39230fb87cd9bca3fb75c7f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fe:ec:f4:66:66:85:db:6f:17:b7:6e:75:39:
0d:52:76:7b:55:9b:1e:c2:fa:59:29:ed:4a:ea:03:
48:cd:e2:2a:7b:16:90:2c:f5:b3:c5:d8:a2:c7:0a:
8b:35:03:6f:e0:36:46:e1:6a:8e:f9:7f:ad:3e:c4:
5f:3f:63:4f:82:e9:9b:76:30:2b:30:87:7b:68:20:
3f:d2:eb:88:35:59:d7:82:fe:ae:cc:42:fd:d0:99:
60:17:a8:1f:08:88:f8:60:4a:69:64:fa:e0:05:96:
8f:e5:67:c9:9b:73:fc:4c:a5:59:62:ca:39:05:f6:
7f:9f:8e:a1:7c:50:e9:bb:b1:73:73:e3:c1:b7:7b:
a8:46:d4:be:a1:d8:3a:b2:eb:7b:07:b3:e9:3d:17:
a8:ad:e7:ab:df:e9:47:e0:46:53:d9:0f:5a:fc:93:
db:af:f7:d8:30:07:27:4f:d4:c4:79:28:13:34:ea:
7f:6d:99:bc:66:31:c0:5c:ef:42:45:44:35:ea:4d:
42:93:38:f6:a1:64:15:54:fa:34:8a:13:4c:cd:04:
5d:22:2c:6c:89:51:24:03:c2:3f:21:d7:69:0c:6a:
55:ba:82:c0:71:fc:25:2d:ba:13:18:d1:a5:66:88:
ec:5a:61:2c:76:5b:53:84:58:43:fe:e8:7a:e1:d0:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:22:76:D6:62:B0:7D:B3:92:30:FB:87:CD:9B:CA:3F:B7:5C:7F:4E
X509v3 Authority Key Identifier:
keyid:07:C4:0D:70:16:0F:30:86:42:12:9A:1B:72:AE:5A:E5:2D:B8:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8QNcBYPMIZCEpobcq5a5S24g8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e116c2-8f82-4cba-b5ae-97dcbb0086e3/1/B8QNcBYPMIZCEpobcq5a5S24g8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:35:e3:3b:e7:67:25:d7:ce:2c:86:61:e7:2d:90:65:89:1b:
4e:8e:dd:35:a3:cf:47:62:e1:21:8e:b8:f5:72:e7:42:2d:f7:
5e:ba:af:e5:33:1f:09:2f:df:9c:0b:a6:2f:bd:a9:f9:ea:f9:
9f:16:61:7e:03:8d:f2:88:58:b0:ff:a9:9b:fb:b0:a4:0f:01:
99:0c:cc:8c:a1:22:ea:d0:36:b1:00:bb:b1:d7:54:a7:7c:a4:
0b:b8:c9:98:c5:02:07:5b:8d:f5:f2:1d:7d:b3:92:21:43:90:
73:a7:31:46:44:a9:16:20:29:35:8c:3a:61:7f:c7:81:9f:48:
64:ac:05:57:01:1e:35:f1:47:88:ae:03:99:15:a6:1f:96:41:
d1:4c:8a:4a:94:46:09:51:55:ab:e7:02:82:f5:f5:59:5f:6d:
a5:81:a9:8e:8b:a7:f9:72:d7:3f:96:e2:ba:57:1a:71:9e:ee:
28:4e:64:85:b4:ec:1b:53:dc:5d:41:2d:0d:62:d0:28:9b:4b:
07:b9:80:61:cf:06:b1:1d:19:9d:54:e1:be:58:93:95:67:4c:
7b:bd:4b:80:30:da:6a:ef:10:bc:ef:59:58:da:5f:e0:fa:98:
1b:8c:4b:84:33:cc:0e:18:ed:31:42:5e:2f:11:b0:d6:6f:f3:
8f:5c:ca:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:07 2026 by rpki-client