Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
File: B8n9CgjdBL-Yalvahugx34BI8q4.mft (raw, json)
Hash identifier: jzBAkV643xut0InOd7mMVqA+Yf+T1d/3cIVrzG+CscM=
Subject key identifier: 75:DF:85:43:DF:BD:99:DF:19:21:FB:6B:41:43:4A:B5:C9:DA:D4:EA
Authority key identifier: 07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
Certificate issuer: /CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Certificate serial: 019D29CE2B759F347428B0C36297D04B3CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 11:01:10 +0000
Manifest this update: Thu 26 Mar 2026 11:01:10 +0000
Manifest next update: Fri 27 Mar 2026 11:01:10 +0000
Files and hashes: 1: 1-xRGaCyxpLa6u8HMSUq_h770gD0.roa (hash: 8uRfxkLyO0BWin82mTedgqRyj+vQcxTq42ILakeqyaU=)
2: B8n9CgjdBL-Yalvahugx34BI8q4.crl (hash: pK8NoEZLi7QvsulHLOEniC4SxKTcmmUjqlfwxfxyANs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:2b:75:9f:34:74:28:b0:c3:62:97:d0:4b:3c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Validity
Not Before: Mar 26 11:01:10 2026 GMT
Not After : Mar 27 11:01:10 2026 GMT
Subject: CN=75df8543dfbd99df1921fb6b41434ab5c9dad4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:a9:0b:36:93:e4:ff:05:2c:45:a8:53:2a:
81:38:e7:f4:29:5d:7d:4f:9f:4a:1b:e1:e3:f9:6d:
42:1d:0a:68:cc:41:28:ff:54:e9:94:c5:49:05:9d:
80:ee:71:54:19:94:da:49:f1:d9:a4:bd:b3:11:5c:
20:22:5b:97:08:24:fa:73:21:43:03:3f:8e:16:f9:
6f:8d:33:e1:48:7b:74:04:4a:12:69:b5:2f:4c:2d:
f2:1b:8a:d1:09:98:a5:14:05:e8:1e:f3:92:85:c4:
ea:1b:59:03:69:4e:00:7d:cc:6c:65:b4:a0:42:e2:
e8:4b:7f:70:b3:a6:15:d0:5b:cb:91:53:91:7f:1c:
74:8c:2d:4d:51:31:c4:d6:96:ef:57:4b:c1:40:e7:
29:9a:40:7d:50:83:3c:06:c8:b8:4d:13:ee:3c:e3:
e2:3d:79:eb:04:29:19:d4:fd:9d:e8:03:ef:38:59:
9c:f8:07:bb:16:e9:be:9c:78:4a:49:18:c2:35:3c:
b9:4b:c3:7e:e6:d3:29:b4:00:4c:5b:3f:12:86:01:
03:6c:e3:e8:9b:36:c7:7a:4d:6e:1a:c5:12:06:e7:
58:c7:c5:4b:7d:95:4c:15:85:2f:05:21:3e:d0:df:
a3:b4:6a:3e:6e:77:2b:9d:f7:c0:80:20:71:db:d8:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DF:85:43:DF:BD:99:DF:19:21:FB:6B:41:43:4A:B5:C9:DA:D4:EA
X509v3 Authority Key Identifier:
keyid:07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:cf:d4:e9:2f:d0:95:de:02:67:48:14:63:01:20:a7:01:a6:
f0:8b:f2:64:48:a7:64:d7:19:f2:7e:d6:d6:5e:87:4e:21:98:
ee:28:1a:fb:58:99:a3:16:7c:40:2c:81:ce:98:1f:c3:45:6d:
7b:60:7b:51:d5:7f:f4:06:1a:92:4a:8c:8b:e6:c0:8c:dc:24:
dd:1e:90:cd:55:47:27:61:4f:ee:bb:98:3e:47:13:c4:9e:65:
b8:35:ad:43:1d:4c:28:dc:8a:79:3a:69:f9:66:6b:76:4f:ab:
5d:99:c6:7f:7e:18:71:23:43:bb:55:e3:c5:90:4e:c9:be:d9:
d9:91:9f:2f:db:74:04:bb:7c:b2:2b:5f:8e:6e:33:46:5d:51:
36:b9:93:59:b6:7b:22:2a:de:70:3a:c7:37:ba:e1:27:88:bc:
23:43:3e:83:2e:a9:d5:7f:98:d0:59:da:67:a4:c3:65:52:98:
c2:30:57:23:12:c6:af:85:1a:1b:0d:ad:76:ee:e4:80:1d:98:
55:18:06:66:13:f9:27:43:12:6b:a7:a1:a5:43:5f:75:7f:2a:
21:b5:90:f5:05:20:e0:93:2c:66:09:af:16:de:60:eb:d5:e1:
57:3f:7e:17:6c:5b:45:ab:f1:09:0d:51:eb:f1:cf:d4:a5:d2:
29:01:a6:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pzit1nzR0KLDDYpfQSzzXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzlmZDBhMDhkZDA0YmY5ODZhNWJkYTg2ZTgzMWRmODA0
OGYyYWUwHhcNMjYwMzI2MTEwMTEwWhcNMjYwMzI3MTEwMTEwWjAzMTEwLwYDVQQD
Eyg3NWRmODU0M2RmYmQ5OWRmMTkyMWZiNmI0MTQzNGFiNWM5ZGFkNGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTipCzaT5P8FLEWoUyqBOOf0KV19
T59KG+Hj+W1CHQpozEEo/1TplMVJBZ2A7nFUGZTaSfHZpL2zEVwgIluXCCT6cyFD
Az+OFvlvjTPhSHt0BEoSabUvTC3yG4rRCZilFAXoHvOShcTqG1kDaU4AfcxsZbSg
QuLoS39ws6YV0FvLkVORfxx0jC1NUTHE1pbvV0vBQOcpmkB9UIM8Bsi4TRPuPOPi
PXnrBCkZ1P2d6APvOFmc+Ae7Fum+nHhKSRjCNTy5S8N+5tMptABMWz8ShgEDbOPo
mzbHek1uGsUSBudYx8VLfZVMFYUvBSE+0N+jtGo+bncrnffAgCBx29iXHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXfhUPfvZnfGSH7a0FDSrXJ2tTqMB8GA1UdIwQY
MBaAFAfJ/QoI3QS/mGpb2oboMd+ASPKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhuOUNnamRCTC1ZYWx2YWh1Z3gzNEJJOHE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yMzc2YzUtMTAwOC00YzhlLWEyN2Et
ZGU4YTRmMGFhOTU2LzEvQjhuOUNnamRCTC1ZYWx2YWh1Z3gzNEJJOHE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8yMzc2YzUtMTAwOC00YzhlLWEyN2EtZGU4YTRmMGFhOTU2
LzEvQjhuOUNnamRCTC1ZYWx2YWh1Z3gzNEJJOHE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwM/U6S/Q
ld4CZ0gUYwEgpwGm8IvyZEinZNcZ8n7W1l6HTiGY7iga+1iZoxZ8QCyBzpgfw0Vt
e2B7UdV/9AYakkqMi+bAjNwk3R6QzVVHJ2FP7ruYPkcTxJ5luDWtQx1MKNyKeTpp
+WZrdk+rXZnGf34YcSNDu1XjxZBOyb7Z2ZGfL9t0BLt8sitfjm4zRl1RNrmTWbZ7
IirecDrHN7rhJ4i8I0M+gy6p1X+Y0FnaZ6TDZVKYwjBXIxLGr4UaGw2tdu7kgB2Y
VRgGZhP5J0MSa6ehpUNfdX8qIbWQ9QUg4JMsZgmvFt5g69XhVz9+F2xbRavxCQ1R
6/HP1KXSKQGmsw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:26:54 2026 by rpki-client