Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
File: B8n9CgjdBL-Yalvahugx34BI8q4.mft (raw, json)
Hash identifier: v00yEs1tKX1h/xtjedBMRiQxfpUFFI3RD4x/NCEC2aI=
Subject key identifier: 30:98:04:D2:8F:84:2B:EB:FB:9F:28:A7:D9:D2:25:FD:F6:A1:5A:E0
Authority key identifier: 07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
Certificate issuer: /CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Certificate serial: 01A0D45DAD98143A2C7CAA02B2468763DE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
Manifest number: 1A6F
Signing time: Thu 24 Sep 2026 17:01:44 +0000
Manifest this update: Thu 24 Sep 2026 17:01:44 +0000
Manifest next update: Fri 25 Sep 2026 17:01:44 +0000
Files and hashes: 1: 1-xRGaCyxpLa6u8HMSUq_h770gD0.roa (hash: 8uRfxkLyO0BWin82mTedgqRyj+vQcxTq42ILakeqyaU=)
2: B8n9CgjdBL-Yalvahugx34BI8q4.crl (hash: VB5hNMZcyVkptKvyFEVvG2ULvOhZTfe4+Fp78qtZojg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:ad:98:14:3a:2c:7c:aa:02:b2:46:87:63:de:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9fd0a08dd04bf986a5bda86e831df8048f2ae
Validity
Not Before: Sep 24 17:01:44 2026 GMT
Not After : Sep 25 17:01:44 2026 GMT
Subject: CN=309804d28f842bebfb9f28a7d9d225fdf6a15ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:35:d1:5b:60:48:4d:51:20:72:e4:ff:e6:
4e:4c:73:dd:0b:ad:12:b8:03:d1:9b:76:32:0b:9b:
79:ed:0f:f0:24:44:90:61:5a:a4:23:59:a3:4a:3e:
0a:2c:d4:f5:db:75:81:aa:60:5c:c8:ec:75:a7:33:
46:a9:4e:2e:5d:b7:89:69:14:59:04:1b:d5:a8:ab:
b6:4e:f8:96:9d:61:58:9c:b2:6d:de:35:ef:48:08:
b0:4e:3e:46:8e:ad:56:8d:a7:39:c7:db:45:a9:14:
26:7b:be:0b:10:e4:8a:3c:d7:7d:80:ef:1e:ae:d8:
b7:33:9f:87:98:35:4c:8e:03:c9:4e:92:11:ac:50:
65:37:31:4b:34:83:33:6a:64:e7:5a:6b:c1:e2:89:
bc:b2:b4:1f:05:8b:84:a1:24:a4:fb:ec:82:57:1a:
ce:34:0f:28:3d:44:c9:c8:42:e4:41:31:83:78:be:
87:09:bc:89:78:38:ff:8e:72:15:ed:80:6b:1e:61:
fd:8e:bb:c9:4f:8a:b3:1b:58:c3:27:50:80:1c:62:
34:3d:5a:26:51:0d:c9:28:3f:ad:7f:75:76:16:8a:
c2:e5:ae:f5:aa:3c:e8:80:7c:b8:20:ff:a8:ec:75:
b8:ac:b9:b8:94:42:81:f7:f4:39:81:83:e0:01:05:
70:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:98:04:D2:8F:84:2B:EB:FB:9F:28:A7:D9:D2:25:FD:F6:A1:5A:E0
X509v3 Authority Key Identifier:
keyid:07:C9:FD:0A:08:DD:04:BF:98:6A:5B:DA:86:E8:31:DF:80:48:F2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8n9CgjdBL-Yalvahugx34BI8q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2376c5-1008-4c8e-a27a-de8a4f0aa956/1/B8n9CgjdBL-Yalvahugx34BI8q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a7:6f:1b:11:4d:c4:16:71:dd:88:a9:ac:18:9d:cc:d2:53:
9a:e7:98:49:f1:ec:82:df:ee:34:c2:06:bb:0d:ad:d8:97:3a:
3f:e8:12:c5:6a:ff:dc:b4:c2:01:bb:73:1b:8f:c5:18:96:f2:
b4:43:19:70:c4:83:18:b5:f0:d9:bd:c9:63:74:a7:40:f5:9a:
59:31:cb:d7:3d:c2:03:c0:11:ad:a1:de:ca:be:85:3c:e9:51:
1e:83:7c:c9:aa:cd:05:d6:9c:07:a2:43:30:2e:81:12:77:51:
98:2c:29:28:af:2d:a8:d0:cc:04:c6:a7:a3:f9:a5:da:f4:e5:
e7:ee:ce:d4:06:db:eb:02:9f:64:e7:5b:4e:f5:75:13:48:f0:
ae:fb:1d:1d:91:01:73:c6:9e:cc:fd:fb:bc:2f:bd:6b:59:52:
fa:3e:50:f4:e6:74:c8:71:32:e2:22:e4:ca:63:b7:7e:f1:eb:
e0:e6:c9:99:cc:39:58:56:74:09:84:04:67:c6:fc:f3:25:5f:
3a:b4:1a:02:a8:07:64:98:00:97:c8:e2:69:04:33:e0:fa:92:
b9:ac:3e:81:d3:f6:f1:2f:a7:55:27:d2:af:12:0d:80:f9:d7:
b3:ea:e0:85:72:de:34:60:62:99:6e:55:02:58:09:a7:9b:79:
3e:ac:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:13:42 2026 by rpki-client