Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
File: B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json)
Hash identifier: GZBHpz0hbqQwWNP/QvUK/D7s61h1LZiXZnfJQnQD3a4=
Subject key identifier: BB:B6:B6:95:6A:FC:5F:42:FC:BB:D1:A8:6D:94:C7:D4:B3:75:98:BF
Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
Certificate issuer: /CN=07c610b2a06db1831854b6726c33090336287415
Certificate serial: 019D2703FB9555267162083CCD0DF7CA2DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 22:01:05 +0000
Manifest this update: Wed 25 Mar 2026 22:01:05 +0000
Manifest next update: Thu 26 Mar 2026 22:01:05 +0000
Files and hashes: 1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: wLNGprPzZa7g9UsjbhQI60GgFrthI5t7jwW4a10WgMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:fb:95:55:26:71:62:08:3c:cd:0d:f7:ca:2d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c610b2a06db1831854b6726c33090336287415
Validity
Not Before: Mar 25 22:01:05 2026 GMT
Not After : Mar 26 22:01:05 2026 GMT
Subject: CN=bbb6b6956afc5f42fcbbd1a86d94c7d4b37598bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:51:a5:6a:09:a8:84:54:b5:19:48:86:69:
40:d9:ca:03:39:3c:7e:6e:e5:16:43:aa:56:8c:68:
e5:ec:28:5e:75:01:67:6b:e2:d0:46:94:61:8b:05:
c2:f9:31:5a:94:ad:7e:11:78:b5:ec:d8:6a:81:2d:
c5:25:2d:5a:8f:f1:c6:e6:c4:0e:9c:20:69:0a:12:
62:2d:b9:bc:40:57:cf:2e:61:87:20:63:38:f8:e6:
26:34:ee:5e:91:d6:e1:06:32:1b:d9:6a:33:1a:46:
e0:98:97:3b:24:7a:2b:7e:0e:e5:b0:80:dd:db:7e:
c5:6a:bc:b8:ee:d0:a4:55:d9:24:99:37:a7:21:de:
c2:e5:f1:f2:3d:70:99:62:c6:28:79:c1:26:37:dd:
6d:50:9d:eb:cd:f6:df:2e:4b:b1:f7:1a:07:35:8d:
4c:b0:5a:08:44:db:61:d7:67:98:4c:20:eb:75:4d:
ee:b0:82:90:a0:25:2c:81:ca:87:7e:33:08:fa:7a:
90:08:e0:8c:b8:ca:ee:56:cf:0b:48:4f:f2:42:1e:
3f:ce:ec:a5:d9:fd:d2:15:d0:29:4e:c1:bb:d9:3e:
4e:c0:22:3a:da:80:39:51:9b:93:5d:dc:09:42:80:
71:bd:93:6e:0e:71:f1:68:e5:ba:ab:21:22:a4:66:
db:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B6:B6:95:6A:FC:5F:42:FC:BB:D1:A8:6D:94:C7:D4:B3:75:98:BF
X509v3 Authority Key Identifier:
keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d2:b6:38:1c:d3:11:4a:25:e5:2c:e2:dc:09:09:60:99:d4:
12:27:a5:ea:bf:37:dc:f4:83:ed:ff:e1:64:a8:9b:fd:98:7c:
02:c6:f5:bd:26:09:5e:25:78:73:eb:43:8a:3a:80:e3:03:e5:
ad:cd:10:fa:16:41:22:04:34:c8:ae:f6:fd:6d:4b:96:40:27:
4b:0f:64:35:ff:90:1f:a9:b6:de:a8:d0:3e:4a:63:cd:20:17:
5f:37:4b:41:e9:82:01:a8:41:6c:1d:47:62:b5:ea:d8:83:c0:
81:74:b9:f7:95:80:b9:29:c5:7f:49:dc:fd:ec:8a:c0:0f:c1:
7e:76:3e:55:31:4b:16:6d:09:88:e5:7d:c1:ae:d7:a1:61:9d:
73:f2:ac:13:8e:1d:4b:0f:86:ad:0d:cb:c4:28:a3:77:ee:59:
1a:a3:07:5a:56:39:f3:73:07:d2:88:46:2d:71:45:bd:c2:5a:
e4:bc:89:78:f7:cf:b0:8a:fc:ae:8f:4c:63:0a:55:19:98:bc:
94:41:40:61:12:f0:43:b8:12:8c:e1:a7:41:08:a4:4a:16:93:
e0:4c:b2:0c:48:8a:47:ed:b7:e2:90:47:c4:61:a0:1f:f7:61:
0c:5a:90:c5:7a:ad:7a:e6:a9:9f:a3:54:aa:32:63:f5:92:1a:
8c:34:ff:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:17 2026 by rpki-client