Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: lM5y270b0XqYgU/UG9hRxmF/ock+jZCMilXGD/EWBdk=
Subject key identifier: 56:83:4F:46:2E:92:E4:1D:31:FF:94:F5:87:C2:A3:50:9B:C1:E1:95
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 019CAAC6435683A75FEC53EE3E6EC240184E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0EED
Signing time: Sun 01 Mar 2026 19:00:45 +0000
Manifest this update: Sun 01 Mar 2026 19:00:45 +0000
Manifest next update: Mon 02 Mar 2026 19:00:45 +0000
Files and hashes: 1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=)
2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: ytiOKoOB3U3pV2cvwkPo5wGQ6SYdAfU1yp4oqwpYV8g=)
3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:43:56:83:a7:5f:ec:53:ee:3e:6e:c2:40:18:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Mar 1 19:00:45 2026 GMT
Not After : Mar 2 19:00:45 2026 GMT
Subject: CN=56834f462e92e41d31ff94f587c2a3509bc1e195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:66:38:75:d0:c5:df:98:19:1e:d0:13:06:70:
e6:cd:18:49:a0:5d:a6:f2:05:81:f5:05:0c:cd:35:
86:c5:de:e4:ec:73:49:31:a5:c1:5a:37:47:5a:75:
0a:3d:4d:42:de:14:36:38:f2:3b:96:c0:c7:46:e8:
af:3c:bc:7b:2d:43:be:f4:79:3d:d7:85:9c:d4:86:
70:da:3c:7c:c8:55:76:fa:e6:7c:91:da:49:b8:03:
98:82:71:c8:4a:ca:21:56:cf:3c:69:0c:aa:03:19:
76:83:34:d8:e4:14:f0:da:bd:ab:a9:eb:14:d6:40:
cc:7c:4c:9a:8e:0b:83:f6:25:47:fc:76:85:ce:6b:
f1:81:85:2b:67:2f:bb:6b:f6:7c:95:d3:d7:c5:90:
eb:fa:6c:80:a5:74:38:bb:4a:73:28:14:42:c0:d8:
57:00:02:c1:af:39:72:a8:aa:a3:c2:4d:40:08:80:
23:2d:11:46:33:5e:82:0a:08:4b:46:a0:ad:3f:c4:
c7:1d:36:19:f4:a9:02:c4:86:09:c1:ce:84:71:a6:
f6:d3:6e:4b:15:ce:2c:46:b3:5e:77:85:b5:8c:80:
b7:11:0a:68:02:f1:ae:f0:d1:67:9f:49:92:94:05:
b0:27:c2:dc:96:12:51:ed:04:d0:f0:e7:f2:e3:3c:
60:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:83:4F:46:2E:92:E4:1D:31:FF:94:F5:87:C2:A3:50:9B:C1:E1:95
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:da:31:a5:61:ef:78:85:09:9f:e7:69:07:67:2f:c0:cb:39:
08:2e:fe:e7:70:5f:35:e4:53:fb:81:bc:f1:c4:5a:46:5e:73:
d4:ee:81:e6:ff:fc:0a:fc:7a:dc:8b:ec:b8:4a:6d:76:b0:dc:
8a:b3:e6:bd:14:d7:17:dc:29:b0:d8:41:bb:1f:6d:9f:8e:8b:
1f:2c:8d:c0:c4:62:ef:22:28:4b:52:d7:b4:3a:ef:29:60:6c:
7b:d6:cf:9e:88:0b:87:00:47:56:4f:37:07:e9:56:33:cf:01:
4a:bd:68:fd:f2:58:cc:b1:09:43:41:37:6c:d8:9e:cd:46:1a:
c3:0f:f3:e3:5d:22:68:f8:bd:9f:c9:d9:bc:df:59:c3:00:c9:
51:87:6f:6c:a1:2c:6e:ea:4e:3d:c3:a1:12:34:52:07:25:c7:
fe:39:98:4b:df:cb:32:5e:25:d6:0d:1c:9e:3b:d7:47:89:7b:
e5:dd:d6:ac:30:da:d3:21:37:c4:4e:96:7a:40:c7:34:ac:9b:
4d:04:f1:c1:8e:6a:18:2f:42:75:73:62:ca:77:f6:56:03:0b:
00:bc:ec:4d:45:3a:5e:0e:4f:b1:f2:9d:1f:ac:ab:50:5b:52:
39:71:df:c6:0b:d0:db:a9:10:c5:ff:03:12:d4:b0:1b:3a:da:
cb:4c:9a:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxkNWg6df7FPuPm7CQBhOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzE4MjQ3YTUzMjY0NzNhYmM5NmY1YTEwNzFkMTU5YzFl
YjdlY2QwHhcNMjYwMzAxMTkwMDQ1WhcNMjYwMzAyMTkwMDQ1WjAzMTEwLwYDVQQD
Eyg1NjgzNGY0NjJlOTJlNDFkMzFmZjk0ZjU4N2MyYTM1MDliYzFlMTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2Y4ddDF35gZHtATBnDmzRhJoF2m
8gWB9QUMzTWGxd7k7HNJMaXBWjdHWnUKPU1C3hQ2OPI7lsDHRuivPLx7LUO+9Hk9
14Wc1IZw2jx8yFV2+uZ8kdpJuAOYgnHISsohVs88aQyqAxl2gzTY5BTw2r2rqesU
1kDMfEyajguD9iVH/HaFzmvxgYUrZy+7a/Z8ldPXxZDr+myApXQ4u0pzKBRCwNhX
AALBrzlyqKqjwk1ACIAjLRFGM16CCghLRqCtP8THHTYZ9KkCxIYJwc6Ecab2025L
Fc4sRrNed4W1jIC3EQpoAvGu8NFnn0mSlAWwJ8LclhJR7QTQ8Ofy4zxg9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaDT0YukuQdMf+U9YfCo1CbweGVMB8GA1UdIwQY
MBaAFAfBgkelMmRzq8lvWhBx0VnB637NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEt
M2E1NzE4YjQxZjdiLzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEtM2E1NzE4YjQxZjdi
LzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9oxpWHv
eIUJn+dpB2cvwMs5CC7+53BfNeRT+4G88cRaRl5z1O6B5v/8Cvx63IvsuEptdrDc
irPmvRTXF9wpsNhBux9tn46LHyyNwMRi7yIoS1LXtDrvKWBse9bPnogLhwBHVk83
B+lWM88BSr1o/fJYzLEJQ0E3bNiezUYaww/z410iaPi9n8nZvN9ZwwDJUYdvbKEs
bupOPcOhEjRSByXH/jmYS9/LMl4l1g0cnjvXR4l75d3WrDDa0yE3xE6WekDHNKyb
TQTxwY5qGC9CdXNiynf2VgMLALzsTUU6Xg5PsfKdH6yrUFtSOXHfxgvQ26kQxf8D
EtSwGzray0yaLA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:13:14 2026 by rpki-client