Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: PSaIa65FAmUPzMm6VHiVOcpzez80q2M9RqVbimolX5U=
Subject key identifier: D3:F9:D9:69:58:78:C5:5D:11:17:A9:98:EA:08:BF:A0:1D:20:79:9E
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 019FAD5214A0ECE4DA88A126222D5F565167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 107C
Signing time: Wed 29 Jul 2026 10:01:05 +0000
Manifest this update: Wed 29 Jul 2026 10:01:05 +0000
Manifest next update: Thu 30 Jul 2026 10:01:05 +0000
Files and hashes: 1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=)
2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: QL9kzLF5yP0oPjgaXH4K61uChWoJ2it6tD0bEz0uS+k=)
3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:14:a0:ec:e4:da:88:a1:26:22:2d:5f:56:51:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Jul 29 10:01:05 2026 GMT
Not After : Jul 30 10:01:05 2026 GMT
Subject: CN=d3f9d9695878c55d1117a998ea08bfa01d20799e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:01:98:ba:6d:4d:1a:a2:37:1f:1e:45:fc:
6e:a8:33:4d:a8:14:c8:a9:db:2c:b0:9b:b2:d2:46:
b8:05:55:df:e5:53:b5:59:c3:37:69:85:7a:96:52:
01:b2:a7:fa:12:09:e4:51:9e:ca:ac:e0:77:14:e7:
f7:40:e4:39:22:ad:7c:e4:96:de:92:2b:6e:7d:91:
8a:06:70:f1:38:2b:ce:d9:c7:9b:cd:6b:0c:79:67:
dc:d8:b6:db:7c:14:95:a2:2e:51:85:9e:35:6a:38:
3f:c3:de:07:f3:1e:3a:3c:14:f7:81:b0:e7:80:d7:
d9:d0:a6:cf:26:96:23:8f:3d:ab:90:c6:28:b6:83:
c0:8f:c7:e4:5a:8b:e1:9c:70:79:ad:b5:d5:3f:a0:
c8:db:03:4c:30:ac:78:52:83:c3:8f:72:af:ad:5f:
be:93:24:a8:e5:c6:b3:f7:7d:9c:e0:80:40:61:a2:
9a:ae:81:dd:18:30:11:3d:49:5b:d2:0f:64:45:f7:
0a:63:7a:73:da:58:ed:87:8f:cc:6a:fe:88:c1:ac:
cb:3c:39:65:4c:4d:db:65:34:57:36:1c:10:ef:f1:
e4:07:fb:5c:09:54:3d:d4:e3:f7:c0:5a:77:89:6b:
4d:88:91:ef:85:3b:d1:aa:e7:50:de:42:74:25:75:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F9:D9:69:58:78:C5:5D:11:17:A9:98:EA:08:BF:A0:1D:20:79:9E
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ad:0a:7f:69:ba:85:e5:c6:0a:ca:8e:f9:94:16:5f:c7:f1:
53:af:9d:28:1e:76:c0:79:63:d3:99:51:99:fb:b1:bc:78:37:
e3:80:01:8b:67:c3:eb:7c:45:2f:14:d0:84:de:04:ad:8f:43:
1d:b9:31:d4:d6:0e:22:44:eb:13:3c:14:67:07:9a:b7:ff:ae:
e2:ac:e0:45:bd:9f:56:44:66:da:d9:6c:4a:6c:9a:5c:67:0a:
d6:c2:2a:e0:19:11:19:a5:cc:5a:ea:1e:c0:cb:31:e9:a5:ff:
b2:4b:fa:bd:2c:e8:cb:60:da:c5:60:63:21:d3:cf:34:8b:2d:
c8:66:dc:28:00:46:bd:76:3c:fc:95:c7:7f:cc:a2:68:6b:e7:
b5:c0:e6:7f:37:29:d2:34:6d:95:52:7c:af:b9:ef:28:c7:1a:
41:fa:5f:1c:18:11:7b:2c:3c:e0:c5:e2:66:66:86:46:d4:be:
26:c8:7c:c1:90:e2:0e:ca:ba:fe:22:26:35:1f:f7:84:79:29:
ec:da:bc:21:38:4a:fc:a7:bb:39:5b:1a:4d:64:bb:af:ae:b6:
42:dc:4a:1e:41:18:b7:3f:f8:da:da:56:80:5f:47:94:3b:47:
47:f0:bc:22:57:51:a2:c4:e9:5f:19:4a:28:6b:f0:60:3b:84:
b3:2d:a3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:51:15 2026 by rpki-client