Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: GL67QpOpLcA+4WpGRg4QuyYDxlhovVeTXwRImgvd3+Y=
Subject key identifier: 0A:75:AE:A8:D5:52:13:5F:11:86:07:6B:45:1A:7F:5B:B8:50:5D:39
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 019FAB63D0340C360A545C09F8AB9835FC9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 107B
Signing time: Wed 29 Jul 2026 01:01:13 +0000
Manifest this update: Wed 29 Jul 2026 01:01:13 +0000
Manifest next update: Thu 30 Jul 2026 01:01:13 +0000
Files and hashes: 1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=)
2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: UNvTa//Rqh3vkF8iqRp6X+cabYBqsSTgeWy9ADyz8zA=)
3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:d0:34:0c:36:0a:54:5c:09:f8:ab:98:35:fc:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Jul 29 01:01:13 2026 GMT
Not After : Jul 30 01:01:13 2026 GMT
Subject: CN=0a75aea8d552135f1186076b451a7f5bb8505d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:ec:55:5d:f5:2a:f3:31:35:d4:e5:cb:de:
95:f0:ca:fd:9b:25:05:f0:f5:42:b2:0f:ed:87:8e:
39:41:96:cd:66:1d:52:47:4a:cd:2e:a6:45:e3:41:
3d:d6:78:c4:6f:29:9c:d2:70:a7:96:78:e7:77:e8:
d4:f6:02:83:34:c8:63:42:bb:dc:1e:ec:43:69:54:
3a:bc:9a:1e:11:32:2f:7a:ba:3c:17:51:3a:78:bd:
9b:4b:c9:aa:11:43:ab:9f:d5:5f:11:95:98:af:b3:
c6:30:8f:1b:c2:a6:02:be:1c:6c:68:ac:b8:b0:9f:
cb:2e:6b:f7:7c:71:e2:3a:e0:87:90:cf:eb:0a:eb:
9f:57:24:21:db:ba:64:65:62:fd:4e:aa:11:63:91:
76:2e:38:b3:e1:43:bf:9c:7a:38:d1:d8:86:b3:29:
6c:b5:d9:a4:ea:8d:2c:e4:98:16:eb:bc:b8:8b:bc:
7a:a6:85:be:4f:14:04:77:1e:38:03:77:b5:a2:4d:
1d:25:3c:8d:06:c5:26:3f:bc:40:4c:92:cc:17:68:
93:49:3a:20:f6:d3:ac:07:32:79:aa:38:56:fb:5d:
19:e3:21:c1:0b:d7:1d:a0:f1:ad:47:1b:11:87:62:
18:dd:1a:b9:78:af:b8:c0:83:60:be:51:04:55:72:
a9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:75:AE:A8:D5:52:13:5F:11:86:07:6B:45:1A:7F:5B:B8:50:5D:39
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:f3:11:60:0d:f2:25:35:53:8e:87:67:27:e1:e4:35:ac:d5:
09:ff:79:5e:ac:33:95:0c:90:a2:89:5d:49:07:54:7f:6a:cc:
4d:c8:af:32:ba:5d:4e:dc:01:af:41:d8:62:b2:99:ad:f4:f7:
5b:41:6d:8b:3b:f2:8a:e0:28:ef:26:a3:2c:5a:c4:97:06:a2:
99:d8:fa:d8:b8:27:78:00:25:4f:e4:5a:22:2c:10:db:06:12:
1d:2b:be:33:61:38:fc:e2:78:67:26:28:7b:c7:9e:44:3b:87:
ed:82:5d:4a:0b:fa:08:41:cb:f7:e4:9b:19:0b:2a:c0:31:65:
ca:d3:c0:94:0c:86:05:65:38:e6:56:94:0e:78:02:42:82:8e:
8d:f4:76:1e:03:9a:3b:49:88:df:31:77:2b:2b:3e:b4:5f:c3:
6c:d3:18:a8:7d:c4:31:e8:fc:05:7f:0d:4f:5f:e4:86:50:0f:
94:3d:87:ff:c8:24:bc:08:fb:d4:ef:97:f4:f6:e0:aa:94:d6:
d0:31:b1:e2:78:07:d7:49:4a:29:f2:9e:6b:61:b0:d0:19:9f:
d0:c0:da:b2:cf:84:87:5f:08:60:67:84:6b:63:9d:bb:51:a5:
df:3d:81:0d:4b:6c:5e:41:e1:76:bd:0c:06:b1:ed:b4:65:47:
89:eb:de:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:13:56 2026 by rpki-client