Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: 8ugbAWQy7eidh3UHMuUrxDpX76HGgwkiFx9TTOzGG5k=
Subject key identifier: 2A:0E:13:AF:D0:4A:90:75:46:01:3A:2E:0D:74:10:5D:CE:61:7E:52
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 01A0D4CBAEAF53CA8894AA209F93F99E915C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 1115
Signing time: Thu 24 Sep 2026 19:01:53 +0000
Manifest this update: Thu 24 Sep 2026 19:01:53 +0000
Manifest next update: Fri 25 Sep 2026 19:01:53 +0000
Files and hashes: 1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=)
2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: kBSk8RpXpxjhgGfw0SEFbZ+fvACOtkwy/UePe2yZtJ4=)
3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:ae:af:53:ca:88:94:aa:20:9f:93:f9:9e:91:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Sep 24 19:01:53 2026 GMT
Not After : Sep 25 19:01:53 2026 GMT
Subject: CN=2a0e13afd04a907546013a2e0d74105dce617e52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c9:eb:ae:70:4e:84:53:cc:4f:7d:2b:75:24:
72:3e:a7:3b:6d:db:51:b5:ce:e8:62:61:62:0d:ab:
1b:66:26:6a:e1:9b:96:b6:cb:b7:c6:a1:97:54:4e:
26:16:2d:7b:17:e9:99:19:ce:27:5e:b4:ca:43:2c:
a8:4a:ca:cd:76:05:0b:f5:32:50:f0:2a:f2:1e:6c:
59:a3:15:17:c7:df:dc:69:3e:f0:42:38:37:38:1a:
7a:78:1b:62:93:d6:b7:ee:c4:85:fb:6d:1e:08:be:
64:58:4a:ff:5d:d4:a3:47:91:97:0a:15:03:b9:c5:
ee:ad:18:78:82:37:eb:0e:dc:cd:c4:bc:0e:75:84:
53:6a:34:1b:98:3e:38:69:86:fa:07:a4:47:be:66:
d4:9f:35:65:22:38:37:77:41:e1:4c:24:0c:3e:fb:
38:c0:0c:cd:c9:1b:73:07:e2:ba:19:9b:37:be:f6:
37:01:25:9c:33:ef:99:51:3f:6f:d9:7a:d9:ef:0a:
d4:bd:3f:e2:97:c0:82:60:b3:ad:92:58:62:12:38:
99:1e:db:ec:e7:a0:22:31:dc:88:96:e4:40:dc:ae:
3d:81:0c:9e:0e:de:cd:3d:d8:1d:fe:41:82:43:96:
66:29:5b:78:2a:71:e7:dd:be:34:18:ce:f9:23:ab:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0E:13:AF:D0:4A:90:75:46:01:3A:2E:0D:74:10:5D:CE:61:7E:52
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:74:65:9a:8c:7a:57:55:67:72:0e:64:e4:af:60:24:b9:95:
be:11:cb:e8:9f:2f:66:25:87:cc:08:23:1d:21:6e:2e:8c:aa:
71:c4:7f:a7:74:50:e9:a4:9e:e9:cf:30:25:7e:23:56:a7:5b:
e9:0c:a3:48:19:fd:cf:00:11:57:6c:aa:43:80:f0:a1:25:b4:
ab:2b:21:9f:2c:8c:27:6d:29:d8:e4:5d:e9:8e:7a:2a:3d:78:
7a:33:0e:56:91:2d:a4:05:28:79:3c:18:fb:dd:fc:bc:f0:1b:
b6:8e:54:4e:7b:99:76:4e:82:8c:e5:48:0e:be:6d:e2:91:f7:
79:e3:2c:aa:bd:84:de:76:9b:76:e1:19:ca:9b:b8:e1:a2:dd:
f9:ac:e8:ad:26:df:f5:6f:e0:6d:7e:e2:cd:e7:b9:1c:e7:bc:
32:18:75:b3:78:3e:a7:6d:d6:65:38:30:31:07:af:86:62:7e:
7a:d1:a6:60:f7:10:53:f5:6d:a3:2f:43:bf:14:b7:ac:fb:31:
e4:2b:65:27:6b:c0:f9:e1:5c:9d:a0:00:a1:49:9b:95:29:33:
30:46:6c:8c:ad:7d:e4:c6:83:7e:71:4a:79:4f:e8:e1:38:4f:
bb:09:e1:4b:1d:89:82:d4:9a:ba:cf:5e:7e:94:b0:96:d3:5b:
a7:ec:40:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:15:40 2026 by rpki-client