Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: ftDw36bRS1rhqjb716vzn7Ctok6SEwtPFpl/FMV6wp0=
Subject key identifier: FA:2A:AC:57:C7:12:B2:36:43:51:4C:9C:B7:3C:E5:97:E5:4F:BA:CC
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 019D984FDB787806A8FE7890D2533EDB9F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 0F68
Signing time: Thu 16 Apr 2026 22:01:03 +0000
Manifest this update: Thu 16 Apr 2026 22:01:03 +0000
Manifest next update: Fri 17 Apr 2026 22:01:03 +0000
Files and hashes: 1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=)
2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: WxXSciaQevMm4UxkUujqXLbQ1SpFL47xtjmCwRirG0M=)
3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:db:78:78:06:a8:fe:78:90:d2:53:3e:db:9f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Apr 16 22:01:03 2026 GMT
Not After : Apr 17 22:01:03 2026 GMT
Subject: CN=fa2aac57c712b23643514c9cb73ce597e54fbacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ba:b8:58:50:a2:ef:4a:1e:9e:32:46:04:f8:
ad:0f:f5:ed:ae:53:bf:9e:0c:da:0a:68:da:74:49:
d2:68:1a:28:c8:44:1a:c3:d5:99:06:f6:c1:db:9f:
82:87:4d:a9:25:80:dd:31:2d:cc:87:f1:de:13:38:
ca:31:d2:0d:41:7f:b8:9d:ee:9b:35:35:21:02:75:
ed:44:f8:cb:82:ee:dd:77:5a:12:64:d3:ec:60:d2:
9d:f0:3c:ee:11:da:67:68:96:d6:f1:56:03:b5:f7:
7a:37:1f:3a:de:47:e0:2f:30:9a:c2:57:ec:c1:53:
bb:41:ad:ac:0e:29:3f:8e:73:a0:fb:a2:eb:e5:3f:
bd:a6:b0:63:30:c7:53:4d:cd:2f:64:bf:a8:f9:9d:
ac:5c:2a:51:ae:fd:41:e9:9c:1b:8c:c4:4e:89:19:
99:02:6d:a9:ee:85:c3:6b:db:9c:39:3f:16:25:8b:
4b:c5:f3:e9:30:06:cc:3e:b1:ac:30:b5:38:47:74:
29:95:ff:70:18:c9:6b:39:48:9d:23:ef:5c:bb:74:
06:79:0b:c8:45:7b:ba:6c:6a:e0:1a:10:de:68:7b:
0f:34:6e:7a:be:1f:81:23:fd:a1:4b:62:2b:ed:09:
29:38:14:c7:c3:bd:7b:c1:a5:7e:da:11:d5:1b:47:
54:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2A:AC:57:C7:12:B2:36:43:51:4C:9C:B7:3C:E5:97:E5:4F:BA:CC
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3c:03:b3:3b:03:77:76:46:9d:dd:ae:b1:9c:96:71:f3:4b:
13:48:5d:a2:68:45:d2:1c:21:91:08:03:ab:c6:5c:cd:10:d5:
8f:95:69:26:02:33:20:2d:8e:5f:d9:f9:52:16:a8:b7:86:02:
63:e9:db:eb:21:93:0a:f7:41:b6:c8:b6:91:54:88:5f:d2:08:
77:77:07:7f:8f:7f:01:75:9e:a2:a0:04:3b:c9:e5:98:8c:11:
8a:e0:f0:82:a5:ae:d4:0c:34:e5:7f:2c:f3:7b:d5:be:28:7d:
5e:26:86:3b:2a:b0:50:92:67:4e:03:d1:d2:e3:21:62:36:47:
58:a2:f3:d6:e4:95:4c:04:0c:d4:59:89:5d:2d:d3:cf:10:55:
5b:b1:96:52:7c:7b:76:9c:fa:9f:e0:17:4f:2a:a3:0d:ec:5b:
10:f1:2c:57:a4:aa:73:fe:ce:86:5f:94:52:39:e1:15:31:b2:
2a:91:52:01:f1:88:61:01:b5:a8:6c:5d:55:17:31:b7:ec:01:
34:34:9f:d0:eb:0d:13:7c:11:cf:a0:25:44:eb:c7:b8:0e:a3:
51:76:f9:0c:73:11:c9:f9:19:df:4d:6d:24:36:94:18:63:e3:
6b:75:8d:02:e6:4a:d4:d0:cd:43:e7:81:d1:a3:bd:49:cd:36:
cd:13:de:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:44 2026 by rpki-client