Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
File: B8GCR6UyZHOryW9aEHHRWcHrfs0.mft (raw, json)
Hash identifier: i35p8Jn+IZnUcY9lV64OaRVOuHeQ7pig5Hu+Ahi5On8=
Subject key identifier: DA:E8:0F:A1:75:42:53:0F:A6:8C:6D:5B:DB:3A:32:B6:81:10:FB:73
Authority key identifier: 07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
Certificate issuer: /CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Certificate serial: 019EC1B65C746FA068C1B3519CC1C8DDBD8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
Manifest number: 1002
Signing time: Sat 13 Jun 2026 16:00:14 +0000
Manifest this update: Sat 13 Jun 2026 16:00:14 +0000
Manifest next update: Sun 14 Jun 2026 16:00:14 +0000
Files and hashes: 1: 2PBZm5m27zOYxpo3vU3uetvTaSA.roa (hash: 8Z+XEbvRFLPua4FBbB/jYeJMqXASIsjIokhlmm1N9BI=)
2: B8GCR6UyZHOryW9aEHHRWcHrfs0.crl (hash: 9BgI/HLYoOR5FH3YDaM3lIiz+Wx4NW0Uc6FRzX9UcUs=)
3: cALdX3J8-eiIuNIvRrD5hFb8LxI.roa (hash: c4LVdqOagYJXmjakfNU9pFxR5N5FYi75RconnWcbM/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b6:5c:74:6f:a0:68:c1:b3:51:9c:c1:c8:dd:bd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c18247a5326473abc96f5a1071d159c1eb7ecd
Validity
Not Before: Jun 13 16:00:14 2026 GMT
Not After : Jun 14 16:00:14 2026 GMT
Subject: CN=dae80fa17542530fa68c6d5bdb3a32b68110fb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c5:c8:42:0f:12:40:48:ea:be:4e:aa:46:b5:
c5:98:14:ed:f5:8e:be:d3:2b:b1:fe:55:10:54:88:
67:61:5f:05:57:cd:a8:9d:ce:f1:15:78:41:8c:b2:
2a:f2:f7:48:af:8d:c9:23:d4:73:ec:f5:c2:8c:0c:
f9:e8:f0:60:8a:27:ee:17:9a:cb:e6:cd:91:2f:a6:
44:a4:47:31:f3:d5:79:77:4f:0c:f1:2f:57:7b:15:
b0:7e:8c:fc:f8:fe:48:b6:2b:2b:6c:8d:33:8a:90:
71:a2:ea:5a:5c:5f:07:61:0e:7e:1d:b5:9d:a9:0f:
b4:fb:7d:32:0e:04:5d:45:8c:5a:3c:4d:03:9c:49:
2f:c3:b7:64:92:e7:e3:25:ad:61:6b:07:f7:3d:1e:
b6:da:eb:a1:34:65:cf:f2:b0:b2:2d:b3:59:d1:55:
b0:ec:94:c0:b5:90:d6:82:f9:0c:4d:60:0b:be:5f:
f0:2c:c6:46:23:5a:01:28:52:ec:fc:36:24:23:a4:
e8:4f:41:28:6a:cf:2f:01:69:d7:75:ea:70:84:6f:
9b:06:e2:79:aa:00:fe:39:ed:ae:21:60:1d:12:a6:
96:b0:ca:14:e6:9d:fa:72:34:79:3f:73:f4:2a:a1:
6c:37:9f:60:73:5f:a5:48:7f:ff:8c:cc:a3:0c:5e:
1d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E8:0F:A1:75:42:53:0F:A6:8C:6D:5B:DB:3A:32:B6:81:10:FB:73
X509v3 Authority Key Identifier:
keyid:07:C1:82:47:A5:32:64:73:AB:C9:6F:5A:10:71:D1:59:C1:EB:7E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8GCR6UyZHOryW9aEHHRWcHrfs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d70dcf-95e7-4495-a411-3a5718b41f7b/1/B8GCR6UyZHOryW9aEHHRWcHrfs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:aa:72:3d:3a:8e:4e:cc:bd:1e:35:51:32:6e:ea:0d:ac:f7:
aa:0e:8e:6b:8f:ce:1a:96:98:19:78:a0:60:b8:ed:c8:0e:77:
75:68:b6:59:ac:bc:05:f1:21:ad:fe:1f:35:c3:91:b1:2e:8b:
00:20:dd:ce:f4:8e:59:4c:d5:28:0e:63:e7:5c:1d:f3:ad:5c:
78:e8:3c:bd:be:7e:58:f9:26:37:49:24:17:e5:2a:b7:c0:f1:
07:d3:41:bb:c5:8e:7d:f3:4d:be:69:ec:13:35:4d:25:64:09:
2b:c5:e0:8a:02:ba:f9:f1:b2:e5:58:39:02:c7:ab:ca:c7:27:
cb:80:fa:68:54:ac:6c:46:ab:8a:7d:38:69:b0:63:77:81:40:
79:e8:36:ac:07:75:2d:2e:3a:4b:52:0a:be:d0:5d:b9:f7:19:
17:bf:87:9b:ec:9f:3f:b3:6f:d6:cc:d2:19:68:3c:b7:15:22:
71:c2:51:0d:86:40:b6:62:20:0d:7e:39:f5:a9:13:1c:56:94:
f4:f5:b9:13:12:e2:73:51:a2:e5:69:de:24:a7:1e:7d:c6:da:
38:e4:8f:c5:7e:5b:b1:eb:31:bb:39:98:8d:62:ba:aa:93:62:
79:3d:3a:80:24:54:71:5d:b4:d7:8d:95:c5:3e:e7:14:f0:9d:
f7:5c:97:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Btlx0b6BowbNRnMHI3b2KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3YzE4MjQ3YTUzMjY0NzNhYmM5NmY1YTEwNzFkMTU5YzFl
YjdlY2QwHhcNMjYwNjEzMTYwMDE0WhcNMjYwNjE0MTYwMDE0WjAzMTEwLwYDVQQD
EyhkYWU4MGZhMTc1NDI1MzBmYTY4YzZkNWJkYjNhMzJiNjgxMTBmYjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8XIQg8SQEjqvk6qRrXFmBTt9Y6+
0yux/lUQVIhnYV8FV82onc7xFXhBjLIq8vdIr43JI9Rz7PXCjAz56PBgiifuF5rL
5s2RL6ZEpEcx89V5d08M8S9XexWwfoz8+P5ItisrbI0zipBxoupaXF8HYQ5+HbWd
qQ+0+30yDgRdRYxaPE0DnEkvw7dkkufjJa1hawf3PR622uuhNGXP8rCyLbNZ0VWw
7JTAtZDWgvkMTWALvl/wLMZGI1oBKFLs/DYkI6ToT0Eoas8vAWnXdepwhG+bBuJ5
qgD+Oe2uIWAdEqaWsMoU5p36cjR5P3P0KqFsN59gc1+lSH//jMyjDF4dtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNroD6F1QlMPpoxtW9s6MraBEPtzMB8GA1UdIwQY
MBaAFAfBgkelMmRzq8lvWhBx0VnB637NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEt
M2E1NzE4YjQxZjdiLzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9kNzBkY2YtOTVlNy00NDk1LWE0MTEtM2E1NzE4YjQxZjdi
LzEvQjhHQ1I2VXlaSE9yeVc5YUVISFJXY0hyZnMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKpyPTqO
Tsy9HjVRMm7qDaz3qg6Oa4/OGpaYGXigYLjtyA53dWi2Way8BfEhrf4fNcORsS6L
ACDdzvSOWUzVKA5j51wd861ceOg8vb5+WPkmN0kkF+Uqt8DxB9NBu8WOffNNvmns
EzVNJWQJK8XgigK6+fGy5Vg5Aseryscny4D6aFSsbEarin04abBjd4FAeeg2rAd1
LS46S1IKvtBdufcZF7+Hm+yfP7Nv1szSGWg8txUiccJRDYZAtmIgDX459akTHFaU
9PW5ExLic1Gi5WneJKcefcbaOOSPxX5bsesxuzmYjWK6qpNieT06gCRUcV20142V
xT7nFPCd91yXRA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:08:30 2026 by rpki-client