Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
File: B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json)
Hash identifier: WQjCz7bvu/rmV0QRHue86bberAAjkzQBqkTS0u5W4IM=
Subject key identifier: F0:A7:06:7E:56:CF:D7:90:41:29:55:A2:2B:C0:13:31:B4:C8:12:6E
Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
Certificate issuer: /CN=07c610b2a06db1831854b6726c33090336287415
Certificate serial: 01A1C4E7E7F6E6B3873D1FB2066263D7DBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
Manifest number: 1AEA
Signing time: Tue 10 Nov 2026 10:01:34 +0000
Manifest this update: Tue 10 Nov 2026 10:01:34 +0000
Manifest next update: Wed 11 Nov 2026 10:01:34 +0000
Files and hashes: 1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: WPGw47hRRgmscQ8UhuyP5oOOvfpH/wycJX5yFwUn/4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:e7:e7:f6:e6:b3:87:3d:1f:b2:06:62:63:d7:db:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c610b2a06db1831854b6726c33090336287415
Validity
Not Before: Nov 10 10:01:34 2026 GMT
Not After : Nov 11 10:01:34 2026 GMT
Subject: CN=f0a7067e56cfd790412955a22bc01331b4c8126e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:8a:9f:59:b6:03:65:37:95:2b:8b:6f:cc:
39:e8:66:92:ca:a4:00:7d:a1:4c:51:be:8e:d9:7f:
d6:52:7a:78:a2:84:f7:25:b6:0b:6e:af:cf:f6:3f:
b8:dc:a1:a4:5c:ff:be:f5:6b:f4:d2:7b:28:78:bf:
4f:83:2e:7f:2c:9a:48:10:e5:c9:be:76:fd:7e:ca:
99:6a:ce:d9:90:cd:48:83:d5:05:6e:c9:20:56:f0:
2d:20:37:12:f7:b2:5b:80:58:10:04:25:4c:d0:16:
a4:35:b3:2d:96:35:5c:11:d9:c9:17:cd:92:5b:00:
36:d9:d5:d0:93:64:62:25:74:9d:a6:c2:05:09:64:
95:4e:81:0c:c6:36:fb:63:48:d8:80:22:83:b4:27:
4f:31:25:e9:bb:52:ad:55:2e:f1:1f:28:07:d7:2b:
16:16:ab:83:94:8e:10:1b:9d:c7:b9:4a:37:c8:93:
40:97:18:2f:24:63:bd:c1:5a:8e:59:13:52:20:12:
78:3c:39:32:80:41:b3:f6:33:b7:99:7c:03:55:d2:
50:f2:28:f6:21:5b:00:84:4d:dc:f3:f6:69:e9:e8:
c1:02:30:88:10:c5:a3:d2:f0:df:69:60:4e:bc:4c:
00:1d:c1:23:ee:73:0e:a4:a0:f6:80:bc:e8:98:07:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A7:06:7E:56:CF:D7:90:41:29:55:A2:2B:C0:13:31:B4:C8:12:6E
X509v3 Authority Key Identifier:
keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ac:4d:f3:86:81:fa:6e:a5:7e:18:8a:e0:43:44:0f:1a:68:
f7:66:9b:08:59:f7:d8:60:26:ed:8e:62:31:f4:13:2d:a3:f1:
60:02:25:f0:36:f4:f0:20:76:d6:b0:21:60:79:94:47:df:9a:
28:7f:74:09:94:4c:2c:64:6f:73:59:87:a4:38:c1:3c:d2:67:
bd:1a:0b:12:08:11:80:ab:9d:42:b6:25:40:d3:be:a7:ad:63:
db:26:f5:76:35:c3:0b:4e:14:79:3c:db:6c:8b:4f:36:c6:ad:
e1:fe:ed:77:a1:c0:42:e1:52:b5:c1:ef:35:13:95:c1:a9:83:
4d:ad:ea:42:ac:a0:71:2e:7e:98:f1:16:10:65:9d:e8:4e:fb:
7c:56:25:4b:6c:76:9f:8f:e7:ca:0e:c2:f3:6b:23:bd:08:b3:
f2:a9:a4:e1:74:cb:e1:be:3d:ca:8f:79:97:0e:ad:fc:de:26:
21:cf:9a:60:81:57:94:d6:a3:f4:08:be:cd:ae:bf:aa:21:9b:
98:88:ed:c1:48:91:6e:e6:db:7e:df:f0:91:2b:b4:38:78:f8:
5a:f6:9c:1d:73:91:02:21:c7:25:18:d1:1b:7c:b1:f8:81:3c:
88:40:4a:ed:66:46:42:b5:36:b1:bf:ff:f4:36:3c:c2:b2:86:
bb:e2:40:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 14:17:08 2026 by rpki-client