Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
File: B8YQsqBtsYMYVLZybDMJAzYodBU.mft (raw, json)
Hash identifier: BfhbHHEp6htvWzjqh8oTbWQmRVEacXFD5m0KpZQgKhw=
Subject key identifier: 9E:8C:EF:64:FC:91:5B:37:BB:85:F0:FC:2C:4E:09:1D:50:42:77:CD
Authority key identifier: 07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
Certificate issuer: /CN=07c610b2a06db1831854b6726c33090336287415
Certificate serial: 019D98F4806DB885724D3DE9A4F9E962A16B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 01:00:53 +0000
Manifest this update: Fri 17 Apr 2026 01:00:53 +0000
Manifest next update: Sat 18 Apr 2026 01:00:53 +0000
Files and hashes: 1: B8YQsqBtsYMYVLZybDMJAzYodBU.crl (hash: bij4dxK9Yf+rC7XAt3GJSrk9k34fwtKAs1MgJvnNFNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:80:6d:b8:85:72:4d:3d:e9:a4:f9:e9:62:a1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c610b2a06db1831854b6726c33090336287415
Validity
Not Before: Apr 17 01:00:53 2026 GMT
Not After : Apr 18 01:00:53 2026 GMT
Subject: CN=9e8cef64fc915b37bb85f0fc2c4e091d504277cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:65:73:de:7c:9f:53:64:d1:b1:ef:2f:2d:
15:03:4f:1d:a5:69:ac:0d:7b:e0:48:11:46:f2:c8:
5e:e4:f4:70:e9:80:75:cc:b7:fa:9f:0e:4e:56:38:
94:45:4e:22:97:d9:16:78:f7:4b:92:cf:91:c7:b6:
7a:d3:bb:74:a2:13:84:25:b0:9c:e9:dc:8f:92:c7:
9a:ed:4b:f9:6b:01:d7:a1:9c:2a:16:6f:23:f8:2a:
91:68:d4:27:c0:60:82:19:ac:8b:3d:d9:fd:26:af:
f0:a9:8f:6e:f9:44:0b:32:92:4f:d5:c0:89:59:50:
e3:26:9e:06:cf:ef:cb:6d:ba:85:77:d7:b6:5c:37:
d6:4c:20:d9:46:69:4e:10:5d:4f:20:ed:3c:c2:11:
d7:34:43:38:9d:a8:a2:f8:b6:aa:34:d1:d2:6c:fd:
c2:6f:12:1d:d2:91:38:61:28:65:88:01:c8:70:2c:
8b:27:59:d3:b0:63:a5:80:73:1e:a5:06:ea:32:7b:
c4:ce:c8:a2:94:8f:a0:04:82:d6:3e:0d:76:fe:71:
02:1d:22:e4:8f:29:22:70:64:5e:fb:37:96:4a:ae:
c9:68:0c:c4:f2:cd:3f:7a:ae:8a:b9:92:73:d1:d4:
22:db:e1:27:01:f9:99:50:43:75:2d:a3:1d:7e:9b:
0e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8C:EF:64:FC:91:5B:37:BB:85:F0:FC:2C:4E:09:1D:50:42:77:CD
X509v3 Authority Key Identifier:
keyid:07:C6:10:B2:A0:6D:B1:83:18:54:B6:72:6C:33:09:03:36:28:74:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8YQsqBtsYMYVLZybDMJAzYodBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/7c11b7-7c2c-4f05-9017-86c016d7a73c/1/B8YQsqBtsYMYVLZybDMJAzYodBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:c7:8b:be:12:00:f5:d9:0f:58:53:db:9b:7e:3e:7c:5f:1c:
c0:77:d4:b0:0a:14:ee:09:cb:24:96:bf:98:38:41:02:73:d3:
e3:9d:7b:19:5b:21:0c:4a:c9:c3:a2:15:b9:d3:4b:87:b5:c9:
43:0c:fa:2f:ed:35:39:56:ea:12:70:34:84:d1:7e:54:28:4d:
90:0c:bc:ff:54:3c:c1:5d:59:23:cd:7c:40:89:bb:67:6a:72:
c8:f7:2e:9a:fd:af:87:f1:fc:7c:d7:20:de:58:f7:a8:ff:4d:
6c:c2:10:05:96:17:73:68:a8:8d:c7:74:7a:f5:29:f9:5f:3d:
89:34:a9:64:de:4b:30:87:de:cf:e2:e6:6a:d8:77:75:7c:7e:
bd:9a:27:8c:7e:2c:0f:82:76:33:4b:e2:af:5e:15:99:2b:74:
0e:31:43:f9:75:23:72:b4:49:97:d3:5f:ae:e1:bd:ff:b8:de:
f4:0b:77:40:d8:06:a8:4b:9a:0a:7e:6e:08:a9:72:d5:18:47:
f6:e2:c7:f1:9d:8b:5c:5c:34:1c:9f:54:20:f4:6c:25:1b:cb:
d0:89:37:cf:26:c8:af:09:1e:92:4a:a1:a7:d5:43:94:58:ed:
8e:8a:29:57:90:c0:c2:58:7b:1d:0b:85:6a:7d:2c:cc:6e:de:
6f:4e:4a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:19:53 2026 by rpki-client