Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier: RkAtCDOMBvrsXYD4lomuAQWn1TTItq4s+IKBw41Jl98=
Subject key identifier: 6C:B3:33:C3:A6:16:08:18:53:22:F7:CC:E6:35:3C:F3:67:4B:98:5B
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 019F916CCDE48E7EC8ACB0324A6D700C52E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number: 18FC
Signing time: Fri 24 Jul 2026 00:00:54 +0000
Manifest this update: Fri 24 Jul 2026 00:00:54 +0000
Manifest next update: Sat 25 Jul 2026 00:00:54 +0000
Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: yZBDG/hNBJjKQUwn16I7z30hWYnaWH75Wx27hk+RgUk=)
2: VOZJu72cAptf5GuMnp6OPKeTdE0.roa (hash: +OF7YYgIQ+7gBnhNy1lihal/9JWS4Vp1lDBnsJWaWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:cd:e4:8e:7e:c8:ac:b0:32:4a:6d:70:0c:52:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Jul 24 00:00:54 2026 GMT
Not After : Jul 25 00:00:54 2026 GMT
Subject: CN=6cb333c3a61608185322f7cce6353cf3674b985b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:d8:07:30:d9:5c:d2:17:39:be:d1:8a:9e:
99:18:fd:88:b7:b9:99:53:8e:a3:84:03:07:d8:c9:
b6:f6:c6:b2:ad:e9:3e:5e:21:82:ad:71:7a:92:82:
f8:99:9d:ff:e4:0e:aa:77:25:62:c3:1d:65:fc:3b:
2d:b2:a3:73:5c:37:b3:4a:aa:fb:9e:64:f0:9b:d0:
a8:23:a7:c1:d7:6e:25:96:e3:f2:ee:9d:60:74:8e:
57:ad:38:53:01:2d:ea:45:84:84:29:20:5b:13:58:
9a:b7:a7:d6:bd:26:19:5d:33:24:86:c4:04:99:6c:
ad:07:4f:b2:31:5a:f6:af:d9:c1:1f:9c:48:79:38:
af:35:cd:f0:9c:df:15:47:0b:aa:c4:27:79:d8:f4:
11:60:9b:0a:6d:c8:92:91:71:cc:11:be:5a:19:28:
7b:db:7f:e7:2f:fa:dd:86:0a:08:0c:7b:bc:b2:c1:
42:ca:87:2e:39:87:86:55:db:af:49:59:5f:3d:e0:
6c:a1:4f:e0:8f:eb:3a:f7:74:66:d4:2b:40:5e:23:
d6:bc:fd:21:df:6d:fe:4f:00:14:c6:a8:9c:aa:4b:
aa:96:41:6e:f6:d1:22:90:de:4d:96:1c:4b:30:c9:
80:6f:66:ce:85:9a:a7:9d:6a:46:55:a1:37:df:37:
38:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B3:33:C3:A6:16:08:18:53:22:F7:CC:E6:35:3C:F3:67:4B:98:5B
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:44:c7:aa:00:d3:9d:90:66:1a:de:c8:d6:3f:5b:cc:6e:63:
32:94:de:46:c0:26:bc:f0:23:ac:b5:a2:9d:3b:79:a1:19:11:
15:1e:04:86:5d:50:45:46:51:d9:9e:69:e4:7a:ff:11:75:08:
42:0b:f0:f8:df:17:62:64:a2:b1:06:c8:78:1d:10:67:1d:11:
f0:40:54:23:75:ef:db:ad:d7:8a:21:1a:e0:d9:4f:ce:a6:4f:
dc:ca:cb:89:4a:4f:f7:7a:6a:dd:bc:ac:31:41:f9:68:a6:8a:
1e:d7:6d:2b:3a:38:83:83:1e:7a:ec:52:a9:12:9f:4e:6c:d4:
af:08:3b:94:a4:32:5c:4e:85:2a:4e:b5:9b:5b:54:af:fb:c7:
50:cb:24:0f:45:97:1d:a0:12:5b:57:5c:2d:38:8a:8c:e4:2d:
b6:f1:e9:e2:9a:f8:d9:d8:0f:d1:4c:2f:d8:b4:e8:83:fc:7e:
37:e9:0a:c0:1c:36:32:c7:34:a1:d8:fc:79:11:5a:3b:40:74:
37:4b:52:e6:4e:01:06:01:75:f2:7a:81:5f:57:8e:ff:63:79:
6a:60:4d:5e:6b:4b:da:ef:7c:46:e9:fb:e7:5f:22:ea:46:fc:
ca:c4:9c:d3:a8:d9:60:d2:8c:f8:da:2a:34:f0:e4:9c:0e:e4:
15:29:be:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbM3kjn7IrLAySm1wDFLoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ODgxZjM1N2VhNjY4MGRkZTUyYTJhOWJmYmJiNmVkNDM4
NWQ4ZDkwHhcNMjYwNzI0MDAwMDU0WhcNMjYwNzI1MDAwMDU0WjAzMTEwLwYDVQQD
Eyg2Y2IzMzNjM2E2MTYwODE4NTMyMmY3Y2NlNjM1M2NmMzY3NGI5ODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYDYBzDZXNIXOb7Rip6ZGP2It7mZ
U46jhAMH2Mm29sayrek+XiGCrXF6koL4mZ3/5A6qdyViwx1l/DstsqNzXDezSqr7
nmTwm9CoI6fB124lluPy7p1gdI5XrThTAS3qRYSEKSBbE1iat6fWvSYZXTMkhsQE
mWytB0+yMVr2r9nBH5xIeTivNc3wnN8VRwuqxCd52PQRYJsKbciSkXHMEb5aGSh7
23/nL/rdhgoIDHu8ssFCyocuOYeGVduvSVlfPeBsoU/gj+s693Rm1CtAXiPWvP0h
323+TwAUxqicqkuqlkFu9tEikN5NlhxLMMmAb2bOhZqnnWpGVaE33zc4KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGyzM8OmFggYUyL3zOY1PPNnS5hbMB8GA1UdIwQY
MBaAFAWIHzV+pmgN3lKiqb+7tu1DhdjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9hYmMxMDMtY2U2Ni00ZmNjLThmZTEt
M2M5MWFkNGIzZTA4LzEvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9hYmMxMDMtY2U2Ni00ZmNjLThmZTEtM2M5MWFkNGIzZTA4
LzEvQllnZk5YNm1hQTNlVXFLcHY3dTI3VU9GMk5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAokTHqgDT
nZBmGt7I1j9bzG5jMpTeRsAmvPAjrLWinTt5oRkRFR4Ehl1QRUZR2Z5p5Hr/EXUI
Qgvw+N8XYmSisQbIeB0QZx0R8EBUI3Xv263XiiEa4NlPzqZP3MrLiUpP93pq3bys
MUH5aKaKHtdtKzo4g4MeeuxSqRKfTmzUrwg7lKQyXE6FKk61m1tUr/vHUMskD0WX
HaASW1dcLTiKjOQttvHp4pr42dgP0Uwv2LTog/x+N+kKwBw2Msc0odj8eRFaO0B0
N0tS5k4BBgF18nqBX1eO/2N5amBNXmtL2u98Run7518i6kb8ysSc06jZYNKM+Noq
NPDknA7kFSm+cQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:21:34 2026 by rpki-client