Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier: g49dEniy/qAvVLHRcg27rw4I222xRuAWOLd2dPPN1Hg=
Subject key identifier: AD:19:5B:02:57:A7:69:33:2F:A1:EA:87:C7:9B:FA:A7:15:40:56:0D
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 019D2961A102A79807CA67C71F4AB52AA469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number: 17BD
Signing time: Thu 26 Mar 2026 09:02:37 +0000
Manifest this update: Thu 26 Mar 2026 09:02:37 +0000
Manifest next update: Fri 27 Mar 2026 09:02:37 +0000
Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: skaOhTzocytwTujBT5c9oskS3F8keGU6vU5RH/U3eis=)
2: VOZJu72cAptf5GuMnp6OPKeTdE0.roa (hash: +OF7YYgIQ+7gBnhNy1lihal/9JWS4Vp1lDBnsJWaWy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:a1:02:a7:98:07:ca:67:c7:1f:4a:b5:2a:a4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Mar 26 09:02:37 2026 GMT
Not After : Mar 27 09:02:37 2026 GMT
Subject: CN=ad195b0257a769332fa1ea87c79bfaa71540560d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:be:21:6e:6d:85:57:0e:3d:18:7f:9c:9f:cd:
1a:af:47:f2:7f:af:e9:62:27:34:50:5c:42:38:cc:
77:7e:57:2e:35:19:ad:5c:b1:69:2d:e3:8d:f4:03:
89:99:2f:dd:ec:68:79:09:ae:57:b6:b6:41:ac:d1:
08:35:63:d4:3e:a9:ba:9d:dc:8e:0c:7d:55:a2:af:
9f:b3:52:bf:df:dd:cb:f0:03:42:87:a1:9c:f1:f4:
14:e8:3c:5e:cd:07:67:ff:a5:14:ff:ff:ec:26:7f:
24:ca:35:13:9a:c9:b5:02:0a:b6:55:47:84:61:75:
41:c4:79:57:4f:cf:a1:77:c2:bd:e1:96:20:d6:f6:
24:7b:00:e9:fa:76:e0:a8:8c:fe:cc:70:77:3c:97:
66:29:89:9c:d2:2d:f3:08:b7:eb:64:cd:63:1b:e4:
ef:62:06:8b:7b:1c:68:95:e5:b1:d9:7e:e6:69:19:
35:cc:58:eb:b7:96:8e:f8:8b:0c:59:de:ef:1d:10:
8d:0c:e0:19:03:a4:d5:4b:39:80:9a:df:a7:34:a7:
08:6f:c9:0d:a5:36:06:19:ec:0d:99:59:8c:39:0d:
fe:96:27:6e:52:af:fb:c6:cc:3f:1a:0d:a6:24:83:
ca:4a:35:51:10:5b:5e:1e:25:69:5c:f6:c3:ee:a7:
79:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:19:5B:02:57:A7:69:33:2F:A1:EA:87:C7:9B:FA:A7:15:40:56:0D
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c8:2c:a7:7f:86:a7:48:42:76:0e:31:f0:f7:c7:db:00:d4:
4d:91:de:9b:42:d0:68:8b:f3:77:95:e4:77:7e:c9:f4:c3:48:
ad:4f:9e:47:f9:a7:1f:37:fd:07:89:32:6a:0a:76:4c:34:7f:
ae:a8:21:8b:1e:57:8c:93:b3:47:e3:49:fb:3b:ea:49:02:d4:
e3:8e:79:74:22:f4:b5:16:73:11:79:8b:87:c7:c8:e0:24:08:
17:a0:df:13:18:40:fe:ab:57:01:6b:c8:52:8d:05:ee:8e:0f:
ef:61:0d:28:c4:c5:ea:3a:81:2e:34:6c:79:fa:db:dd:ce:bf:
6e:0f:b8:9e:83:48:06:7c:b1:31:d9:e8:c0:8a:e4:cc:c3:ef:
28:57:4f:bf:d2:8c:18:54:0e:5e:5e:70:e2:2f:19:4f:60:d2:
62:a5:96:4e:f3:02:c6:0a:f6:38:75:db:6e:78:36:a8:f2:06:
cb:59:81:f4:0a:e3:9d:a6:86:a4:59:05:bd:ea:6a:09:17:a6:
af:4e:f8:60:ab:63:17:a9:ce:10:83:f4:d1:19:cb:43:a7:65:
be:a1:c6:f9:9f:2b:c2:80:d7:4d:88:ac:52:6e:d4:64:fa:ca:
e3:d7:9c:ea:d4:c4:c5:5a:d0:86:d1:ea:32:81:49:99:c1:56:
1c:f1:10:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:22 2026 by rpki-client