Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File: ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier: aBrehYJPnhjDtLETuMI4uTDxYk2cNJlxZVOcnRrq+I4=
Subject key identifier: 9A:C0:4A:D0:8E:96:B5:DB:10:A1:8E:0A:80:76:F4:57:89:B9:44:03
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 019D28844B1F33037D996433DC443A26EB38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number: 0E41
Signing time: Thu 26 Mar 2026 05:00:51 +0000
Manifest this update: Thu 26 Mar 2026 05:00:51 +0000
Manifest next update: Fri 27 Mar 2026 05:00:51 +0000
Files and hashes: 1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: nLvYyQ57e5OrTTmANEEzmI3SPZ4/JffTzse1bZf8QAQ=)
2: aM81JrdxO-yRrVlKdRuDInz7Xik.roa (hash: m45p2Y1vKc3tda0x+KiQ3qLXf93450FPSTY5dkd5d+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:4b:1f:33:03:7d:99:64:33:dc:44:3a:26:eb:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Mar 26 05:00:51 2026 GMT
Not After : Mar 27 05:00:51 2026 GMT
Subject: CN=9ac04ad08e96b5db10a18e0a8076f45789b94403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:df:29:be:a5:83:a4:1e:c1:ae:d4:14:5c:
26:f8:69:cc:08:dd:4c:6a:a7:fe:8f:73:6e:88:fc:
9a:75:cd:16:e4:c9:75:c3:9c:03:9f:c0:de:17:cf:
55:ee:3b:7c:ab:ad:d5:71:69:ba:7c:c1:7c:1e:e0:
97:23:59:b6:60:ac:63:0a:bf:1d:b9:40:a2:74:ed:
aa:48:fa:5c:97:9c:50:de:33:c6:7b:8c:14:90:82:
99:b3:28:80:b4:e4:7f:c4:14:17:1a:25:5c:a6:40:
0d:06:f4:d4:14:0e:b8:b2:47:f4:b5:bd:35:8c:07:
58:9d:af:25:05:a2:c8:2b:8c:39:31:48:77:ed:79:
c3:31:51:c8:2b:20:70:e8:6c:fc:53:69:b7:90:d3:
52:d7:59:d8:e1:06:8b:5c:a6:a4:5a:44:57:69:e0:
5e:48:47:03:5e:59:a2:ed:f8:75:b1:ba:b1:47:33:
1a:64:61:f4:05:9c:f2:b2:a2:91:88:5c:a1:2b:19:
f9:1e:e5:6f:41:72:25:a9:fc:1e:d7:83:f5:31:f6:
1b:df:21:28:83:ff:d0:4b:9b:e3:62:db:d7:0a:78:
8f:c4:3a:b3:c9:6b:ac:fc:f5:00:7e:ab:e0:7d:60:
b8:d1:5f:1e:dd:f4:b2:4f:e0:f9:7d:77:b8:f6:bb:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C0:4A:D0:8E:96:B5:DB:10:A1:8E:0A:80:76:F4:57:89:B9:44:03
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:97:1e:18:a7:41:8c:e8:ab:1b:4c:d5:26:7d:19:c1:d8:b7:
fa:fd:5b:89:89:08:1d:8b:ce:6a:07:96:f3:66:37:6e:80:ac:
3c:dc:90:af:ff:3f:a4:3e:23:5e:f2:97:a3:aa:79:c9:3c:20:
f5:08:27:c0:e6:6f:27:25:f6:0f:96:18:5a:a0:e4:e2:1e:cc:
63:b8:39:22:30:2d:0d:e2:85:79:c3:f4:c6:90:34:42:f9:70:
5d:ec:c4:df:22:df:46:ed:57:90:03:3d:ab:e7:97:be:a4:36:
8e:e3:00:f9:fa:8e:4b:9d:00:4a:dc:99:b0:de:b6:ce:73:c4:
16:44:1e:8f:4e:9d:9f:fc:cf:18:c1:2d:7a:82:40:98:c4:42:
09:ff:0a:ef:0b:60:fa:26:54:e7:30:f1:fc:9c:9f:8a:88:2a:
ec:c1:44:e1:97:2b:39:3a:13:11:4d:4a:f8:8c:7a:62:2c:54:
c7:0a:5c:bc:21:6d:f4:00:c3:07:07:8b:a5:b1:5d:14:18:43:
bd:48:73:60:77:74:2e:41:bf:01:05:36:8a:aa:93:ad:e0:ed:
40:8d:e0:56:05:b7:81:e5:ee:67:dd:ad:3a:af:45:a4:f8:6a:
ae:52:89:3f:d1:a0:c0:88:7a:6d:aa:58:b3:a1:96:22:5b:fc:
42:a4:51:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:39:27 2026 by rpki-client