Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
File: ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json)
Hash identifier: okC9UeXV6R9pa4iLM9mLbtz0FCvOJFz0cspV/f9ZWls=
Subject key identifier: 8A:9D:4E:F4:CC:7D:1D:1A:A6:AF:F6:C9:25:2D:5A:DA:BB:45:86:99
Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Certificate serial: 01A0D75FAAA81B294BE20F6A3621CB222783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
Manifest number: 102D
Signing time: Fri 25 Sep 2026 07:02:45 +0000
Manifest this update: Fri 25 Sep 2026 07:02:45 +0000
Manifest next update: Sat 26 Sep 2026 07:02:45 +0000
Files and hashes: 1: 850KtEe2xcqmKEfmNfSIV4cO3ow.roa (hash: phHrYuGGkiJtZUfLJhrRJl7lWlOv+7DSIS34Bt7sZVI=)
2: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: qd9ZrG/22aMaSJcVOK8TFwI45X2Aa9k5cHAkblNygdY=)
3: OWIYysqk9cQrLxesndH0U-VsTZg.asa (hash: /2S2TVdICIZXwX344PgLfeMZeJSn0E2G+13oMImZeIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:5f:aa:a8:1b:29:4b:e2:0f:6a:36:21:cb:22:27:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1
Validity
Not Before: Sep 25 07:02:45 2026 GMT
Not After : Sep 26 07:02:45 2026 GMT
Subject: CN=8a9d4ef4cc7d1d1aa6aff6c9252d5adabb458699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:94:9a:7a:36:f1:91:b0:7b:65:b8:7d:b7:
49:57:13:fa:e3:66:17:99:0d:37:e9:16:e7:a4:11:
f9:8d:d2:eb:88:6b:9f:d3:3a:5e:bb:6e:d7:d4:69:
6b:fd:31:28:b6:7f:37:13:98:ef:1e:f2:88:9c:09:
3c:9f:77:fe:09:50:29:c3:1c:d7:9b:45:41:4c:d8:
c7:c0:b5:1d:38:0f:25:92:63:f5:1f:a0:f0:69:91:
09:37:1a:b4:57:eb:d2:88:2a:9b:c3:70:b8:47:b5:
fb:37:3a:34:72:70:25:89:68:9d:65:4f:a6:92:e8:
06:2a:27:69:0f:e2:45:c0:d2:f2:ce:1d:6f:a9:44:
d6:d0:9b:d6:bf:c0:09:b7:a6:68:4a:aa:fe:71:20:
1d:bd:75:74:b2:f8:e3:32:9f:0e:a1:3b:31:95:b8:
c3:fe:ae:46:61:a6:20:dc:36:e6:52:1a:b9:f2:53:
e8:e2:3c:d2:6a:2e:ba:7c:4c:55:91:23:e6:c9:63:
97:50:de:95:a6:da:9e:1a:a4:cf:18:05:9e:dc:de:
06:39:e9:65:64:12:96:a6:98:40:6f:4b:d5:90:25:
ed:0a:00:0e:f1:20:85:7d:c4:1e:38:13:13:59:05:
ae:36:df:d3:4d:4c:de:82:5e:50:f1:d1:78:17:8b:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9D:4E:F4:CC:7D:1D:1A:A6:AF:F6:C9:25:2D:5A:DA:BB:45:86:99
X509v3 Authority Key Identifier:
keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:cf:3c:0e:6c:d2:47:66:2d:64:7d:19:0b:62:c2:ef:a4:d2:
d6:37:b1:df:26:bb:4b:21:ee:d4:21:d4:b3:66:96:d1:79:4b:
bf:55:0c:e6:65:6a:46:dc:a1:cb:68:98:4c:85:2f:7e:98:4f:
d4:b3:79:90:a2:bf:54:d6:7c:3f:f0:57:cb:07:79:7c:e8:dc:
92:27:a9:be:95:19:72:80:b7:73:14:24:75:80:7b:f8:25:21:
ab:fb:a4:04:2d:08:84:9b:4a:c0:0f:d3:39:50:65:86:68:1e:
f5:d7:51:6c:94:04:0f:af:d8:3e:9b:f7:ff:57:f8:6b:b9:31:
46:0f:ff:9c:a5:61:4e:c8:8c:cc:96:5a:36:87:4f:c8:71:ca:
d0:01:11:fe:ba:8c:d4:df:43:09:73:ec:c6:52:58:38:02:7b:
93:79:14:f1:38:de:0c:18:97:fb:55:37:1e:92:92:0a:25:1e:
1d:9e:f7:f7:32:d1:5e:c2:77:01:01:cd:93:f8:27:9b:32:bc:
2b:53:50:d7:c4:6a:e4:bb:b8:be:a2:81:2e:10:fe:16:75:ed:
34:92:9c:8a:01:d4:e2:6d:53:fb:c6:6c:97:04:1d:d5:92:1f:
b0:04:84:2e:19:78:94:8d:dd:b0:4e:fd:c7:f2:6d:f4:84:97:
62:3a:4b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:18:28 2026 by rpki-client