Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: 2N+0S64qdI2i9RUCxuQszE7pD+Y+8qsSBK99J93om2w=
Subject key identifier: D4:6C:C4:63:63:7C:27:EB:FD:77:A2:35:40:52:EC:0C:6C:7D:1D:C0
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 01A0D6B9D7BAB423AFEC42DE9F0E6FBD72B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 04:01:38 +0000
Manifest this update: Fri 25 Sep 2026 04:01:38 +0000
Manifest next update: Sat 26 Sep 2026 04:01:38 +0000
Files and hashes: 1: 24Hwto-BpXx4ZNDaWCPO8Ea-hlI.roa (hash: iK9kCH46Oumb8kgSKUedbFMHCOpgazvLt/ANMQHFNJk=)
2: E2NnSe5NuOHhL4ajAD4aa5625AY.roa (hash: CIz3bLXnaMH+1qCOJajgF0xRNJovS7BqhLlnYiNKk0E=)
3: HW1ashBasiojQ_LVw9DqjgRziMs.roa (hash: R6zhs8qmlAdGi+Y1a0OCpm5B+xrqM0N62A7QRk/r6lA=)
4: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: WNxR1GVzxY4VGYmjAC+4k5PpUtQUJ4ljsay3oafKDCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:d7:ba:b4:23:af:ec:42:de:9f:0e:6f:bd:72:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Sep 25 04:01:38 2026 GMT
Not After : Sep 26 04:01:38 2026 GMT
Subject: CN=d46cc463637c27ebfd77a2354052ec0c6c7d1dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e9:e6:ce:d5:6f:62:7a:ce:17:76:08:5d:51:
3f:b9:17:3b:be:ea:89:92:7b:65:d3:fd:c3:c6:91:
97:3e:ab:2c:c8:ec:b0:ee:14:18:5e:28:37:67:a5:
f5:48:c8:fc:d0:e9:44:c9:cc:1e:53:59:9e:f4:a5:
ac:8e:b8:3b:22:99:e8:4c:b4:34:ac:57:69:8b:13:
52:35:56:74:a0:a9:cc:38:29:f6:99:7d:f0:d7:33:
27:26:10:2a:57:62:d5:de:cb:bb:98:f4:11:06:88:
65:c3:72:06:37:9d:cb:72:81:0b:0b:15:d9:ab:73:
47:39:1f:e4:a5:09:9d:84:3e:04:bd:05:56:5f:77:
a0:5d:7f:d1:22:93:b5:8e:6b:e4:7e:a9:3f:40:88:
65:57:08:b3:d3:bc:96:44:9c:3c:75:11:6f:cb:2c:
2e:39:51:6b:6a:db:8b:cb:09:2b:74:90:e1:d9:12:
67:db:94:97:8b:95:ff:0f:d9:84:76:c3:68:46:f5:
21:da:9c:2d:0b:69:f2:20:70:8d:df:22:ae:58:23:
11:6d:c9:46:35:f8:52:d7:20:42:ba:8b:b3:c6:f1:
e1:47:e5:de:85:45:04:61:50:db:72:0a:df:1b:08:
7b:eb:90:51:ef:74:97:4b:5a:ac:f9:94:95:46:92:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6C:C4:63:63:7C:27:EB:FD:77:A2:35:40:52:EC:0C:6C:7D:1D:C0
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:73:57:17:0b:ae:7e:1c:80:eb:da:9a:93:54:d4:b0:6b:35:
b1:a1:ca:a4:ed:4e:5b:ff:94:9f:e1:44:ae:70:94:af:74:5b:
67:80:f0:86:bc:c8:29:69:83:9e:38:83:46:1e:97:00:89:b1:
6b:7b:38:aa:03:52:b1:0c:5f:65:49:86:f9:90:26:37:bc:da:
89:d8:4c:f1:0a:89:b3:c6:66:ae:b7:b2:e6:62:5b:ae:f9:0a:
5f:98:d5:d3:54:d7:ef:88:89:1e:f8:22:28:ae:ba:ae:47:48:
19:ac:65:09:2b:b7:83:c8:b8:a0:e1:f1:64:aa:60:68:31:fd:
03:e5:e6:86:b2:2c:6a:f2:c4:3d:81:58:61:96:da:40:fb:59:
f4:17:77:34:ed:e9:51:50:86:0f:56:6d:58:e5:a9:43:c0:01:
32:ab:74:94:f0:f8:35:2f:68:d7:dc:98:cc:0a:a8:85:59:12:
cf:92:b3:35:3c:92:7a:5d:b6:1a:c8:c3:a4:3c:9d:56:cb:46:
16:f0:3c:13:5b:6b:0c:27:51:aa:20:af:19:e5:dd:bf:53:d7:
e8:fa:3a:00:8e:fe:e9:bf:0f:1c:a7:a3:30:ff:c6:ab:60:0d:
ea:74:0c:ac:1a:b8:26:32:6f:1f:24:45:c3:0d:ee:f5:ac:d1:
cd:3d:07:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:54:22 2026 by rpki-client