Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: Vbc/NPovBu7f7ketwJ7sVfhG0Mb5azqzOLqyRSHrNww=
Subject key identifier: C1:1E:ED:0C:9B:74:78:9F:A4:F4:AB:3C:F4:89:74:9F:29:7A:26:70
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 019D284DAC14F7724BF9028C8140C64B3F03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 04:01:11 +0000
Manifest this update: Thu 26 Mar 2026 04:01:11 +0000
Manifest next update: Fri 27 Mar 2026 04:01:11 +0000
Files and hashes: 1: 24Hwto-BpXx4ZNDaWCPO8Ea-hlI.roa (hash: iK9kCH46Oumb8kgSKUedbFMHCOpgazvLt/ANMQHFNJk=)
2: E2NnSe5NuOHhL4ajAD4aa5625AY.roa (hash: CIz3bLXnaMH+1qCOJajgF0xRNJovS7BqhLlnYiNKk0E=)
3: HW1ashBasiojQ_LVw9DqjgRziMs.roa (hash: R6zhs8qmlAdGi+Y1a0OCpm5B+xrqM0N62A7QRk/r6lA=)
4: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: 01Ouc/P3x0NEcnlrkcFjiJ97oPlhMbxxGKI4lAIAlmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ac:14:f7:72:4b:f9:02:8c:81:40:c6:4b:3f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Mar 26 04:01:11 2026 GMT
Not After : Mar 27 04:01:11 2026 GMT
Subject: CN=c11eed0c9b74789fa4f4ab3cf489749f297a2670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:90:98:7c:37:76:89:34:25:ce:ed:81:3b:
d4:78:d2:a2:04:b2:68:22:e4:57:a7:1e:23:85:b6:
63:c8:e4:d1:d9:d0:d1:a8:2c:33:1e:4c:b4:50:85:
c3:34:3d:21:db:d7:62:35:c1:21:07:98:32:38:ab:
eb:19:f3:ca:16:d4:74:33:4c:8b:af:9e:00:75:f6:
c3:60:58:08:b8:b5:16:77:4b:24:2b:5a:c4:e9:92:
63:94:81:76:e8:45:64:fb:53:d0:d8:f0:92:d6:46:
81:b2:35:7e:cf:9f:65:3d:9a:fe:84:1d:58:21:de:
6a:e6:e4:db:24:30:74:5f:6b:92:59:f4:4b:56:99:
0a:0c:65:28:44:e3:44:9e:3a:bf:6a:a2:4e:62:50:
6a:ea:92:25:da:3e:64:f1:ed:36:fc:fd:bd:db:e2:
bf:e4:d9:d1:11:44:d1:96:37:53:ab:af:5a:6b:83:
ae:24:07:b3:97:49:72:fd:a8:af:59:89:80:a6:76:
ae:be:8f:b1:1e:ea:29:52:71:f0:76:3a:80:8d:67:
20:b8:a0:aa:21:a8:b0:a1:65:67:99:e0:68:58:a4:
eb:8e:ba:54:00:f8:3f:a3:10:a7:64:39:7f:bf:63:
e0:77:e4:84:54:1c:d5:9a:22:af:49:b3:01:a2:68:
58:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1E:ED:0C:9B:74:78:9F:A4:F4:AB:3C:F4:89:74:9F:29:7A:26:70
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:5a:75:ae:22:67:af:02:5d:13:1e:2c:01:c3:16:52:ee:9a:
63:bd:c9:28:9d:5b:95:7d:e4:00:78:ac:9b:9d:47:2e:0b:df:
09:34:6f:18:be:e0:b7:3d:9e:04:a8:ca:95:f7:77:a6:e5:b5:
3c:d2:ef:80:1d:9a:95:c6:6d:fc:f0:a4:fa:ab:36:61:1a:91:
b8:51:db:fd:d5:81:a7:6e:88:4b:b2:48:30:69:43:95:fa:75:
57:11:45:7b:b1:13:82:36:1a:44:45:90:f4:6a:b7:7a:d6:38:
07:b0:1a:16:f8:0e:12:b9:13:65:97:68:8f:b3:4c:93:c0:68:
ce:4c:bd:75:82:a0:ff:e5:99:d4:e9:83:72:97:36:32:40:ed:
18:ff:59:7c:91:36:79:76:04:24:eb:9b:41:d1:78:72:25:ac:
50:df:2a:52:2a:ff:77:7b:f7:f6:0a:09:13:a6:90:8c:e8:6b:
5b:8a:04:15:88:79:6e:f8:99:60:8e:11:1c:4f:63:7f:51:41:
81:4c:fa:ec:5b:ee:5d:d5:c0:60:48:1a:2a:53:59:f3:c0:86:
a3:b0:4f:96:24:b3:05:b1:d9:4f:9b:50:6f:d0:c3:9e:22:66:
fc:a4:d9:4f:72:70:81:0b:09:87:3b:07:a2:a4:b5:39:57:33:
ca:93:5b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:53:35 2026 by rpki-client