Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: uO2R6EpkXa7sjl3e+de+lmRaEMU30mi/NWqlMfPRZRw=
Subject key identifier: 28:19:FB:CA:5B:E1:E7:D7:BF:A8:97:40:AB:83:4A:35:F4:FC:85:1E
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 019F924846D40AE6CE662699B9471B6EAC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 04:00:38 +0000
Manifest this update: Fri 24 Jul 2026 04:00:38 +0000
Manifest next update: Sat 25 Jul 2026 04:00:38 +0000
Files and hashes: 1: 24Hwto-BpXx4ZNDaWCPO8Ea-hlI.roa (hash: iK9kCH46Oumb8kgSKUedbFMHCOpgazvLt/ANMQHFNJk=)
2: E2NnSe5NuOHhL4ajAD4aa5625AY.roa (hash: CIz3bLXnaMH+1qCOJajgF0xRNJovS7BqhLlnYiNKk0E=)
3: HW1ashBasiojQ_LVw9DqjgRziMs.roa (hash: R6zhs8qmlAdGi+Y1a0OCpm5B+xrqM0N62A7QRk/r6lA=)
4: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: oSoaFnn9wngSDUQ76LwD5m8ScZPU/FXL/Lpy6xDYHjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:46:d4:0a:e6:ce:66:26:99:b9:47:1b:6e:ac:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Jul 24 04:00:38 2026 GMT
Not After : Jul 25 04:00:38 2026 GMT
Subject: CN=2819fbca5be1e7d7bfa89740ab834a35f4fc851e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:8a:4d:89:d0:62:b2:31:d9:72:15:e5:af:
2f:17:8f:58:26:14:e0:02:05:6c:48:d0:72:e0:17:
10:a9:a5:75:f7:13:27:86:9a:85:6b:0a:18:bf:a3:
6d:2d:0f:f4:2d:10:3a:3e:79:02:bb:f6:80:8e:73:
50:96:03:d8:c8:42:50:7c:d0:f5:43:99:a2:27:f0:
a2:6e:b4:3b:01:dc:6c:26:39:8e:4c:c1:e8:a7:24:
e1:af:05:74:a5:ce:98:31:fb:cb:ac:76:70:2a:93:
4a:24:42:c9:84:4e:38:12:25:92:83:ed:d1:bd:1a:
f2:c5:1c:80:64:b0:bc:a0:b1:ac:4e:08:22:26:33:
98:d7:26:bc:f9:ec:42:59:58:a1:dd:04:31:51:1e:
52:84:e4:db:27:ce:d3:b9:4d:1c:e6:dd:b2:14:22:
58:95:f5:29:fd:bf:c3:cc:f0:16:13:b3:b7:ca:9a:
e0:14:c5:20:e2:1d:95:88:3b:4b:fe:b3:a7:48:d1:
57:7f:38:1d:d3:b9:27:4d:f2:86:d3:61:f5:38:24:
78:d4:2c:97:57:17:6b:9d:b8:8d:f9:48:06:92:46:
f4:db:8b:d6:9f:88:7d:e1:1d:60:fc:33:a9:e9:36:
e1:f9:92:f8:61:6d:a4:83:01:61:4a:1e:14:5e:35:
59:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:19:FB:CA:5B:E1:E7:D7:BF:A8:97:40:AB:83:4A:35:F4:FC:85:1E
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fb:c5:77:38:97:15:53:1c:48:eb:b8:a3:d7:5b:3f:f8:a3:
3f:88:2b:37:00:7e:91:a7:92:21:eb:42:bb:82:54:d0:38:8f:
72:d4:c0:33:71:f6:60:04:03:77:48:2d:74:66:19:0c:a3:ba:
ec:60:bf:6a:0b:09:a5:f4:e2:b1:3b:9f:92:e3:22:7e:87:9b:
36:1e:a1:c7:e3:22:54:87:3f:1a:73:38:f5:a7:62:5f:f7:7c:
d0:e1:79:38:16:1b:9d:10:d4:78:3a:43:b9:d0:8b:b2:99:51:
9c:ea:52:44:da:ff:50:a8:72:0d:f3:e6:82:a7:39:65:58:5c:
c2:71:32:c3:c1:73:15:62:0f:87:fb:91:fd:32:cb:6d:ec:3e:
bb:ae:d4:a7:be:24:e1:85:e8:16:d8:5d:78:b7:90:54:ee:dc:
e1:5a:ae:2e:d1:0a:5b:42:9d:fe:08:06:d7:7d:16:de:98:5e:
17:b8:d8:fd:8b:a5:02:48:07:e7:4e:44:f1:ba:2e:e5:a1:34:
44:e2:75:77:61:06:d2:da:b6:1e:df:56:e1:05:59:ce:81:d3:
27:bb:88:1b:78:3d:3d:2c:68:b3:58:3e:30:0f:a6:90:50:7d:
28:f0:f9:71:4c:57:c6:be:9c:ce:ff:bb:24:94:be:d4:94:ec:
89:97:79:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:44:01 2026 by rpki-client