Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier: rmkZwOIWe5HLyyrrJJWaq5Gqehx/rNGA9+Fa2Dj/LhQ=
Subject key identifier: C8:E5:5A:C2:B4:18:02:30:BA:BF:10:01:72:96:84:6C:1C:DF:A0:59
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 01A0D8DF17B024EBF40E037EDB3482ADC298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number: 1A72
Signing time: Fri 25 Sep 2026 14:01:34 +0000
Manifest this update: Fri 25 Sep 2026 14:01:34 +0000
Manifest next update: Sat 26 Sep 2026 14:01:34 +0000
Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: q+jc6Rxo2BK+ehoF942Z5qnLwxCuYJoYUr1Ofwg2Jvk=)
2: OdGR8q1DrtzqKp7QM4_79Vzq8kI.asa (hash: zT68GbPzl5dNyGUc+5uD6uYA3pHmfcM0MnvrZ31HnjA=)
3: iuE68_Zu0uK275nJpb_6tInq2NE.roa (hash: vi8Q6eX9dc3jErUuvQfc1dJyq7p1p41pFgY91fJ0bdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:17:b0:24:eb:f4:0e:03:7e:db:34:82:ad:c2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Sep 25 14:01:34 2026 GMT
Not After : Sep 26 14:01:34 2026 GMT
Subject: CN=c8e55ac2b4180230babf10017296846c1cdfa059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:2a:f6:07:32:e9:43:8e:c2:a8:92:64:80:b0:
7b:89:fc:1c:29:df:50:0e:6f:25:bd:43:31:9b:6b:
a4:66:4c:d8:eb:02:a0:78:79:3c:4f:ec:0f:40:19:
d0:f0:6c:d5:5a:8f:8e:e1:71:3b:6b:30:24:82:40:
13:eb:e1:2f:4b:ad:ef:63:68:e2:e6:d5:87:62:90:
b4:21:69:eb:25:a3:e9:1c:14:ab:15:1f:f1:d7:d5:
16:b0:7f:3e:fd:d4:86:4c:a5:86:51:c9:92:17:ef:
02:f2:ab:7e:7b:cc:98:9a:08:67:c0:94:b0:06:99:
c4:84:b9:96:3d:7f:ff:3c:39:36:8f:bb:06:0c:8a:
8f:dc:e7:a9:ce:b9:b5:12:8b:f1:88:52:1e:78:6e:
7b:af:0f:f8:6c:ae:7a:52:11:8d:08:6b:bc:68:68:
5c:9a:86:c7:45:56:56:d1:91:fb:ca:98:5f:8b:5f:
de:6d:c6:1f:9e:e6:e0:17:e0:ca:4b:13:e2:05:3a:
67:83:a3:ee:5a:9a:07:09:ea:7c:99:e2:29:0b:74:
1b:79:8d:e0:e2:77:b1:1d:57:70:f4:0e:22:ba:eb:
41:4b:ec:2b:a9:90:cc:a8:fa:59:77:2c:10:65:a2:
ee:6c:ff:89:65:ae:18:65:2a:e4:55:77:16:39:fe:
79:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E5:5A:C2:B4:18:02:30:BA:BF:10:01:72:96:84:6C:1C:DF:A0:59
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c7:18:e6:df:c8:cf:b7:8a:16:d7:73:ce:1a:da:23:6f:08:
af:bc:c4:40:77:8a:35:a3:c5:6c:06:97:f4:4e:67:00:25:88:
b3:0c:96:89:0d:b9:66:e3:ba:6e:99:c5:be:02:af:7d:f2:d8:
d1:dc:a9:3f:d6:6d:15:88:b3:85:43:7a:aa:89:7f:35:3e:3a:
be:8b:fd:f2:2b:86:45:4d:17:eb:a7:ff:31:e8:e7:4e:68:bf:
05:65:93:4d:dd:66:84:44:4b:12:55:11:33:30:90:3a:18:ae:
b4:dd:d9:f4:e9:cd:72:04:d8:2c:d7:cd:be:78:6e:87:98:a7:
47:7c:4e:4f:6a:e0:7b:3d:75:f8:da:c8:a1:91:61:76:58:f4:
58:0d:02:70:59:c4:8b:50:d0:a3:52:59:1c:e1:83:b8:14:68:
62:ef:27:61:f2:26:29:6e:f7:06:90:37:b5:76:73:34:0e:7e:
1d:e6:cc:51:dd:9b:ca:02:af:bb:60:21:d0:5d:ff:1b:fa:70:
fe:30:ac:2c:eb:e3:fe:af:61:76:3a:5a:f2:e4:8b:ae:c2:58:
70:73:5f:29:f4:6e:b3:99:4e:66:13:17:85:83:cd:47:e0:08:
48:2f:d5:f2:da:68:df:96:41:b9:1b:db:fd:10:3f:7a:97:73:
ce:30:4e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:59:00 2026 by rpki-client