Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
File: by4eTgnsEV2nA2tkpRnSSNUtuFg.mft (raw, json)
Hash identifier: XvgLXJawBuKPgAOmZLmBT6kNwY2hQkEtlQLs4GzpH9A=
Subject key identifier: BB:7D:1A:45:9A:40:57:DD:8B:A5:AF:CB:C7:15:1B:69:97:6D:E0:ED
Authority key identifier: 6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
Certificate issuer: /CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Certificate serial: 019D2703AA6B1B9C36C517479E5697D34058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:00:44 +0000
Manifest this update: Wed 25 Mar 2026 22:00:44 +0000
Manifest next update: Thu 26 Mar 2026 22:00:44 +0000
Files and hashes: 1: by4eTgnsEV2nA2tkpRnSSNUtuFg.crl (hash: aocQulrINhlZW/fZXXcBE3+JKfIRv7SotOhRXelj5gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:aa:6b:1b:9c:36:c5:17:47:9e:56:97:d3:40:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Validity
Not Before: Mar 25 22:00:44 2026 GMT
Not After : Mar 26 22:00:44 2026 GMT
Subject: CN=bb7d1a459a4057dd8ba5afcbc7151b69976de0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f0:f6:97:36:e7:11:d1:65:9c:c9:01:74:c8:
20:1a:cb:e0:57:2e:72:f4:e0:cc:92:85:80:70:e2:
bf:f4:6d:af:bd:eb:55:3c:20:ff:3b:e1:d1:d2:bb:
5f:c8:9a:6e:5d:57:06:f2:de:6a:df:b7:2b:de:35:
2d:3c:18:14:23:49:56:cb:12:2a:39:e3:f1:2a:a5:
7c:0f:ee:bc:46:8a:11:65:cb:b4:61:65:79:81:84:
36:03:c3:04:c8:b2:b5:95:63:5f:b8:f2:68:46:c1:
00:17:f1:df:bf:df:c7:ba:68:6e:2c:29:05:31:e3:
4c:2d:66:76:95:88:97:b8:39:41:31:10:65:45:fe:
9a:b8:d6:31:b4:df:d6:10:ab:45:b3:0e:87:64:80:
6f:6e:1c:df:05:46:47:da:c0:49:f0:0a:84:47:5b:
34:d1:02:1a:a8:14:d8:ca:fd:42:d4:bc:0c:18:9b:
b7:27:03:7f:0e:db:c2:b5:f3:a4:a6:cf:38:83:d4:
31:b4:ef:94:80:94:82:b3:e5:36:98:37:e3:a4:cb:
90:97:ba:cd:c5:2b:6d:d3:03:0c:99:8e:e3:35:7e:
b2:0a:46:96:0c:6a:60:a5:a7:13:01:a1:78:59:57:
03:5f:00:a6:74:5e:79:21:07:8c:2e:07:01:e0:fe:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7D:1A:45:9A:40:57:DD:8B:A5:AF:CB:C7:15:1B:69:97:6D:E0:ED
X509v3 Authority Key Identifier:
keyid:6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:da:72:50:c2:e9:0a:34:3f:80:0e:6c:f1:89:c8:20:3b:0b:
55:6a:bd:fa:4e:a9:f5:c5:06:0a:0e:75:d4:41:e9:4f:43:24:
e9:27:52:47:c3:aa:12:e9:c3:87:7b:9e:d1:66:ad:74:74:b1:
15:68:43:e4:b8:de:b6:d3:91:e1:ce:e7:7d:50:97:12:25:04:
29:bb:a7:5d:72:11:77:f5:b0:a9:3f:26:7f:34:d1:43:d7:b2:
f8:5b:22:30:9d:bb:b3:97:7a:cf:ad:e6:c0:e9:b0:c6:34:7e:
a1:0b:ee:1b:cb:40:1e:06:dd:b5:32:56:3d:59:bf:a8:c5:6a:
43:17:25:fd:c9:11:7c:11:0e:76:2a:bd:c9:2e:dc:5a:db:67:
3a:56:41:35:68:52:5a:eb:99:10:57:4f:db:a7:c9:ef:67:a4:
3b:85:a2:13:0e:77:e9:04:ca:bc:38:c4:b7:e1:f5:d5:8b:21:
64:2c:71:21:30:41:bb:c2:1d:d5:b4:f4:fc:d0:b5:a2:be:e9:
6e:ed:45:26:2d:11:9f:0e:d6:2d:07:5f:db:ba:e8:e1:ed:40:
e6:4e:8d:a7:9a:97:4c:4e:4f:1f:b0:f4:54:da:7e:e0:22:23:
3c:90:46:3b:9e:36:2c:15:b8:81:1c:1b:a2:2a:32:f2:c1:ff:
78:03:31:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:43:22 2026 by rpki-client