Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
File: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft (raw, json)
Hash identifier: 0005TnllwgZJUka9qEAR/ghZjjEkJBVQOTsgrYR4DDM=
Subject key identifier: 36:D2:0D:B0:49:A0:24:08:96:98:62:82:69:A8:1F:01:02:E8:FD:2E
Authority key identifier: 05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
Certificate issuer: /CN=0587c8490b372045669f45f183193eed46f991f5
Certificate serial: 019D27044DFB50C6E43E51DCB7DAEE9D1943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
Manifest number: 0BE5
Signing time: Wed 25 Mar 2026 22:01:26 +0000
Manifest this update: Wed 25 Mar 2026 22:01:26 +0000
Manifest next update: Thu 26 Mar 2026 22:01:26 +0000
Files and hashes: 1: BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl (hash: rEERff0b9iBz5XNf+fG0q52kmjtZpsKU+q1c8D0JILU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:4d:fb:50:c6:e4:3e:51:dc:b7:da:ee:9d:19:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0587c8490b372045669f45f183193eed46f991f5
Validity
Not Before: Mar 25 22:01:26 2026 GMT
Not After : Mar 26 22:01:26 2026 GMT
Subject: CN=36d20db049a024089698628269a81f0102e8fd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:93:64:a2:45:d7:1c:82:b0:9d:74:c0:28:f2:
96:13:94:a7:3c:11:a1:4a:fa:aa:97:b6:ab:71:66:
85:f6:0a:1e:8b:b5:2f:2a:a9:1f:31:db:f3:82:23:
e8:5b:c5:04:65:8c:c9:a8:cf:92:65:6d:20:d5:af:
94:01:a9:f8:f5:30:21:e7:3a:e5:c2:3f:b6:d7:4f:
65:f9:78:dd:89:94:15:ed:bc:2f:0d:80:97:63:61:
e6:dd:16:07:fb:3f:e9:54:c1:18:ce:0f:fe:d0:60:
20:dc:73:6e:72:1b:22:ed:20:1e:8e:4b:7b:5a:b9:
05:74:91:36:dd:2a:a7:ea:f8:d4:67:7d:8b:15:74:
48:78:9c:7d:2f:3b:f5:ed:0a:32:88:68:13:fa:70:
0d:81:dd:8f:a4:68:91:bf:89:40:41:14:a7:b5:8e:
c1:e7:8c:90:1e:9a:30:6f:3c:c0:cc:3e:cb:49:5b:
04:12:f9:61:61:c3:b3:6a:5d:ca:74:f1:f7:b0:4a:
4b:da:ad:bf:0c:64:8f:ea:c6:60:a8:34:d2:f8:4b:
22:cc:49:2e:51:72:85:7e:21:bd:f9:d9:ed:59:d8:
15:9a:e8:b1:13:5a:ad:3b:94:37:fa:79:55:36:ec:
d8:fa:c6:4a:c7:95:80:c1:d2:88:dd:ad:07:35:be:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D2:0D:B0:49:A0:24:08:96:98:62:82:69:A8:1F:01:02:E8:FD:2E
X509v3 Authority Key Identifier:
keyid:05:87:C8:49:0B:37:20:45:66:9F:45:F1:83:19:3E:ED:46:F9:91:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cd0169-ffc1-401a-abbd-ba033f907d91/1/BYfISQs3IEVmn0Xxgxk-7Ub5kfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:40:7a:45:c5:bf:55:d8:5f:12:ac:c1:3c:25:a6:65:c4:f4:
23:ee:23:e4:c2:25:71:33:3f:9b:e5:29:24:78:1f:33:81:99:
89:a5:de:25:ba:84:fa:41:7d:3b:22:f5:37:cf:fa:f8:ab:63:
ca:d1:0f:96:56:d0:67:df:40:67:80:45:a7:10:5d:4c:b5:17:
3a:5b:62:7e:d1:a3:78:cf:71:5b:2e:cf:ff:a3:f9:84:8a:7f:
ff:1d:80:40:e0:30:02:27:b5:c3:1d:d6:0d:50:1d:ec:ee:6b:
ea:2d:a6:9c:e2:03:62:3d:03:7d:8b:9d:78:07:b0:8e:58:e0:
5b:3e:2c:1b:9c:8f:9f:54:44:3c:ef:9c:51:a8:e4:dd:54:6f:
b1:e9:aa:9d:39:30:48:dd:e7:08:3d:f1:be:b2:7d:b3:9a:1e:
a8:67:92:37:7f:20:35:df:e4:35:a9:44:3a:3b:32:9d:04:c8:
d8:96:e1:fe:9f:a7:73:19:3a:73:9d:52:db:a2:81:e4:15:76:
10:04:19:11:22:c6:d2:68:e8:ce:63:4b:62:f9:e9:65:dc:f6:
fe:f7:8e:6a:69:2b:2b:1e:92:03:a3:a2:46:f1:72:96:58:a1:
1a:61:d2:a8:5c:49:e5:28:1b:d6:e7:b6:66:5c:36:78:62:58:
4f:d2:44:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:15 2026 by rpki-client