Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
File: BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json)
Hash identifier: 1QujlZuBwxV5DuE4cdLkcGpN1OBHBhkSRsnoKlZmoYk=
Subject key identifier: 9E:5A:DA:3A:03:1D:43:61:57:CC:2B:B0:C0:BF:FC:18:93:B8:E0:77
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 019D25F2280634532390FF35879E786D6ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
Manifest number: 0CF1
Signing time: Wed 25 Mar 2026 17:01:59 +0000
Manifest this update: Wed 25 Mar 2026 17:01:59 +0000
Manifest next update: Thu 26 Mar 2026 17:01:59 +0000
Files and hashes: 1: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: uJkgK/2W1jQIQicjVf2gso4Kulwc6yZIR3tOAaelbso=)
2: h1o3bXxvRbQ7S4dxypgO58cC3Qo.roa (hash: oJ/WKinJTQucsbv9/MhIQmZJikDgqhcaJReTCYd19W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f2:28:06:34:53:23:90:ff:35:87:9e:78:6d:6e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: Mar 25 17:01:59 2026 GMT
Not After : Mar 26 17:01:59 2026 GMT
Subject: CN=9e5ada3a031d436157cc2bb0c0bffc1893b8e077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d7:8a:c0:ba:12:bb:15:7f:57:68:e0:e1:fb:
1c:c1:7f:a8:91:aa:b7:6d:66:0b:70:7d:72:d1:36:
27:08:c4:e4:f3:30:3f:60:4e:f5:77:d0:c9:24:4b:
5f:c6:1e:3a:63:87:60:9a:ae:d4:de:9a:2b:3d:a7:
7a:5c:6d:c2:56:0a:ea:39:80:ce:1b:76:4b:5d:fe:
91:c4:74:90:61:ac:6d:b3:09:0f:69:a3:25:eb:97:
00:27:f9:f1:60:64:97:8d:80:93:c5:4c:d5:e0:3e:
1e:9e:41:91:0a:33:7c:8d:18:6b:3d:e2:3a:78:64:
3a:be:be:d5:d5:10:4f:d4:6e:6c:44:eb:89:09:d7:
71:5f:ca:82:1a:36:88:97:10:66:d0:2c:27:9e:a5:
3f:df:de:74:ca:b5:6a:f0:e8:eb:6d:1a:eb:66:5b:
7d:2e:01:1d:a3:54:06:13:b8:64:f2:bc:48:c0:be:
20:f1:ee:e4:5f:70:cc:db:2e:99:43:4b:60:44:6c:
48:93:2f:db:16:40:f9:96:6d:fc:be:99:86:70:6c:
c9:7f:6b:57:27:c7:19:8f:ea:b0:b6:d6:3c:dd:82:
ae:1e:6b:d4:98:c0:0c:ea:55:f4:64:53:d0:54:69:
b3:db:f0:5d:fc:cf:0d:5b:3d:8b:14:68:db:dc:9b:
50:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5A:DA:3A:03:1D:43:61:57:CC:2B:B0:C0:BF:FC:18:93:B8:E0:77
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:54:a0:30:06:99:b8:7a:0e:e1:bd:65:21:5b:09:02:61:ce:
12:10:af:5c:56:f8:48:38:c2:06:7d:44:9b:f7:68:6e:92:3f:
40:3f:75:28:9a:0c:db:ca:23:53:48:01:9c:85:ac:2b:2c:65:
d9:76:fe:e1:2f:35:c0:c8:d3:eb:af:0c:c9:fb:fa:ee:68:ec:
df:4a:b5:64:47:5f:5a:41:92:ee:ba:cf:a8:c6:f6:fa:93:97:
80:b0:ad:d1:84:be:28:37:f1:10:4f:2e:5a:24:12:8f:21:af:
1d:48:03:ad:41:ac:33:39:dd:1c:f9:c9:63:1e:2f:26:8e:fe:
2e:92:a8:8e:43:b6:f5:83:eb:a8:93:99:9f:a9:66:09:5b:f0:
15:30:e9:10:c7:d6:0c:7a:49:e1:9c:86:93:61:e7:6a:e2:a5:
a4:5c:dd:19:7a:f8:38:44:95:0a:50:90:ef:c4:05:a1:cb:8f:
0b:b1:1e:61:7a:a5:f6:d2:a1:0e:47:a8:ac:f8:7c:9b:60:e0:
16:1e:17:fe:8f:3a:5b:f7:02:0f:ca:2e:0f:6f:1a:27:a3:d2:
8b:73:99:86:56:0a:83:22:b8:84:58:05:37:0b:8d:b8:96:a5:
37:95:60:d7:e0:26:90:8e:43:8c:63:55:8a:89:91:82:80:fa:
ea:64:7a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:44 2026 by rpki-client