Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
File: BysethAMDKVkRDcFjUL0_XIjNoE.mft (raw, json)
Hash identifier: zdqpgC0f2OYaUA9LIo281ga3kI6QuFkX1qtCb0dWvpo=
Subject key identifier: 52:40:1F:A7:96:63:8D:3C:86:97:C7:FB:AC:19:37:83:AE:3C:C0:26
Authority key identifier: 07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
Certificate issuer: /CN=072b1eb6100c0ca5644437058d42f4fd72233681
Certificate serial: 019E1D2313F9A1E6EEC3ECDAE8E56D22EB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
Manifest number: 0D71
Signing time: Tue 12 May 2026 17:01:38 +0000
Manifest this update: Tue 12 May 2026 17:01:38 +0000
Manifest next update: Wed 13 May 2026 17:01:38 +0000
Files and hashes: 1: BysethAMDKVkRDcFjUL0_XIjNoE.crl (hash: zdnHDZBNXZJGxjPohfC7FCHY4jHKaXJlGck3VMupZj8=)
2: h1o3bXxvRbQ7S4dxypgO58cC3Qo.roa (hash: oJ/WKinJTQucsbv9/MhIQmZJikDgqhcaJReTCYd19W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:13:f9:a1:e6:ee:c3:ec:da:e8:e5:6d:22:eb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072b1eb6100c0ca5644437058d42f4fd72233681
Validity
Not Before: May 12 17:01:38 2026 GMT
Not After : May 13 17:01:38 2026 GMT
Subject: CN=52401fa796638d3c8697c7fbac193783ae3cc026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:78:1f:6d:45:e0:4f:b2:21:e2:3a:c2:82:06:
01:27:64:9a:fe:89:b5:ca:41:81:ed:c7:e5:d5:49:
40:9f:ed:6f:40:ea:38:51:4a:79:ec:6d:c8:3c:06:
0c:45:19:62:44:d6:da:d2:19:7e:80:27:2b:58:93:
26:a6:f2:48:94:61:44:2c:95:28:2f:6f:2b:7c:4d:
b0:b7:f7:fb:fa:77:a0:74:23:76:e1:d3:34:48:4c:
a4:44:37:3c:77:a7:d3:4c:36:d2:63:db:14:cb:4d:
1b:e5:7d:1c:90:b7:3f:a6:19:87:c0:27:9a:c0:8d:
41:0d:7c:c7:d5:85:64:0c:aa:0f:57:94:14:08:45:
76:b6:48:d3:91:f3:b7:27:d9:2b:c3:08:fe:65:5a:
82:e4:06:3c:69:28:bf:53:65:82:67:3b:87:0d:e9:
6f:98:d3:12:79:35:c3:1c:67:a8:44:30:87:c6:4a:
2e:2d:f7:96:93:55:42:a9:27:e0:46:7a:4f:f7:03:
b3:3c:b1:e2:5e:4a:da:73:54:72:b6:ac:43:ce:54:
7f:72:c1:5c:cd:a3:89:9c:f8:dc:b9:e5:09:b1:bc:
75:c7:5b:e1:06:6f:5a:3d:c7:e1:24:9a:1e:ab:65:
d4:3f:14:f3:73:d1:d9:97:27:31:24:d2:26:c8:8f:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:40:1F:A7:96:63:8D:3C:86:97:C7:FB:AC:19:37:83:AE:3C:C0:26
X509v3 Authority Key Identifier:
keyid:07:2B:1E:B6:10:0C:0C:A5:64:44:37:05:8D:42:F4:FD:72:23:36:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BysethAMDKVkRDcFjUL0_XIjNoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f3f273-3424-4651-9a21-0e07e5a66d59/1/BysethAMDKVkRDcFjUL0_XIjNoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:78:bc:85:f7:3f:b3:27:6e:f4:7f:b0:c6:fe:b8:a5:85:49:
f7:72:29:ab:c2:0f:a5:b5:a3:09:41:e0:77:eb:62:5a:24:62:
7a:37:90:19:ee:f4:b7:77:1f:a3:72:dc:a2:d4:ec:b6:57:7d:
49:06:af:51:ec:01:51:c9:ac:d2:af:d1:39:f7:42:ea:32:5d:
31:77:32:d6:14:a6:cf:c1:4a:a1:25:9a:4b:af:a8:c4:00:a8:
a1:5b:e7:0c:4b:fb:c9:2c:fe:fe:a1:c1:0c:f6:a3:8c:d9:58:
1d:55:0f:e1:0f:38:70:d0:8d:25:89:3a:bd:5b:ac:5c:e5:3b:
a8:0b:99:35:4a:8c:56:79:2b:25:0e:b1:f6:97:5c:49:9b:13:
d8:79:7f:9c:82:85:a9:dc:a2:b5:7f:21:5a:34:bb:18:fa:61:
2b:a9:f8:c4:61:8a:f3:b9:52:7b:5c:b6:90:8f:f3:55:81:b8:
52:0a:1e:b1:68:1e:4d:c1:cd:91:ce:ff:a6:0f:48:11:37:36:
61:a7:d4:b6:7d:38:24:bd:44:72:e7:3e:c6:ce:fd:9e:8f:ff:
f6:2e:25:5d:6f:1a:ec:a1:1f:66:6f:5b:33:10:a0:2e:f4:5c:
39:aa:ba:6b:cd:64:92:1a:df:9e:f7:7c:ba:d5:98:e7:02:f7:
62:52:9b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:58 2026 by rpki-client