Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File: BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier: z+GpNknIsK0BhSSB/rGfoW24Pt+6XvHkPVJA5eT3150=
Subject key identifier: 4A:A2:FF:B8:B7:F6:38:E8:2C:A3:E4:86:DD:A9:18:9A:FB:FC:48:7F
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial: 019F927EE4D9AAEF8AB0032D281B581B28E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number: 146B
Signing time: Fri 24 Jul 2026 05:00:17 +0000
Manifest this update: Fri 24 Jul 2026 05:00:17 +0000
Manifest next update: Sat 25 Jul 2026 05:00:17 +0000
Files and hashes: 1: 0vww-Z4_zVXHcLMNjJsMQcHXTpc.roa (hash: dOMpJHCv+3Sv1nVkRTJLzmjEZf9LwutR2r+1CGv+lNY=)
2: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: hb5C7w+y1E6qQFg1O+DFfEhUCPv1SKvSgyUO+PztP1A=)
3: SiNcv5rEzJRHrI-5CcZKLsJRvo8.roa (hash: 9lI/4TESgDTXpDMmIm3+fdqNLdl35fFEfVNTkxEHqEI=)
4: hO6sJjGenFnuYxmlzduMju3aiho.roa (hash: 8vgjyujnab6/ES53s2lNNZgYv3hfnctmecpj5jiZlkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:e4:d9:aa:ef:8a:b0:03:2d:28:1b:58:1b:28:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
Validity
Not Before: Jul 24 05:00:17 2026 GMT
Not After : Jul 25 05:00:17 2026 GMT
Subject: CN=4aa2ffb8b7f638e82ca3e486dda9189afbfc487f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4b:3e:77:8d:0f:d0:bf:5c:a2:83:86:d7:09:
27:60:d7:98:06:64:31:62:10:9b:4e:98:07:0d:83:
f7:50:a9:2a:bf:32:4b:3a:1e:ee:f5:85:e4:4d:18:
eb:11:8e:72:e0:c0:00:23:bf:7c:da:3a:f5:02:76:
de:34:3e:d4:46:1c:23:ca:0b:1e:14:c3:be:17:5b:
99:ab:ac:bc:0f:69:6f:45:ca:8b:79:b1:50:97:ee:
d5:3a:5e:95:92:4b:b6:3f:be:67:5e:14:23:dd:68:
bd:6b:7f:de:89:56:2c:7d:6a:25:ac:d6:87:7b:aa:
1b:fb:bd:68:bc:2f:2d:19:a2:82:4a:c2:e0:44:94:
dd:01:be:f2:c5:3c:e2:8f:19:9a:96:58:97:92:ea:
c5:ae:40:c0:2c:f7:34:4d:b3:ad:b0:c7:19:58:3b:
f7:bf:b4:10:fd:bd:35:58:35:58:d8:6e:b1:1b:a6:
31:64:f4:89:a4:0b:84:29:45:b9:ea:ac:4d:38:6d:
a7:26:30:00:de:d8:c3:cd:f7:64:0a:40:c8:b4:7e:
3a:25:76:21:90:41:38:1d:dc:61:f2:2c:d5:d5:00:
72:de:da:76:b5:02:25:a6:a4:c1:e3:6c:59:69:ee:
d4:3a:7c:be:e4:f1:b1:36:be:8c:60:40:12:fa:f1:
a3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A2:FF:B8:B7:F6:38:E8:2C:A3:E4:86:DD:A9:18:9A:FB:FC:48:7F
X509v3 Authority Key Identifier:
keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8d:5b:51:c2:90:9f:ed:1d:25:e3:78:c4:85:dd:c0:ec:4d:
c8:66:48:3d:ef:e6:83:62:55:04:fa:f3:96:15:01:61:8d:1e:
94:8f:b0:b5:24:63:52:92:ef:08:f2:f8:a9:16:f1:62:5f:e5:
8a:d8:cf:98:4a:1b:d3:78:1a:1f:ed:e6:b7:44:f3:92:7c:0e:
93:62:bb:57:8b:8d:b9:41:0b:a4:4a:e4:1b:0d:c1:e0:3c:18:
85:4d:08:fd:ed:2d:bd:bd:dc:54:29:b0:02:b7:b6:f1:be:55:
74:df:ef:07:4d:9d:ba:fd:e4:78:d5:73:c0:a1:87:e3:83:04:
34:a4:03:4c:66:d6:76:a8:0d:d2:fb:37:c7:19:c2:f0:1a:3f:
da:52:75:3d:36:28:c3:3c:f8:0a:63:f8:b4:6c:56:9a:20:17:
31:79:8f:ca:46:cc:7a:dc:33:58:67:f8:9b:42:4d:81:bd:3a:
4e:e9:a2:3e:83:bd:12:be:b9:a7:1e:26:7f:ed:d6:dc:74:56:
55:c2:43:ab:3a:83:f4:f9:93:b8:04:9d:dd:0e:db:13:0e:eb:
95:fb:ad:ec:18:12:c5:4b:db:9c:11:90:06:22:e7:4f:35:5f:
dc:0b:aa:9f:9c:f3:e9:53:df:20:35:a6:b7:91:03:e1:de:7c:
fb:42:87:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SfuTZqu+KsAMtKBtYGyjjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ODczN2FjMWJjYThjMTQyOGIzOTY5NTQ2ZjE5NzRmMDY5
NGU0MDAwHhcNMjYwNzI0MDUwMDE3WhcNMjYwNzI1MDUwMDE3WjAzMTEwLwYDVQQD
Eyg0YWEyZmZiOGI3ZjYzOGU4MmNhM2U0ODZkZGE5MTg5YWZiZmM0ODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUs+d40P0L9cooOG1wknYNeYBmQx
YhCbTpgHDYP3UKkqvzJLOh7u9YXkTRjrEY5y4MAAI7982jr1AnbeND7URhwjygse
FMO+F1uZq6y8D2lvRcqLebFQl+7VOl6Vkku2P75nXhQj3Wi9a3/eiVYsfWolrNaH
e6ob+71ovC8tGaKCSsLgRJTdAb7yxTzijxmalliXkurFrkDALPc0TbOtsMcZWDv3
v7QQ/b01WDVY2G6xG6YxZPSJpAuEKUW56qxNOG2nJjAA3tjDzfdkCkDItH46JXYh
kEE4Hdxh8izV1QBy3tp2tQIlpqTB42xZae7UOny+5PGxNr6MYEAS+vGjbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqi/7i39jjoLKPkht2pGJr7/Eh/MB8GA1UdIwQY
MBaAFAWHN6wbyowUKLOWlUbxl08GlOQAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82OTMyN2EtNjhkZS00NTg1LWFjZmIt
NTAxMjU3NTkwZGU3LzEvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS82OTMyN2EtNjhkZS00NTg1LWFjZmItNTAxMjU3NTkwZGU3
LzEvQlljM3JCdktqQlFvczVhVlJ2R1hUd2FVNUFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXY1bUcKQ
n+0dJeN4xIXdwOxNyGZIPe/mg2JVBPrzlhUBYY0elI+wtSRjUpLvCPL4qRbxYl/l
itjPmEob03gaH+3mt0TzknwOk2K7V4uNuUELpErkGw3B4DwYhU0I/e0tvb3cVCmw
Are28b5VdN/vB02duv3keNVzwKGH44MENKQDTGbWdqgN0vs3xxnC8Bo/2lJ1PTYo
wzz4CmP4tGxWmiAXMXmPykbMetwzWGf4m0JNgb06TumiPoO9Er65px4mf+3W3HRW
VcJDqzqD9PmTuASd3Q7bEw7rlfut7BgSxUvbnBGQBiLnTzVf3Auqn5zz6VPfIDWm
t5ED4d58+0KHYw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:01:49 2026 by rpki-client