Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File: BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier: AysWlf1Q/8RIFNhk52IYcfIvXVQToXePWucO5j2LMnA=
Subject key identifier: 54:C7:AC:9F:FA:51:35:E9:A8:95:D9:FE:D8:8F:DF:82:4D:48:5C:8A
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial: 019E1D90C096A6DADBFF16FB385EF1B84868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number: 13A9
Signing time: Tue 12 May 2026 19:01:26 +0000
Manifest this update: Tue 12 May 2026 19:01:26 +0000
Manifest next update: Wed 13 May 2026 19:01:26 +0000
Files and hashes: 1: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: lHelYcc3IL13oUP9tmpcwfyEPhow0w606r4SqwwIbqE=)
2: SiNcv5rEzJRHrI-5CcZKLsJRvo8.roa (hash: 9lI/4TESgDTXpDMmIm3+fdqNLdl35fFEfVNTkxEHqEI=)
3: hO6sJjGenFnuYxmlzduMju3aiho.roa (hash: 8vgjyujnab6/ES53s2lNNZgYv3hfnctmecpj5jiZlkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:c0:96:a6:da:db:ff:16:fb:38:5e:f1:b8:48:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
Validity
Not Before: May 12 19:01:26 2026 GMT
Not After : May 13 19:01:26 2026 GMT
Subject: CN=54c7ac9ffa5135e9a895d9fed88fdf824d485c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:d2:3b:e6:f4:44:1a:45:0b:92:16:13:fb:
10:72:6b:b8:50:80:d1:98:a2:d8:5f:7b:fd:68:63:
d0:85:e6:ab:0a:d1:39:eb:71:c7:95:d1:43:68:ed:
3a:bc:29:23:88:88:11:be:25:bf:12:5d:81:4c:63:
52:ba:4d:29:ce:fd:c6:87:bd:ef:2c:bb:51:3e:9b:
d3:02:31:55:9b:b2:f7:c6:20:d9:db:db:1e:6d:1f:
c7:cc:f5:7a:d9:8f:d0:97:c3:44:d2:0d:b4:70:69:
5f:e2:0f:0a:03:60:57:5b:e0:22:b9:3a:6c:ab:4d:
1c:2b:55:69:82:fd:09:71:74:e5:3c:b2:ec:b3:c1:
bd:80:15:72:33:22:ea:89:b8:8c:41:63:73:ef:50:
5a:ab:df:8c:41:23:68:88:01:b9:3c:b3:7e:01:c2:
ad:5c:e0:94:54:67:a0:00:a1:a2:c2:1b:ee:dc:40:
9b:ed:76:d3:8d:e2:63:0b:c5:f3:43:86:55:28:a3:
64:6e:74:6e:4a:3c:03:d5:37:21:ad:3a:ca:73:94:
8f:b5:ed:c3:68:5c:c3:73:2a:5d:76:0f:f4:bc:9e:
88:5a:bf:f0:90:0f:f3:c4:d5:7f:4c:9b:7b:f0:34:
ce:c0:99:0c:e5:fb:e7:93:9a:4c:92:09:bc:96:a7:
82:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C7:AC:9F:FA:51:35:E9:A8:95:D9:FE:D8:8F:DF:82:4D:48:5C:8A
X509v3 Authority Key Identifier:
keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2b:74:6e:b0:3e:32:c4:56:64:ab:97:a7:aa:f7:6c:50:c4:
c5:61:0b:8d:e2:2c:62:12:1d:7a:d5:ba:99:45:27:40:67:e5:
70:4b:48:e7:fc:2c:7e:44:2c:a0:47:ce:d5:13:59:10:1e:81:
73:60:43:04:ac:55:a0:e0:0f:e5:a9:98:25:c1:e3:60:9f:47:
b9:44:8e:96:57:ef:f8:c7:f5:6b:8c:bc:87:38:47:85:fd:a5:
52:82:a3:95:07:01:a4:2e:85:66:f0:0c:91:57:fa:9e:94:82:
0e:df:6f:bf:c0:c7:fa:85:6c:cb:42:0e:6e:b8:8f:64:5f:a7:
5a:7d:71:92:fe:95:c5:31:87:8e:54:ba:73:dd:1f:55:fe:38:
fa:45:1c:f1:c9:78:f0:f8:f3:fc:67:21:da:c6:be:8f:89:f9:
ca:c4:0a:36:b5:52:4c:23:1a:8c:7f:2d:07:96:c7:da:71:9a:
6c:7c:ef:f3:fb:a3:81:65:21:e2:bd:b2:f1:96:61:47:e0:4a:
78:ba:4d:76:66:86:d9:87:de:bf:f0:e0:d0:8d:09:38:e8:3c:
fa:ed:4e:4e:30:cf:6e:63:a4:6b:24:a3:4f:39:39:cf:50:3b:
d2:fe:75:18:63:eb:eb:66:01:f7:4c:b8:8c:b3:e6:f2:93:2f:
03:c6:40:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:34 2026 by rpki-client