Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
File: BYc3rBvKjBQos5aVRvGXTwaU5AA.mft (raw, json)
Hash identifier: IB1Zq1HUYLjN99ZUDjwWmzE1N/ew4CcPWHDkMw4tN5g=
Subject key identifier: 82:5F:B9:EA:F0:23:80:E3:A4:56:9A:66:4D:49:F7:10:71:91:EB:8E
Authority key identifier: 05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
Certificate issuer: /CN=058737ac1bca8c1428b3969546f1974f0694e400
Certificate serial: 019D284D6F059D40C8AE1AFBFC5A0BCE82BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
Manifest number: 132A
Signing time: Thu 26 Mar 2026 04:00:56 +0000
Manifest this update: Thu 26 Mar 2026 04:00:56 +0000
Manifest next update: Fri 27 Mar 2026 04:00:56 +0000
Files and hashes: 1: BYc3rBvKjBQos5aVRvGXTwaU5AA.crl (hash: pZ6At/09Z2of22e6BiCj4vCQn6N6R4D4VUUmAIDgrNE=)
2: SiNcv5rEzJRHrI-5CcZKLsJRvo8.roa (hash: 9lI/4TESgDTXpDMmIm3+fdqNLdl35fFEfVNTkxEHqEI=)
3: hO6sJjGenFnuYxmlzduMju3aiho.roa (hash: 8vgjyujnab6/ES53s2lNNZgYv3hfnctmecpj5jiZlkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:6f:05:9d:40:c8:ae:1a:fb:fc:5a:0b:ce:82:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058737ac1bca8c1428b3969546f1974f0694e400
Validity
Not Before: Mar 26 04:00:56 2026 GMT
Not After : Mar 27 04:00:56 2026 GMT
Subject: CN=825fb9eaf02380e3a4569a664d49f7107191eb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:07:ac:97:32:f4:f0:b2:bb:3a:81:56:b8:e9:
35:c1:40:48:54:c9:8e:be:6c:25:31:02:77:93:c9:
50:01:26:f7:ed:bd:0e:81:ca:68:a4:c1:91:73:2d:
fe:2e:2c:41:05:f9:2f:8a:94:3a:19:8b:56:35:f9:
68:b5:b3:d9:09:01:89:fe:5f:78:8c:f1:d6:9a:47:
26:71:f3:7c:aa:78:58:14:37:0b:2d:d8:94:7e:dd:
fc:58:31:0a:06:dd:c3:7e:33:88:ea:3b:94:54:4f:
75:54:ac:b6:e1:52:a3:c9:53:73:f9:6d:eb:08:bc:
d9:1d:c0:5b:22:64:c1:59:0c:2e:be:89:9d:97:df:
68:a9:c6:e1:fa:1d:a9:7d:1d:60:ae:24:8c:df:5f:
a6:0b:27:10:9f:bc:5a:58:ed:95:28:2c:22:bc:5d:
12:28:b0:c1:52:5e:2b:12:d7:fa:6d:f1:01:65:49:
2e:1a:45:41:de:80:a8:75:22:d4:e0:c3:c3:71:66:
92:2c:fc:a7:08:7e:52:5e:8c:84:07:df:0f:1c:9c:
eb:52:d9:37:ea:38:bb:3c:2e:5b:6a:33:be:3b:20:
db:22:05:97:69:4d:c4:30:b3:e6:12:77:c2:52:d1:
9e:78:3f:84:c7:e1:bc:f5:3a:f5:99:95:25:08:62:
2c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5F:B9:EA:F0:23:80:E3:A4:56:9A:66:4D:49:F7:10:71:91:EB:8E
X509v3 Authority Key Identifier:
keyid:05:87:37:AC:1B:CA:8C:14:28:B3:96:95:46:F1:97:4F:06:94:E4:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYc3rBvKjBQos5aVRvGXTwaU5AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/69327a-68de-4585-acfb-501257590de7/1/BYc3rBvKjBQos5aVRvGXTwaU5AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:25:ed:db:2c:b1:0a:17:5c:1b:ec:eb:85:53:3b:fd:8c:3e:
24:b5:98:41:84:06:c1:fa:36:70:bf:76:4c:85:85:3d:c8:be:
85:66:13:fb:d5:ad:b2:65:83:c9:29:0c:6b:37:96:8b:9e:d6:
4f:97:3f:2b:3e:32:e4:02:da:a9:da:0d:e3:30:7c:59:d1:99:
cf:39:4d:51:4e:cb:cc:55:49:7d:cc:a4:43:2d:00:66:2b:6f:
58:a9:4b:5b:ed:86:2f:46:62:c9:03:56:3c:e5:a5:0d:c6:94:
9a:7d:e1:96:e3:e9:4b:dd:92:17:50:cc:0b:93:f2:3c:63:46:
d3:f5:e4:0e:cd:80:ac:41:c7:d8:08:4a:1c:df:d3:ba:27:a5:
ef:b8:86:0a:bd:b3:1e:20:cf:1c:ae:bb:9a:2d:d4:07:84:ba:
f3:5a:f5:5f:dc:f0:ef:bf:c2:23:cb:50:9d:32:95:17:dc:78:
c8:a2:3f:2d:5c:57:ef:c5:eb:ec:48:89:06:95:d3:8e:25:f8:
f4:26:81:36:8d:28:62:30:77:05:97:22:f0:b1:e9:57:7e:4f:
1f:20:8a:7a:b7:ca:05:4e:19:e7:48:aa:b8:4f:47:d4:56:f9:
95:cf:c2:46:36:1b:c6:27:e0:78:5f:30:c3:4a:bd:e0:38:72:
f6:49:49:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:38:18 2026 by rpki-client