Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
File: byfoswfmVum-2aQOmbTwOXe3qNA.mft (raw, json)
Hash identifier: NFGs9MiZZR0ssAd4SKpiLQqhH8zBV05lkqS7zqC2v0I=
Subject key identifier: 39:F2:02:3E:58:6C:4C:DB:C1:2A:2C:A1:65:50:9D:9F:82:AF:BD:3C
Authority key identifier: 6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
Certificate issuer: /CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Certificate serial: 019D26CD2232F358F85F1CE353AE9E6BE509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
Manifest number: 086A
Signing time: Wed 25 Mar 2026 21:01:11 +0000
Manifest this update: Wed 25 Mar 2026 21:01:11 +0000
Manifest next update: Thu 26 Mar 2026 21:01:11 +0000
Files and hashes: 1: WVaPwLEt7RpMKYlsZfY-cA3FJRc.roa (hash: Ig8sscra5dIX6tBApNExCSn2CMXG+xOTaFttzoauVgc=)
2: byfoswfmVum-2aQOmbTwOXe3qNA.crl (hash: +kyJPqaDZRy246prjZRL59zGWynyfcexmSs/pB1jxCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:22:32:f3:58:f8:5f:1c:e3:53:ae:9e:6b:e5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f27e8b307e656e9bed9a40e99b4f03977b7a8d0
Validity
Not Before: Mar 25 21:01:11 2026 GMT
Not After : Mar 26 21:01:11 2026 GMT
Subject: CN=39f2023e586c4cdbc12a2ca165509d9f82afbd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:34:b5:46:6f:d5:ee:5d:40:5b:f2:da:c4:
48:d6:30:aa:6a:f0:27:af:f7:6a:de:8f:1a:4e:39:
31:5c:7d:2f:d8:94:a0:35:04:58:73:89:49:38:91:
01:b2:94:65:82:59:66:6d:94:8a:ed:e3:39:32:4e:
5d:ee:fb:c1:fb:a6:be:55:67:f3:61:ec:e2:7f:f6:
53:5e:1b:2d:f5:94:20:6c:74:2a:51:3b:47:ee:06:
36:35:b9:43:9f:b4:28:0a:79:77:e0:c3:56:59:c9:
37:1d:f0:7f:6e:ad:c0:63:31:a7:d5:d5:69:c5:33:
45:9f:5f:9d:78:08:59:f3:bf:7f:3e:5b:43:c6:2f:
33:cc:dc:d1:c2:de:77:da:66:80:09:0a:50:ea:9d:
3d:ec:74:0c:75:34:2b:e9:46:53:d9:db:2a:63:2d:
b4:1e:4d:30:42:42:58:31:6b:2d:86:64:d1:5c:c8:
e9:49:d7:de:21:ba:ed:21:ad:79:2b:e3:64:0a:fe:
d8:b0:3e:d6:ac:34:a2:26:57:c0:1c:31:04:50:a3:
35:d1:43:91:1d:83:ed:71:2f:6c:5d:8c:3e:82:7f:
cb:9d:7a:9d:7d:3f:53:c0:f9:99:5f:5a:30:61:e8:
74:32:00:f4:99:32:3a:d5:ae:eb:44:54:a8:6b:40:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F2:02:3E:58:6C:4C:DB:C1:2A:2C:A1:65:50:9D:9F:82:AF:BD:3C
X509v3 Authority Key Identifier:
keyid:6F:27:E8:B3:07:E6:56:E9:BE:D9:A4:0E:99:B4:F0:39:77:B7:A8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byfoswfmVum-2aQOmbTwOXe3qNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0d248a-35e0-483d-8f4c-b931ae539e7d/1/byfoswfmVum-2aQOmbTwOXe3qNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:88:18:3d:b9:76:27:62:d9:ce:f5:61:53:51:60:89:64:1e:
76:24:9c:2e:50:7f:d9:ea:93:b5:90:9b:78:d5:bc:72:39:d9:
64:08:fb:29:71:20:17:0c:db:05:af:82:26:48:72:44:98:da:
28:b9:5c:da:11:4d:e5:25:e9:58:86:1e:c3:72:14:24:76:27:
59:d4:61:e6:43:92:c0:8b:bc:2e:98:1b:59:19:e9:82:80:4c:
5c:5a:16:d1:15:49:3c:86:02:67:29:9b:55:c5:9b:ab:3e:42:
5b:81:b7:d2:cc:7a:a7:55:1b:14:05:df:a9:98:5a:ad:4f:48:
16:82:5f:49:4b:85:e7:7b:d2:b0:4f:68:2a:55:cd:61:b3:5e:
e1:59:34:9a:b6:f5:e4:6b:27:19:42:c4:19:5a:f0:14:21:ec:
86:bb:bc:af:89:23:97:1f:82:48:35:19:77:60:f2:3a:d7:70:
88:54:50:bf:05:f6:35:45:ed:4c:4b:99:f0:95:07:58:56:4f:
45:5c:c6:92:21:f7:9a:0d:dc:3b:10:e0:6b:33:33:04:b6:18:
0f:0d:7f:49:95:15:d3:a7:ff:9f:64:be:03:ed:84:05:71:9a:
4a:73:45:56:ad:2f:51:1b:56:92:c0:db:c0:28:aa:62:86:3e:
e9:1e:fa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:18 2026 by rpki-client