Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
File: BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json)
Hash identifier: 6D6RoPZHJQn6TIBKK59IxLC6iJMDR1W09Zmfd/XNnCA=
Subject key identifier: B4:C3:F9:70:01:12:8D:7F:7B:43:F2:DD:B3:1D:35:3D:61:C8:BA:0D
Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
Certificate issuer: /CN=05899f3976487038a3fa6343952b14b4d072b33d
Certificate serial: 019F8F46E854BFF0D570F5581AFCC61D2B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
Manifest number: 1700
Signing time: Thu 23 Jul 2026 14:00:16 +0000
Manifest this update: Thu 23 Jul 2026 14:00:16 +0000
Manifest next update: Fri 24 Jul 2026 14:00:16 +0000
Files and hashes: 1: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: 1egsaGnhlg37Gy0uNWeTMcmy0QOM2QSUW2QCyK9jggc=)
2: T6YNdFIaF-czM-g1VhpOgA_jz2g.roa (hash: FtUCQo9ogO2LSRjNlogGTjSuxhZ4zAwyRhfB5dWUMs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:e8:54:bf:f0:d5:70:f5:58:1a:fc:c6:1d:2b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d
Validity
Not Before: Jul 23 14:00:16 2026 GMT
Not After : Jul 24 14:00:16 2026 GMT
Subject: CN=b4c3f97001128d7f7b43f2ddb31d353d61c8ba0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:35:40:61:55:22:be:e0:f2:f0:40:a5:37:1d:
e9:b3:cc:d4:48:e6:c7:b4:aa:42:2b:dd:cf:65:4f:
d3:72:1a:d9:7e:aa:9b:32:b1:c8:5a:52:ef:25:c3:
f7:f1:78:a0:af:79:6e:ab:8a:d7:71:17:c5:9d:2e:
b8:ca:29:6a:33:d5:01:f2:f9:94:a2:bb:5f:7e:d3:
25:ba:9c:40:e3:2f:fd:b3:5c:d8:15:65:d5:52:03:
4b:a0:a7:73:79:62:b5:32:d0:a3:be:a8:2a:5f:ec:
ca:d8:3e:42:ee:70:98:78:4a:39:11:2b:c8:d8:68:
53:07:78:4d:44:b6:29:46:7e:f8:6a:3b:d0:f9:9f:
ee:b8:ee:86:28:d6:72:f0:e5:a6:b5:70:66:c6:3c:
92:de:9d:94:a0:80:0d:4b:07:37:22:d5:f5:7c:0b:
15:be:cc:45:95:65:64:d8:de:33:f0:b6:24:9c:e7:
39:00:67:85:59:05:52:0f:68:d1:c0:73:f1:ec:22:
f6:4e:64:24:7e:ed:e6:44:29:57:9f:8f:4a:bf:54:
7d:91:14:fb:2c:52:32:dc:0c:f8:a0:c9:1f:0f:cc:
a2:a4:20:ff:62:6e:81:26:0e:d8:09:cc:75:f1:b8:
e7:fb:aa:3c:7d:a7:06:7b:a7:98:49:17:89:ff:32:
71:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C3:F9:70:01:12:8D:7F:7B:43:F2:DD:B3:1D:35:3D:61:C8:BA:0D
X509v3 Authority Key Identifier:
keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:c0:14:99:33:2d:30:f8:59:88:87:e6:e8:69:8d:57:50:28:
31:ca:21:23:b3:c1:16:3c:2d:87:eb:57:cd:a5:61:ba:08:a6:
1a:00:97:60:a8:06:b0:49:20:66:2e:0f:94:90:f0:15:c4:39:
fe:b4:52:34:bc:a8:3e:ba:d2:ad:0c:5f:d4:32:8f:4a:7d:6e:
af:c8:30:ee:e8:34:4b:df:30:66:a4:1e:ad:8f:51:04:1d:f1:
9a:f9:af:b4:0d:00:2c:85:8c:5f:93:64:02:0b:4f:54:b3:e1:
47:37:78:39:42:d7:d7:f9:6a:ba:71:12:5b:00:23:01:b8:a1:
96:d4:9c:9b:db:d4:e4:9f:3a:9b:9b:0b:c9:7f:47:71:ce:9d:
34:2b:8c:47:c1:74:67:87:d8:64:df:75:e2:e1:27:e2:05:9b:
dc:43:31:be:6a:c4:06:40:bd:eb:89:bf:5f:cf:d9:49:22:55:
7f:e7:4e:61:5c:60:04:11:ff:d3:21:f0:95:c2:d8:91:00:6c:
ae:8e:e7:e3:a3:c5:09:21:6c:74:32:62:6c:6b:e4:ed:71:c4:
bc:25:15:d8:b8:d8:c7:b2:62:08:b0:38:72:11:b9:29:89:36:
f1:4c:e7:93:e9:3d:71:68:c6:cb:72:ce:eb:01:20:9e:d0:52:
21:81:c3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:51:59 2026 by rpki-client