Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
File: BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json)
Hash identifier: q76oRIQ0u1sE+b2fxyzx7wg5/5+xWFFzVj80n9jWkmw=
Subject key identifier: EA:70:F7:3B:91:42:E4:C8:A3:CA:F0:04:D2:A7:E1:DB:7C:C8:00:8E
Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
Certificate issuer: /CN=05899f3976487038a3fa6343952b14b4d072b33d
Certificate serial: 01A0CBFE49051C46F89105D65D44102F1FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
Manifest number: 17A4
Signing time: Wed 23 Sep 2026 02:00:34 +0000
Manifest this update: Wed 23 Sep 2026 02:00:34 +0000
Manifest next update: Thu 24 Sep 2026 02:00:34 +0000
Files and hashes: 1: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: 4p/dv1c07JiQ2Dx0zC08vdkGBMCAYbf61HXQhLgeaNw=)
2: T6YNdFIaF-czM-g1VhpOgA_jz2g.roa (hash: FtUCQo9ogO2LSRjNlogGTjSuxhZ4zAwyRhfB5dWUMs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:49:05:1c:46:f8:91:05:d6:5d:44:10:2f:1f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d
Validity
Not Before: Sep 23 02:00:34 2026 GMT
Not After : Sep 24 02:00:34 2026 GMT
Subject: CN=ea70f73b9142e4c8a3caf004d2a7e1db7cc8008e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b6:ee:51:df:21:2c:f5:2c:6f:84:20:0e:db:
d0:d6:ab:8e:cf:61:fa:38:c1:59:e9:2c:95:0a:ca:
9d:99:c2:20:1b:27:a9:31:84:48:ab:5c:ca:61:69:
2a:cd:e3:f0:ec:2c:c3:9b:f0:ca:97:c9:17:08:20:
3f:bd:91:85:b0:1f:e6:cf:4d:63:7b:17:4b:3e:09:
bc:8e:6b:74:70:d8:a7:87:de:7a:f5:5f:c6:1f:86:
ee:e4:8f:61:e9:88:2b:ba:7b:86:d4:be:a6:46:ef:
d4:7b:e8:35:32:47:64:8f:14:12:84:7a:fd:bc:a4:
a4:f1:2a:b7:0b:53:aa:00:82:a0:34:07:dd:ac:92:
8c:ef:73:bc:84:be:4d:9a:10:cf:18:a4:01:d2:2f:
9f:18:fe:d3:07:af:c0:ba:68:65:dd:04:46:0a:d0:
b9:3a:0e:9d:ad:65:17:80:d1:6a:6a:44:e0:84:f9:
c5:7d:4e:37:9c:0e:4f:9c:70:4c:44:cd:d9:56:b5:
a6:2a:f8:79:2c:d1:eb:6d:9c:c0:97:89:50:0f:18:
c1:fa:6c:bb:c7:e5:ea:2f:27:a0:83:f1:aa:44:0f:
03:ff:6f:56:43:fa:fc:bd:b6:ad:0c:d4:70:f1:51:
42:2a:54:fa:87:4c:e4:67:70:fe:e0:f2:1c:f1:bb:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:70:F7:3B:91:42:E4:C8:A3:CA:F0:04:D2:A7:E1:DB:7C:C8:00:8E
X509v3 Authority Key Identifier:
keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6e:a3:38:af:dc:6c:c0:8b:85:8f:44:40:c4:fa:47:16:cf:
66:4d:5c:23:88:7f:43:b3:09:c4:78:e8:e6:87:e2:9a:d4:36:
5f:36:3c:47:28:ae:b5:a0:8d:53:a3:30:7a:92:13:37:18:62:
f3:e7:c6:e8:e0:4e:46:1b:29:7d:ba:87:1e:4e:10:8b:88:b9:
f2:99:07:7c:dd:3d:50:24:d1:8f:bd:38:ad:3f:fa:3a:74:14:
f9:76:07:ab:8c:f2:85:23:bf:5a:c9:7f:ff:a8:f4:3b:d9:b9:
06:0b:59:87:48:90:14:7e:1e:05:54:e9:13:a1:14:8c:d8:00:
bf:c9:4c:d5:4e:4c:fa:07:a9:9c:63:20:83:18:77:cb:d2:fb:
ff:5e:62:fd:7c:2d:63:3a:2c:df:08:09:d3:16:c6:f7:fc:68:
92:b0:b4:e3:45:07:46:28:a5:f2:0b:40:37:f0:13:24:cb:01:
b6:28:da:04:97:03:47:8e:7f:c8:e6:d5:f2:02:6e:f6:86:d9:
1a:3f:f6:b4:49:50:de:fb:d2:33:18:00:48:24:c2:1b:50:28:
19:74:7d:1b:e9:6f:51:fc:d7:02:bd:9c:9e:00:0f:0c:00:95:
a4:3e:e7:79:9d:60:d1:2e:43:d4:e0:34:af:db:d7:68:38:1d:
2e:34:5d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:47:20 2026 by rpki-client