Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/d19101-3ea8-4fde-b48b-c5b720e5bd3d/1/ByYUTrr5BLgdCju8BLSocHNVBTM.mft
File: ByYUTrr5BLgdCju8BLSocHNVBTM.mft (raw, json)
Hash identifier: sjF9a3wZEWLUG4SUZpkvNuOVswyXQ8MLkay80LAmKDs=
Subject key identifier: 41:C3:46:45:A9:6E:BE:3A:4B:F2:CF:F4:AE:1B:22:60:EC:E4:13:9C
Authority key identifier: 07:26:14:4E:BA:F9:04:B8:1D:0A:3B:BC:04:B4:A8:70:73:55:05:33
Certificate issuer: /CN=0726144ebaf904b81d0a3bbc04b4a87073550533
Certificate serial: 01A0CCDA5221AD17673A9102496CAD58E127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByYUTrr5BLgdCju8BLSocHNVBTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/d19101-3ea8-4fde-b48b-c5b720e5bd3d/1/ByYUTrr5BLgdCju8BLSocHNVBTM.mft
Manifest number: 2C
Signing time: Wed 23 Sep 2026 06:00:54 +0000
Manifest this update: Wed 23 Sep 2026 06:00:54 +0000
Manifest next update: Thu 24 Sep 2026 06:00:54 +0000
Files and hashes: 1: ByYUTrr5BLgdCju8BLSocHNVBTM.crl (hash: 8B74m/kIh4Sfq3rSUBsNNMnSSw+1Y5XMUgJ4USwc3Dg=)
2: F80AkPvxmwIHyAR6F8toovNMCkM.roa (hash: dK0wx2YRv7h0ZvOvdMVuvxi9wIRvBmc/ZoM0bUsZpsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/d19101-3ea8-4fde-b48b-c5b720e5bd3d/1/ByYUTrr5BLgdCju8BLSocHNVBTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/d19101-3ea8-4fde-b48b-c5b720e5bd3d/1/ByYUTrr5BLgdCju8BLSocHNVBTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByYUTrr5BLgdCju8BLSocHNVBTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:da:52:21:ad:17:67:3a:91:02:49:6c:ad:58:e1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0726144ebaf904b81d0a3bbc04b4a87073550533
Validity
Not Before: Sep 23 06:00:54 2026 GMT
Not After : Sep 24 06:00:54 2026 GMT
Subject: CN=41c34645a96ebe3a4bf2cff4ae1b2260ece4139c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:e7:f1:90:a4:6f:46:12:a5:0e:24:89:20:
7a:29:1a:7b:83:65:8d:70:25:51:65:a7:17:f5:eb:
27:c4:e1:21:2a:98:28:d6:58:0a:bb:33:3d:aa:e4:
62:30:b7:c2:e0:ac:33:6a:f0:10:3d:53:7c:73:e1:
d8:cb:40:04:2e:63:7c:6a:df:bb:98:0c:f9:6a:29:
b9:80:ef:23:28:70:7c:f7:01:03:b1:10:09:c0:2c:
0c:27:32:2c:7a:20:4b:66:ee:ab:7e:a8:e0:46:8c:
26:70:c2:77:c4:06:8d:94:4b:6f:6c:c3:24:c7:f3:
0f:e0:3e:3e:8d:d2:fa:35:52:8d:97:bf:30:f9:38:
52:c8:12:b3:24:36:a0:f1:0a:d4:ae:3e:99:2e:4e:
19:4f:a5:1b:c5:a1:82:68:a9:38:e8:77:42:52:cd:
6f:3c:89:17:5a:74:74:b6:f0:79:6b:1c:07:09:67:
79:ee:6e:ce:5b:3f:4d:5a:e7:7e:87:1b:40:53:8d:
00:c9:f2:54:53:51:78:c9:76:36:6a:87:32:a1:fb:
df:3a:7c:1c:9a:f3:f6:18:9a:8b:ec:d3:d1:6b:cf:
19:8d:82:3a:0e:dd:bf:c5:a3:2d:53:68:53:03:8e:
57:aa:cb:a2:87:06:63:3b:9c:14:07:4e:71:a6:94:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C3:46:45:A9:6E:BE:3A:4B:F2:CF:F4:AE:1B:22:60:EC:E4:13:9C
X509v3 Authority Key Identifier:
keyid:07:26:14:4E:BA:F9:04:B8:1D:0A:3B:BC:04:B4:A8:70:73:55:05:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByYUTrr5BLgdCju8BLSocHNVBTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d19101-3ea8-4fde-b48b-c5b720e5bd3d/1/ByYUTrr5BLgdCju8BLSocHNVBTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/d19101-3ea8-4fde-b48b-c5b720e5bd3d/1/ByYUTrr5BLgdCju8BLSocHNVBTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6a:2c:eb:5e:02:79:c3:1e:52:b0:8e:0b:35:b0:21:99:d2:
5b:33:9d:a3:5a:cc:f5:bc:42:67:43:01:9d:c0:33:67:ee:fa:
26:5e:34:52:4e:95:ee:54:e1:71:e1:93:79:4d:6a:6a:91:db:
a4:37:1e:f7:e5:52:6f:ef:9f:e9:ed:ea:e7:b4:f6:21:75:6f:
7c:c0:67:50:29:67:fb:53:6b:4b:1b:09:b2:1b:f9:90:ae:92:
bf:56:22:6a:73:c9:54:04:57:38:ed:af:dd:d6:1f:d3:af:2c:
cc:f4:62:97:6a:21:3b:fb:c7:00:6a:51:b0:58:3a:c4:a7:c4:
7e:9f:22:43:72:65:1e:f8:38:d0:da:99:b8:b7:40:56:fc:aa:
9e:1e:97:ec:c6:28:0a:a8:f0:a7:8b:5d:43:8e:60:c2:ba:54:
18:af:a9:47:53:81:78:f7:be:28:63:e9:d4:28:41:02:31:98:
c0:fd:a8:31:1a:bd:da:66:5e:e4:5e:ff:be:54:fc:04:7a:8a:
eb:6c:e3:58:86:bf:2c:ec:96:b3:5d:fe:5c:37:dc:0b:39:ac:
f3:49:06:73:6e:54:9f:c4:07:49:d6:67:38:d4:9f:d2:f4:62:
34:2d:dc:66:ed:b7:9c:30:da:99:8a:7f:2a:d1:95:1b:e8:be:
f2:c3:fb:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDM2lIhrRdnOpECSWytWOEnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjYxNDRlYmFmOTA0YjgxZDBhM2JiYzA0YjRhODcwNzM1
NTA1MzMwHhcNMjYwOTIzMDYwMDU0WhcNMjYwOTI0MDYwMDU0WjAzMTEwLwYDVQQD
Eyg0MWMzNDY0NWE5NmViZTNhNGJmMmNmZjRhZTFiMjI2MGVjZTQxMzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkvn8ZCkb0YSpQ4kiSB6KRp7g2WN
cCVRZacX9esnxOEhKpgo1lgKuzM9quRiMLfC4KwzavAQPVN8c+HYy0AELmN8at+7
mAz5aim5gO8jKHB89wEDsRAJwCwMJzIseiBLZu6rfqjgRowmcMJ3xAaNlEtvbMMk
x/MP4D4+jdL6NVKNl78w+ThSyBKzJDag8QrUrj6ZLk4ZT6UbxaGCaKk46HdCUs1v
PIkXWnR0tvB5axwHCWd57m7OWz9NWud+hxtAU40AyfJUU1F4yXY2aocyofvfOnwc
mvP2GJqL7NPRa88ZjYI6Dt2/xaMtU2hTA45XqsuihwZjO5wUB05xppR4VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHDRkWpbr46S/LP9K4bImDs5BOcMB8GA1UdIwQY
MBaAFAcmFE66+QS4HQo7vAS0qHBzVQUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnlZVVRycjVCTGdkQ2p1OEJMU29jSE5WQlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kMTkxMDEtM2VhOC00ZmRlLWI0OGIt
YzViNzIwZTViZDNkLzEvQnlZVVRycjVCTGdkQ2p1OEJMU29jSE5WQlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9kMTkxMDEtM2VhOC00ZmRlLWI0OGItYzViNzIwZTViZDNk
LzEvQnlZVVRycjVCTGdkQ2p1OEJMU29jSE5WQlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB2os614C
ecMeUrCOCzWwIZnSWzOdo1rM9bxCZ0MBncAzZ+76Jl40Uk6V7lThceGTeU1qapHb
pDce9+VSb++f6e3q57T2IXVvfMBnUCln+1NrSxsJshv5kK6Sv1YianPJVARXOO2v
3dYf068szPRil2ohO/vHAGpRsFg6xKfEfp8iQ3JlHvg40NqZuLdAVvyqnh6X7MYo
Cqjwp4tdQ45gwrpUGK+pR1OBePe+KGPp1ChBAjGYwP2oMRq92mZe5F7/vlT8BHqK
62zjWIa/LOyWs13+XDfcCzms80kGc25Un8QHSdZnONSf0vRiNC3cZu23nDDamYp/
KtGVG+i+8sP73w==
-----END CERTIFICATE-----
Generated at Wed Sep 23 14:54:22 2026 by rpki-client