Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.mft
File: BYwSFAfCSBa9dsaMCrwzJuEnHCA.mft (raw, json)
Hash identifier: jnTN/XE5dEOfAFrpCaTWHzrcUPE0F8PzNIF71u9buJU=
Subject key identifier: 20:89:A5:AA:75:AC:3B:F8:74:8F:83:25:D6:B6:5A:D3:8F:F9:4D:C5
Authority key identifier: 05:8C:12:14:07:C2:48:16:BD:76:C6:8C:0A:BC:33:26:E1:27:1C:20
Certificate issuer: /CN=058c121407c24816bd76c68c0abc3326e1271c20
Certificate serial: 01A0CF3634C9DFFBB419469A1CCE34AE28F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYwSFAfCSBa9dsaMCrwzJuEnHCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 17:00:31 +0000
Manifest this update: Wed 23 Sep 2026 17:00:31 +0000
Manifest next update: Thu 24 Sep 2026 17:00:31 +0000
Files and hashes: 1: BYwSFAfCSBa9dsaMCrwzJuEnHCA.crl (hash: 7osuCXeRz/dB0G+IGfiBJQSKzn1kVEYQkB3TG+QPg3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYwSFAfCSBa9dsaMCrwzJuEnHCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:34:c9:df:fb:b4:19:46:9a:1c:ce:34:ae:28:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058c121407c24816bd76c68c0abc3326e1271c20
Validity
Not Before: Sep 23 17:00:31 2026 GMT
Not After : Sep 24 17:00:31 2026 GMT
Subject: CN=2089a5aa75ac3bf8748f8325d6b65ad38ff94dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:63:d5:31:ff:9e:8d:dc:82:7d:f7:98:2c:
38:e3:e6:bf:cf:7c:3a:49:19:40:4d:cf:aa:f5:59:
5b:5f:1c:8f:4f:a3:a1:ee:56:c1:a6:d6:e3:6f:0c:
f7:1c:97:00:58:93:34:7c:db:bd:60:93:23:9d:16:
01:c3:8a:0c:da:9c:06:62:7a:a1:c9:8f:18:e1:fb:
88:6f:b9:27:6e:8c:78:c3:cb:bb:1b:da:61:c1:4b:
56:c0:0e:6d:3b:9f:e9:a2:7b:97:f9:25:04:40:85:
9e:00:f8:aa:91:03:ed:96:95:45:5e:08:68:77:f9:
ef:53:e4:f2:c2:38:e3:fa:83:81:ee:74:78:dc:86:
4e:76:71:02:36:29:08:b6:04:a6:c5:3f:a4:ae:a6:
96:62:7f:e3:48:4d:68:f7:7a:c7:c8:c3:6a:a0:e9:
d4:47:59:b4:c3:09:f8:35:3e:fa:55:e4:23:89:07:
50:f7:91:c7:42:a8:92:96:42:81:27:bc:af:a1:ab:
9f:eb:a6:05:0d:21:65:97:6d:3d:38:98:50:26:2a:
78:38:72:e0:e7:c2:1f:9b:57:7a:02:7a:45:ba:ad:
34:d9:9e:da:a2:f8:d2:8f:a6:02:9f:8d:0c:22:3d:
ab:38:29:e4:c3:4c:8d:65:23:b7:66:e1:8a:eb:6c:
3b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:89:A5:AA:75:AC:3B:F8:74:8F:83:25:D6:B6:5A:D3:8F:F9:4D:C5
X509v3 Authority Key Identifier:
keyid:05:8C:12:14:07:C2:48:16:BD:76:C6:8C:0A:BC:33:26:E1:27:1C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYwSFAfCSBa9dsaMCrwzJuEnHCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:27:34:83:b3:36:e4:b8:6e:e4:82:f9:31:81:48:cc:86:85:
e3:01:68:af:33:e7:68:42:f9:91:c8:4d:25:8e:24:d7:ce:ef:
87:99:20:ce:08:29:75:4c:8b:1f:5a:dc:68:14:91:ce:8e:8b:
4f:2f:1e:7c:55:48:fd:6f:d1:f7:f2:c7:91:09:f1:16:52:88:
69:1c:7a:e3:01:53:df:a9:ce:6a:e9:80:26:66:a8:9f:4c:1d:
4a:18:60:eb:3e:6e:e3:6c:91:d7:fb:9f:7f:6b:47:a1:80:24:
3f:4b:23:e3:09:20:56:4c:24:1b:d8:5c:db:5d:42:a2:28:b6:
c7:e1:20:d7:ac:0b:03:a2:b6:65:36:7a:03:a2:56:e4:d3:ea:
87:36:7c:2b:a9:85:25:b4:23:d2:de:f6:90:b9:77:7b:9e:72:
19:67:eb:d0:2e:3b:ea:e6:58:34:18:8b:52:fe:ca:de:eb:50:
48:62:05:a6:c2:51:ea:44:55:28:4c:03:f5:b1:40:25:f3:3a:
46:5e:4f:e3:91:f8:35:90:91:cd:1d:43:1a:e7:5d:1c:1a:be:
81:9c:65:8e:6e:70:0b:10:13:67:5a:eb:6b:a5:19:be:bc:3c:
06:f6:a9:3b:11:ef:97:fd:04:93:47:63:32:6d:9d:19:72:b1:
8c:13:5a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:48:52 2026 by rpki-client