Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.mft
File: BYwSFAfCSBa9dsaMCrwzJuEnHCA.mft (raw, json)
Hash identifier: 8XqvKbot8eDzBWDddo6kx2WyZpWa5rERf16le9EADW4=
Subject key identifier: 45:CB:6C:76:66:2D:18:45:1A:DC:C4:57:8D:2A:CB:EE:BB:35:A7:3D
Authority key identifier: 05:8C:12:14:07:C2:48:16:BD:76:C6:8C:0A:BC:33:26:E1:27:1C:20
Certificate issuer: /CN=058c121407c24816bd76c68c0abc3326e1271c20
Certificate serial: 019F90912BA9655D527988AB37BCD43D5C97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYwSFAfCSBa9dsaMCrwzJuEnHCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 20:01:00 +0000
Manifest this update: Thu 23 Jul 2026 20:01:00 +0000
Manifest next update: Fri 24 Jul 2026 20:01:00 +0000
Files and hashes: 1: BYwSFAfCSBa9dsaMCrwzJuEnHCA.crl (hash: AyTw/PXDLah08RG4wHAjws28E9b0SEXY3oBSFKVXVzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYwSFAfCSBa9dsaMCrwzJuEnHCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:2b:a9:65:5d:52:79:88:ab:37:bc:d4:3d:5c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=058c121407c24816bd76c68c0abc3326e1271c20
Validity
Not Before: Jul 23 20:01:00 2026 GMT
Not After : Jul 24 20:01:00 2026 GMT
Subject: CN=45cb6c76662d18451adcc4578d2acbeebb35a73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:7e:55:47:3b:14:14:93:0c:ca:9a:2a:7d:c9:
b0:28:24:70:69:7f:4e:6d:ba:2e:9b:0c:df:8b:c8:
fd:98:e8:8f:84:c1:b7:b4:ef:39:33:be:0d:9b:d7:
e1:b1:ff:96:60:24:da:e2:78:f5:be:e2:21:0d:e3:
65:3d:17:30:6e:23:3b:74:ec:b8:f3:eb:01:53:b1:
b1:9c:13:f8:18:96:99:99:bb:7a:9f:26:88:0f:39:
c0:22:19:ca:5e:5f:71:ff:13:65:a7:1b:05:79:94:
72:b3:1c:7e:6f:ae:ea:05:99:12:d9:fd:ee:21:1a:
0b:f8:86:ca:37:13:40:b6:8e:f3:43:75:52:56:e0:
14:66:9f:b7:bc:3e:e7:69:28:0d:f1:61:3e:80:7c:
fe:93:1f:e2:3c:35:05:b2:ea:41:2d:10:97:4e:03:
9f:a4:dc:77:27:9c:cc:26:ee:6a:bf:1c:87:7c:53:
3f:e3:62:be:31:10:c9:af:0a:87:b5:0a:dc:48:36:
76:c5:36:73:3b:b2:8f:72:63:3c:21:0e:ee:04:42:
f8:34:a3:8c:61:31:49:23:68:a6:65:14:e8:eb:5f:
37:09:68:58:f0:68:68:77:10:1f:cd:c1:4e:3f:bd:
62:00:ff:fb:c8:94:07:7b:06:d3:14:2b:94:f0:bd:
a9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CB:6C:76:66:2D:18:45:1A:DC:C4:57:8D:2A:CB:EE:BB:35:A7:3D
X509v3 Authority Key Identifier:
keyid:05:8C:12:14:07:C2:48:16:BD:76:C6:8C:0A:BC:33:26:E1:27:1C:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYwSFAfCSBa9dsaMCrwzJuEnHCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/65d7b9-ccf9-4b73-b669-3533a512fcf7/1/BYwSFAfCSBa9dsaMCrwzJuEnHCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:90:73:99:25:6e:61:4d:c2:60:84:be:f9:47:6f:fa:e8:38:
41:e9:0b:45:66:e8:ca:c2:bd:6d:84:ee:65:7b:c2:df:1b:a4:
a8:53:df:9e:21:ee:8d:85:0e:d2:b2:3d:84:66:72:dc:5d:32:
34:39:4e:74:66:c7:c2:ee:08:06:13:98:fb:29:41:f9:42:10:
3e:21:6a:68:9a:8c:81:45:33:cc:41:34:7f:2f:d4:3c:0e:a5:
69:a2:b7:c6:ee:6a:30:e2:8f:2e:4c:5f:b3:c1:76:6d:43:8a:
2a:77:4b:e0:c8:bd:90:b7:29:d5:26:ee:4f:cb:4a:f5:2d:2d:
cf:7c:f3:e9:03:3c:40:77:24:b3:5d:e9:e6:77:fb:df:67:69:
a8:58:8f:10:5a:0c:fa:68:3e:42:8c:f9:72:94:13:62:24:6a:
9c:d9:51:fa:25:2d:8b:39:3e:97:06:3f:53:b5:65:0b:d5:df:
3c:bf:35:cf:34:89:7b:98:09:48:a3:d3:ca:8b:12:53:cd:05:
81:56:f9:37:a2:a2:53:b5:80:a4:35:c9:77:19:50:cf:a4:9a:
6d:ec:ff:04:6f:51:e7:53:a4:be:ca:84:87:9c:27:90:6d:80:
1c:d1:05:7d:d7:ca:be:42:42:93:f7:ac:c3:04:8c:89:92:42:
f2:bf:2d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:22 2026 by rpki-client