Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
File: BkYy7w6lXgDeU3azwIR2mrZykew.mft (raw, json)
Hash identifier: 0408DJ0eXZPSnEp7JW8mMXKVHOHmM4ASdJvT9X1sBwo=
Subject key identifier: 69:60:5D:C1:5F:F2:83:6D:5F:41:AB:34:53:45:81:1F:EF:A4:0D:B6
Authority key identifier: 06:46:32:EF:0E:A5:5E:00:DE:53:76:B3:C0:84:76:9A:B6:72:91:EC
Certificate issuer: /CN=064632ef0ea55e00de5376b3c084769ab67291ec
Certificate serial: 01A0D7CCA95D85484739C17C57DF472B4DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkYy7w6lXgDeU3azwIR2mrZykew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
Manifest number: 01A6
Signing time: Fri 25 Sep 2026 09:01:49 +0000
Manifest this update: Fri 25 Sep 2026 09:01:49 +0000
Manifest next update: Sat 26 Sep 2026 09:01:49 +0000
Files and hashes: 1: BkYy7w6lXgDeU3azwIR2mrZykew.crl (hash: VZejjjjWXIf7/5aFm1wNsuIMQCjaeMYXqBVRBu+UCmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkYy7w6lXgDeU3azwIR2mrZykew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:a9:5d:85:48:47:39:c1:7c:57:df:47:2b:4d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064632ef0ea55e00de5376b3c084769ab67291ec
Validity
Not Before: Sep 25 09:01:49 2026 GMT
Not After : Sep 26 09:01:49 2026 GMT
Subject: CN=69605dc15ff2836d5f41ab345345811fefa40db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e4:c7:f0:be:83:a2:38:66:a6:9e:09:b3:b9:
99:d5:88:88:23:f4:fa:91:9f:98:44:bf:b0:8f:c3:
46:4e:e3:a3:a8:39:4c:3b:02:c5:21:90:9b:14:68:
04:bc:80:68:37:88:0d:00:4f:04:02:e3:96:09:c1:
ee:b2:76:61:24:b3:a1:98:da:73:35:9c:0d:40:d7:
3a:06:70:62:17:39:98:88:1a:1a:f7:14:a2:92:77:
af:2e:b1:9a:96:9d:ff:24:0c:43:f2:7e:c2:6e:0d:
c4:9e:4a:d1:fb:f6:c4:51:e3:10:48:7c:0e:42:82:
7e:82:bc:6d:45:c0:2f:53:d9:e9:24:bf:78:42:af:
08:1c:fd:1d:ab:ac:67:7a:35:ff:c1:ee:db:e0:71:
55:25:ce:da:6a:57:d5:44:be:c7:8b:9d:57:01:38:
4d:3b:7c:89:e1:a8:1f:3f:5b:2f:43:62:85:88:05:
0b:08:96:4c:0b:a4:34:9d:ff:ce:b4:77:26:c5:7a:
1d:aa:0f:1e:a5:80:38:db:d5:5b:f6:cd:33:6b:21:
4b:1a:de:50:51:30:36:37:24:e2:48:a8:00:57:d6:
fe:e0:6a:31:e4:0a:8c:f0:57:44:1d:12:1d:6c:93:
b3:62:70:38:ba:43:43:10:5b:a2:9d:82:07:2e:53:
19:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:60:5D:C1:5F:F2:83:6D:5F:41:AB:34:53:45:81:1F:EF:A4:0D:B6
X509v3 Authority Key Identifier:
keyid:06:46:32:EF:0E:A5:5E:00:DE:53:76:B3:C0:84:76:9A:B6:72:91:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkYy7w6lXgDeU3azwIR2mrZykew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:cd:14:73:bf:09:6a:57:fa:d2:4b:80:c3:5b:ba:9c:d5:f5:
93:81:bd:20:41:fb:ec:50:b4:64:25:49:47:ca:48:86:0a:41:
2a:8e:cf:79:7a:3c:10:ac:00:8a:24:9e:35:ab:d3:0e:c4:95:
69:8b:50:e4:13:f5:00:7d:15:02:a4:52:79:c3:b1:65:cc:8f:
03:ba:12:5e:36:ed:05:75:0b:ff:b8:3c:87:8a:12:06:9a:68:
f1:8f:59:e6:20:36:9c:9c:2e:61:6a:8e:e4:d5:7f:f9:01:8c:
80:60:26:d1:da:83:7b:5d:0d:4c:dd:cc:34:ee:68:97:3b:63:
35:7a:5f:90:65:f4:4f:c3:46:24:1f:9e:97:66:81:18:38:4a:
94:ed:1a:b4:ec:52:f1:1f:74:b4:71:4a:cf:c9:78:05:24:fd:
8b:73:93:8c:5e:47:66:d8:81:4e:b9:a3:0b:80:e5:44:b3:08:
0c:33:d6:9c:7d:89:b4:4d:38:dd:15:75:f7:7c:a9:da:b6:f9:
2f:8f:b6:4b:72:b6:a5:b6:02:f5:54:4b:8f:d6:c3:d0:81:4a:
af:f0:4b:c3:dd:c1:f6:4c:60:d4:fc:fb:d0:06:b3:40:0c:52:
f9:72:14:10:2b:51:33:b2:00:24:93:78:a1:b6:df:20:b2:89:
a3:41:cd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:30:34 2026 by rpki-client