Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
File: BkYy7w6lXgDeU3azwIR2mrZykew.mft (raw, json)
Hash identifier: nEXZQYGrCc3eLHCyBHQcSsJfHsIwZ3rAmrcOgCX34BM=
Subject key identifier: EE:C1:E1:27:8E:FC:42:96:D4:12:AF:48:DF:8D:E8:84:F9:4A:F0:A2
Authority key identifier: 06:46:32:EF:0E:A5:5E:00:DE:53:76:B3:C0:84:76:9A:B6:72:91:EC
Certificate issuer: /CN=064632ef0ea55e00de5376b3c084769ab67291ec
Certificate serial: 019E1CB4E8C25D1991920A90DE31D7447770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkYy7w6lXgDeU3azwIR2mrZykew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
Manifest number: 3C
Signing time: Tue 12 May 2026 15:01:18 +0000
Manifest this update: Tue 12 May 2026 15:01:18 +0000
Manifest next update: Wed 13 May 2026 15:01:18 +0000
Files and hashes: 1: BkYy7w6lXgDeU3azwIR2mrZykew.crl (hash: TYxTKW7gACAOAwYRl4W/5reOaI/0BoLt6RwYCva8mKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkYy7w6lXgDeU3azwIR2mrZykew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:e8:c2:5d:19:91:92:0a:90:de:31:d7:44:77:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064632ef0ea55e00de5376b3c084769ab67291ec
Validity
Not Before: May 12 15:01:18 2026 GMT
Not After : May 13 15:01:18 2026 GMT
Subject: CN=eec1e1278efc4296d412af48df8de884f94af0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e7:45:27:5c:71:04:72:3b:df:d1:4b:5a:aa:
db:fe:54:d5:04:49:1d:28:47:6a:7d:9e:92:b9:66:
80:24:b2:93:48:b3:d4:e4:0a:34:ce:9b:13:b5:2b:
fa:4e:02:6c:d2:5f:ad:c7:01:34:8c:e8:cd:94:14:
4f:4f:08:8e:b3:d8:30:17:a8:9b:a0:fb:09:df:18:
7d:4d:82:0a:f7:ab:57:0d:c8:70:d2:a4:34:80:3a:
0f:c6:41:58:e8:22:72:de:90:03:b8:17:7e:c4:fb:
63:09:a8:71:e5:7f:da:57:bc:40:54:c0:b2:d6:68:
f6:3d:ef:5c:45:fe:c2:6c:84:ba:25:df:fb:9e:e9:
06:01:ba:15:31:dc:4a:62:54:9a:62:fe:41:fa:a5:
0b:e8:49:3d:35:52:bb:62:32:2a:24:f6:e5:62:0e:
68:11:a6:5a:db:67:11:3b:b8:8d:61:63:26:06:02:
5f:1a:9d:36:5d:6a:10:36:38:45:fe:18:80:75:fd:
c8:83:c0:43:6a:9c:cb:c3:1d:d7:a0:13:c3:be:2f:
05:a5:3b:6f:b0:24:eb:4c:de:84:e8:22:0d:c4:a6:
cf:b5:a1:5f:97:ab:c1:1b:c7:bd:23:da:c6:a1:74:
e0:dd:6e:d5:74:91:81:18:31:5a:4c:66:e5:24:73:
41:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C1:E1:27:8E:FC:42:96:D4:12:AF:48:DF:8D:E8:84:F9:4A:F0:A2
X509v3 Authority Key Identifier:
keyid:06:46:32:EF:0E:A5:5E:00:DE:53:76:B3:C0:84:76:9A:B6:72:91:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkYy7w6lXgDeU3azwIR2mrZykew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:7f:af:52:12:df:22:33:7f:17:3a:4b:fd:49:91:b4:f0:1b:
e9:28:3d:4d:18:8f:05:8a:83:84:29:2b:27:2b:4f:73:24:1b:
d8:cf:ae:b1:84:12:61:d3:88:66:2c:f0:82:e1:79:ca:41:ea:
ce:81:98:ff:6f:6e:97:b8:f0:fa:6a:8e:f2:df:58:55:d4:03:
a9:5a:3b:86:5e:56:7c:34:16:b4:fa:19:6e:e7:5b:91:d9:fb:
d6:e9:72:41:1f:b1:08:50:af:d9:6d:b8:28:8c:72:b4:a7:56:
74:08:92:b0:43:d7:f7:53:d7:e4:71:4c:85:6a:af:1c:82:a7:
cc:1c:45:1d:38:3c:1a:6f:da:2d:13:56:e6:f4:0b:c6:88:33:
62:19:fd:d6:47:b8:ae:15:17:8d:30:5c:ec:73:7c:1d:3b:33:
7a:15:98:73:b1:0d:1b:da:76:6c:0a:df:22:f7:43:ce:9e:b2:
59:55:f1:51:3c:29:8c:ce:50:3f:98:19:70:c9:67:e4:f4:7c:
f2:1e:44:01:01:56:fb:10:96:d0:f5:29:35:af:54:67:44:8a:
5f:65:24:78:f1:b2:23:0b:2a:fb:a6:72:af:85:c3:ad:29:21:
fb:45:87:eb:7c:d3:f1:fc:2a:28:c7:e6:2b:9e:f9:ca:cf:1a:
8e:8b:82:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:08:00 2026 by rpki-client