Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
File: BkYy7w6lXgDeU3azwIR2mrZykew.mft (raw, json)
Hash identifier: cekDtCOFZTH+H92uX0G0xTGfFd2DOMcwCwUoIM3NnIs=
Subject key identifier: 99:74:13:AE:3D:D9:8A:28:72:A6:B2:FB:C3:3A:F6:12:79:5F:D5:56
Authority key identifier: 06:46:32:EF:0E:A5:5E:00:DE:53:76:B3:C0:84:76:9A:B6:72:91:EC
Certificate issuer: /CN=064632ef0ea55e00de5376b3c084769ab67291ec
Certificate serial: 019F8F7E882CB29F32F086A5BD514D520433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkYy7w6lXgDeU3azwIR2mrZykew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
Manifest number: FC
Signing time: Thu 23 Jul 2026 15:01:01 +0000
Manifest this update: Thu 23 Jul 2026 15:01:01 +0000
Manifest next update: Fri 24 Jul 2026 15:01:01 +0000
Files and hashes: 1: BkYy7w6lXgDeU3azwIR2mrZykew.crl (hash: Gkxt/X0NWqNzVYXOO+RE1HKwG1zkOenoVnDefdeMQ/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkYy7w6lXgDeU3azwIR2mrZykew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:88:2c:b2:9f:32:f0:86:a5:bd:51:4d:52:04:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064632ef0ea55e00de5376b3c084769ab67291ec
Validity
Not Before: Jul 23 15:01:01 2026 GMT
Not After : Jul 24 15:01:01 2026 GMT
Subject: CN=997413ae3dd98a2872a6b2fbc33af612795fd556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:b1:2c:1b:37:99:a8:2c:b5:0a:04:ca:e1:
6a:95:8f:05:01:f3:5d:76:6e:da:fc:07:a9:57:0f:
2b:5f:aa:6f:2c:ae:5e:c1:a4:3c:f8:6c:1e:4a:42:
2e:34:03:49:f2:bd:1e:e5:8c:b3:a8:59:4e:a0:f3:
e7:35:16:44:34:83:5b:3c:4c:6b:c2:4e:66:89:a3:
ed:ed:fa:bf:23:f5:ed:e8:68:3e:e1:d1:e7:94:fb:
47:36:31:bd:90:4c:64:16:32:4f:44:07:38:f5:75:
9e:5c:83:68:cc:ea:bb:b8:4d:7d:26:db:81:16:7e:
63:6f:43:ec:a9:b6:27:f3:80:65:32:10:49:d6:13:
5d:3f:70:5a:81:9b:8c:c3:93:17:00:63:a8:70:b4:
e4:13:a5:1e:3b:a7:f6:fe:64:11:ca:43:50:9f:c5:
9d:5d:40:10:6a:4b:a0:54:f3:3a:95:90:6c:78:f2:
89:dc:c0:a5:f0:ac:37:f6:11:bf:bb:ec:37:e6:e2:
9c:b4:38:e2:74:52:87:c1:bd:ec:00:30:71:9a:77:
4d:d9:d3:13:1c:ca:76:8d:b4:c6:24:af:be:58:3c:
30:63:b8:35:1b:56:58:b5:9b:b8:17:95:2b:8b:aa:
4c:0a:1c:77:6d:2d:af:54:8f:56:3f:cb:78:e1:ea:
a1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:74:13:AE:3D:D9:8A:28:72:A6:B2:FB:C3:3A:F6:12:79:5F:D5:56
X509v3 Authority Key Identifier:
keyid:06:46:32:EF:0E:A5:5E:00:DE:53:76:B3:C0:84:76:9A:B6:72:91:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkYy7w6lXgDeU3azwIR2mrZykew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/aa89ce-0870-4607-a5c6-ca38d0ebfba8/1/BkYy7w6lXgDeU3azwIR2mrZykew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:96:18:1c:d4:b0:c8:03:b7:fd:25:d4:0f:1f:d6:77:19:28:
f8:13:bf:9a:28:cf:35:66:64:da:c0:36:b5:68:97:5b:3e:f5:
52:3f:ca:82:51:68:4c:c2:cf:f3:0a:7a:7d:11:fd:7b:6c:df:
0b:ca:fa:a2:29:37:d5:56:4d:f4:6c:b9:15:2c:13:ab:4e:f4:
82:b6:90:ff:27:f8:76:37:0a:dc:77:2d:9b:35:fe:c6:97:bf:
64:c2:3c:17:82:b7:9a:8e:80:54:e2:17:f2:18:94:1f:d8:ad:
c5:42:65:af:5a:ff:bb:94:70:4b:b7:4f:c7:23:72:86:28:51:
9e:6b:63:6a:b7:f0:a5:69:09:ee:89:b1:91:2e:06:41:4e:ee:
e6:1a:51:f8:58:19:da:51:81:50:2c:15:c1:d6:4f:3f:78:fd:
80:cb:58:b1:03:80:58:36:a4:6a:a2:6c:41:cf:41:e3:05:7b:
4d:91:a3:07:ec:90:1b:ea:d8:64:c3:6b:f9:71:df:d7:2c:c4:
54:80:6e:33:d6:84:17:ac:73:81:3b:ae:21:89:64:df:eb:72:
b5:5f:5b:b3:5f:ba:29:f7:6c:f9:5c:1e:68:0a:4f:ee:e4:60:
2c:fb:5e:50:79:31:68:38:83:50:eb:31:37:5d:64:d1:b4:46:
4a:12:ab:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:41 2026 by rpki-client