Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: nG5ROGdS0aNRAJU6kOpDgLVJmHAT2u9NLAaUm/+htoA=
Subject key identifier: B5:E9:A7:10:0D:1A:C3:D3:1C:0A:B5:74:69:9A:4F:53:EB:9D:6C:0E
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 019D2A7290A3816A5B4ED6007A5FB1F8A300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 13E7
Signing time: Thu 26 Mar 2026 14:00:44 +0000
Manifest this update: Thu 26 Mar 2026 14:00:44 +0000
Manifest next update: Fri 27 Mar 2026 14:00:44 +0000
Files and hashes: 1: IrZ58C8B6buvLlSyOFv3Wo1OkFM.roa (hash: o2L90zF16GoErXoUlB+6z8RKE6i50ZTOjxl70b94zb4=)
2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: 8hodSxyuvDx5IpcEfzIxvfDwzVZrMYL1u9XlNu2TygI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:90:a3:81:6a:5b:4e:d6:00:7a:5f:b1:f8:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Mar 26 14:00:44 2026 GMT
Not After : Mar 27 14:00:44 2026 GMT
Subject: CN=b5e9a7100d1ac3d31c0ab574699a4f53eb9d6c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ec:fa:4c:b0:ef:0f:8f:4a:07:e3:ef:21:e9:
14:1e:f5:3d:28:fe:e8:4b:9b:b0:7c:20:52:f4:01:
e5:b6:08:df:e3:7d:0a:dd:5b:92:ab:c1:f6:06:61:
06:3d:2a:c8:6c:00:27:b6:0a:e8:69:4e:dc:be:72:
7b:f4:46:92:ab:72:9d:3f:8c:0d:c2:16:25:c6:fe:
11:64:56:f0:47:06:47:ca:a8:21:3d:56:ad:87:25:
99:e5:bd:39:20:f8:5e:fd:cb:dc:4e:e4:41:54:c5:
37:08:6a:4c:dd:f0:4b:2a:01:96:7b:d1:53:5b:b4:
b3:9d:f3:67:f9:ba:1b:bb:d0:f9:67:0e:d3:23:27:
80:fa:24:33:eb:bc:cb:ab:41:29:af:50:49:b8:b5:
84:2c:69:cc:78:e0:38:b2:ba:83:e9:52:2a:1a:39:
50:2d:ea:06:df:cc:f0:bf:89:c0:be:c9:6a:3f:bb:
51:3c:e0:20:6d:80:10:1d:04:9c:5f:9a:62:5d:5a:
76:3b:f3:ad:2d:30:b6:c2:8e:18:24:e8:ee:ab:cb:
c3:af:43:0c:4d:17:62:dd:40:42:ff:a9:12:6f:bc:
30:ce:f7:91:7a:ac:80:f9:a0:e2:7e:85:90:72:19:
ec:e7:6b:c4:37:dd:6d:b5:13:2a:9a:ba:c8:d4:42:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E9:A7:10:0D:1A:C3:D3:1C:0A:B5:74:69:9A:4F:53:EB:9D:6C:0E
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a1:5f:36:2d:d6:b1:03:c3:39:99:b5:23:9e:cb:9a:7e:f5:
c1:68:49:e0:3d:4f:50:b8:49:2f:e0:6a:4c:84:11:bb:a0:9b:
65:6b:d1:31:d6:2c:82:40:71:18:5a:66:23:f6:d4:13:62:f6:
6e:fb:d3:39:5e:33:8b:b1:37:27:9c:2b:97:b5:4f:80:50:64:
a7:02:57:28:45:40:4b:8b:ce:68:1f:a8:87:92:7c:a3:99:b4:
64:00:5a:32:53:ca:4b:bc:1c:70:77:32:ab:e3:be:c9:40:43:
c5:26:8f:a2:9a:8a:60:8c:f2:85:af:d3:04:9b:e0:9d:91:06:
f0:b0:94:d4:1f:0f:5c:5f:a3:88:09:b9:44:ba:a6:25:57:6f:
27:68:fd:42:83:f5:6d:bc:74:31:1a:8f:37:71:71:a6:6f:fe:
61:a6:55:be:e3:b7:a7:60:58:08:69:87:c3:4a:a2:d7:9f:4d:
08:8c:d0:d7:4d:e3:b5:57:5c:eb:f2:ab:3c:8a:01:45:a4:86:
87:3a:26:5f:43:6b:22:ad:b6:59:7a:cd:c4:25:33:e6:6e:95:
0c:b5:29:30:81:7b:9a:92:6a:29:1d:36:03:0a:6a:6e:2f:ac:
87:5b:ce:dd:70:5a:0d:18:35:4c:6a:b4:34:95:3d:4e:75:8d:
35:63:fd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:25 2026 by rpki-client