Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: RtqI+CYrs/eQ4n4rPcyRlcWy4wWLOjP9Alr/KKQNPpk=
Subject key identifier: 76:47:14:58:CD:0F:1E:BE:F1:BD:7F:65:1E:2E:8B:61:94:D2:DF:EE
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 019E1C7DA95F4D5E8A1432B86EB0FEF81A99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 1465
Signing time: Tue 12 May 2026 14:00:57 +0000
Manifest this update: Tue 12 May 2026 14:00:57 +0000
Manifest next update: Wed 13 May 2026 14:00:57 +0000
Files and hashes: 1: IrZ58C8B6buvLlSyOFv3Wo1OkFM.roa (hash: o2L90zF16GoErXoUlB+6z8RKE6i50ZTOjxl70b94zb4=)
2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: CN3QczfGI1P03TKTSsMxQeCQ+QBwyyiaX4QaZ1nzXn8=)
3: hwijRhZ95zu2fzBu0boOesOms6U.roa (hash: HDiWzBkayEcGgyJWBbNXaqDrPFIhI/bMMXg8al08Sh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:a9:5f:4d:5e:8a:14:32:b8:6e:b0:fe:f8:1a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: May 12 14:00:57 2026 GMT
Not After : May 13 14:00:57 2026 GMT
Subject: CN=76471458cd0f1ebef1bd7f651e2e8b6194d2dfee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:bb:b5:8d:04:ec:69:9c:4c:6a:ac:19:e2:
f4:a5:ba:bf:a4:e1:5d:fe:dd:82:1a:9f:e1:3f:a6:
44:7d:08:42:36:5f:03:fb:6e:24:33:e6:9e:b7:64:
1a:f8:ac:57:86:42:2a:06:f7:76:31:83:db:a4:cd:
6f:61:d4:34:a9:1c:1e:1a:ef:2f:f8:37:70:65:5a:
a3:56:f5:67:c4:cb:ee:1e:66:dc:04:42:4e:5b:0e:
0e:9a:ce:81:be:78:3d:bb:65:a5:23:3a:63:f6:3a:
cf:32:65:40:de:cd:30:5a:49:8b:e4:27:ca:f8:c5:
1e:13:71:41:bc:df:26:1e:f7:42:f2:7a:9d:7c:16:
3e:05:97:d7:68:b2:2d:f8:c8:aa:f0:90:f5:32:77:
ce:76:1b:5f:fe:52:4c:14:29:73:9a:03:ac:25:5d:
7d:e0:67:12:c0:06:8a:2c:66:b9:84:a5:5e:a7:d0:
87:1d:1a:49:a6:0c:57:ae:1a:6d:72:51:d9:dd:8d:
99:f2:d0:b0:db:3a:c0:c8:40:44:ae:73:77:95:3a:
f8:ce:1f:a4:f0:77:05:1b:d2:79:a1:26:d2:30:75:
ee:95:2e:33:72:c9:32:56:7b:fe:da:17:59:4b:17:
bd:2f:61:fd:df:37:c9:c2:58:53:30:0e:59:e7:4f:
69:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:47:14:58:CD:0F:1E:BE:F1:BD:7F:65:1E:2E:8B:61:94:D2:DF:EE
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ce:99:67:fb:86:f8:95:7b:40:e0:b1:6b:8c:a4:18:9c:dd:
7d:a9:3a:83:08:83:51:be:7c:92:1d:64:30:60:69:53:90:0c:
91:6b:50:7c:16:09:ee:af:7a:c4:ef:cd:14:93:7d:26:ea:f5:
3e:7e:24:bd:b0:fa:ce:06:48:13:5a:55:07:aa:c2:e7:ff:63:
65:c5:82:45:6d:0c:17:bd:0f:dd:60:da:a8:14:0b:4c:89:aa:
70:fb:5e:54:9d:b5:9e:a2:6e:43:a8:39:72:f6:f6:33:e7:ca:
c5:4d:ba:cd:2a:90:f7:ec:19:13:12:07:b2:59:55:49:fc:cd:
f7:ab:fd:af:94:4a:58:92:57:5b:83:5d:00:c8:8a:8b:d1:30:
12:90:82:c9:32:cf:c2:f1:06:c0:25:78:73:1e:92:65:c5:14:
60:d2:85:68:61:cd:31:45:ae:0a:64:04:0b:b0:c6:b6:40:d3:
59:f3:aa:54:fb:28:5b:4a:18:d2:bb:6c:19:19:c4:37:71:28:
cd:ff:47:ab:e2:6b:96:da:b8:57:b4:e2:b1:e6:a1:5a:71:dd:
c3:2c:ae:e6:43:52:d1:cf:0b:d7:7f:c1:09:e0:2e:8f:2d:71:
54:46:46:4f:82:aa:7f:d0:ab:41:f1:e0:8c:30:93:c8:06:3e:
9b:08:73:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:20 2026 by rpki-client