Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
File: ByngRZqo6h_bFg5AJH_h12CufA0.mft (raw, json)
Hash identifier: vmmXCStnOFXCbUVax95R7+B4bsWD2dfAtCzDOURhFtw=
Subject key identifier: 57:0D:2D:BB:E6:5D:11:25:F0:08:BB:27:77:8D:9B:C4:D7:A5:E4:87
Authority key identifier: 07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
Certificate issuer: /CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Certificate serial: 019F8F478900EF316DF272034C6159B64C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
Manifest number: 08DB
Signing time: Thu 23 Jul 2026 14:00:57 +0000
Manifest this update: Thu 23 Jul 2026 14:00:57 +0000
Manifest next update: Fri 24 Jul 2026 14:00:57 +0000
Files and hashes: 1: ByngRZqo6h_bFg5AJH_h12CufA0.crl (hash: 4xlJHx4JoqLQfMTCPCHuo8m3uEUT8okuxQXUfIMVw/o=)
2: SvlrZHFg845ZhN1Rz3nRAlL1Haw.roa (hash: QGEa378gKuRJuCW4Gpo84qPKj3oloBziyCo0m8Zc5kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:89:00:ef:31:6d:f2:72:03:4c:61:59:b6:4c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Validity
Not Before: Jul 23 14:00:57 2026 GMT
Not After : Jul 24 14:00:57 2026 GMT
Subject: CN=570d2dbbe65d1125f008bb27778d9bc4d7a5e487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4f:54:31:bb:34:c3:9a:d5:f1:f7:f6:c3:bd:
10:2c:68:c8:f3:13:4c:e8:19:26:b4:0a:d7:5e:da:
11:cc:34:4a:87:0c:c5:3b:d0:f1:48:48:7e:95:85:
37:50:a0:7a:75:a3:c3:68:dc:4c:d8:98:13:e1:3a:
b5:c2:77:c5:9d:6d:75:14:58:b9:86:40:18:2d:9e:
cd:68:7e:81:c2:86:58:72:d4:85:0f:ef:f4:a6:db:
b0:ed:22:97:58:72:cd:49:e1:e4:06:d9:b3:42:67:
a8:6a:81:9c:b9:33:ca:96:84:ff:0c:ed:ec:20:be:
6b:d9:4c:28:d7:f2:0d:6b:cf:df:0c:22:b2:a6:13:
ea:58:ff:d6:79:15:ea:a6:f7:fc:c5:68:1d:1d:26:
52:89:c0:d1:1c:3d:a8:44:05:c3:c3:1f:9e:88:73:
08:24:22:58:b5:cf:73:b2:0f:15:77:f0:4c:b9:9f:
a6:2b:f1:4a:cc:b9:dd:de:8e:a9:e2:57:f5:fb:92:
a6:5c:0d:d5:77:37:5b:16:73:dc:b2:b6:f9:9a:ce:
13:94:08:3e:6d:31:79:70:f2:df:f3:eb:ee:4c:05:
34:29:f5:d4:71:ff:e7:20:28:de:08:5e:79:e9:73:
14:f0:5f:f7:b1:5f:ea:8a:d8:db:2c:ec:6a:f7:b5:
dd:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0D:2D:BB:E6:5D:11:25:F0:08:BB:27:77:8D:9B:C4:D7:A5:E4:87
X509v3 Authority Key Identifier:
keyid:07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:29:f4:e4:48:b4:d1:6c:c4:13:8d:c8:94:f6:b9:64:f1:d5:
bb:0e:64:c0:d1:dd:1f:28:91:03:09:c4:29:23:48:dc:27:c9:
d4:71:8c:45:79:89:04:ca:b5:d1:4f:8a:f1:6d:ad:a6:f4:7d:
0c:05:a9:4a:89:14:4d:50:71:d7:d8:95:a4:e2:2f:28:6e:58:
4f:e8:2a:0b:79:c4:f5:51:d5:a2:04:b4:27:5b:b2:06:52:78:
b9:eb:a0:7a:87:c7:8f:d8:22:a2:83:83:c7:75:1b:03:23:78:
2c:67:56:a3:59:0a:47:35:de:26:0b:cf:ea:27:e4:47:df:ec:
8d:d3:cc:47:5f:1a:0b:86:04:78:7e:32:77:d3:6a:b5:29:bc:
6d:b3:0c:5f:fb:35:b1:14:06:75:77:c7:43:dd:94:e2:cd:40:
98:1f:08:a6:23:b7:79:79:8c:05:fd:d5:0a:0c:b9:60:18:37:
de:d0:ac:0d:ee:40:88:5b:d8:6c:a3:81:59:eb:71:cb:d3:e8:
a0:f0:1a:5f:e6:20:e4:05:d7:37:21:e5:3d:c3:dd:84:e8:2e:
41:6d:b5:77:a2:d0:48:77:09:11:8b:ca:5e:ae:12:0c:93:83:
00:cf:3b:77:b2:53:f5:f5:77:7d:9c:00:f8:55:59:92:28:0b:
bc:65:c6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:26 2026 by rpki-client