Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
File: By4pytat0iohtWIVEYeEHI9T8uU.mft (raw, json)
Hash identifier: Rb2xkihNW5mUgwSPXqJeY8TD+M4XHyj2v0BY+FaSGDA=
Subject key identifier: F5:4E:1C:0D:AB:AC:F7:82:8E:3F:69:E1:E2:7C:DE:5C:2E:AD:EC:9D
Authority key identifier: 07:2E:29:CA:D6:AD:D2:2A:21:B5:62:15:11:87:84:1C:8F:53:F2:E5
Certificate issuer: /CN=072e29cad6add22a21b562151187841c8f53f2e5
Certificate serial: 019F8EA2E6E6067FCF7B78442FBA91FE954C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
Manifest number: 89
Signing time: Thu 23 Jul 2026 11:01:08 +0000
Manifest this update: Thu 23 Jul 2026 11:01:08 +0000
Manifest next update: Fri 24 Jul 2026 11:01:08 +0000
Files and hashes: 1: By4pytat0iohtWIVEYeEHI9T8uU.crl (hash: xNy0wwU22yttPu4JGvpmpOzWtbQamWJ9fPoSIqROI6Q=)
2: NcP6QLbPAGbSnMuOHGBdAIY-8qc.roa (hash: w5wTWXfJi4JyaAkM3S35Sztsv2m7MFD4x5Xkavn1W38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:e6:e6:06:7f:cf:7b:78:44:2f:ba:91:fe:95:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=072e29cad6add22a21b562151187841c8f53f2e5
Validity
Not Before: Jul 23 11:01:08 2026 GMT
Not After : Jul 24 11:01:08 2026 GMT
Subject: CN=f54e1c0dabacf7828e3f69e1e27cde5c2eadec9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:2d:6d:7c:9b:e1:0f:ba:8e:fe:d7:30:1f:
6f:66:ce:68:a6:e7:38:e7:4b:d6:08:9a:9e:d2:7b:
55:95:91:f1:64:d0:36:a5:f3:98:5a:d3:77:20:dc:
c7:eb:a8:e2:0c:bb:d9:49:ae:38:39:3a:b2:b2:f9:
d2:0e:92:c6:41:88:d3:45:4a:0e:8f:d7:c1:09:4d:
cc:4f:55:3d:49:42:e9:9d:5a:99:02:47:fe:e2:40:
08:cc:58:0f:c5:12:14:a7:3b:cc:c7:06:01:08:5c:
c9:b0:cd:63:0e:19:ef:24:b8:dd:f9:1e:26:81:3c:
e2:ee:2e:2a:a4:09:5e:f9:53:d1:56:c2:fd:d5:7d:
8b:94:b1:0d:e0:0a:60:e9:fd:1d:59:e5:9c:11:1f:
d8:63:c0:4e:b5:da:93:93:d6:3b:57:1c:35:93:5a:
a3:c9:7e:c8:38:8c:44:e7:ba:0c:ae:bb:6a:01:87:
56:55:27:aa:69:ff:5b:aa:b0:31:a0:41:48:8d:d2:
d2:fa:1e:42:11:69:1c:f9:30:d7:b8:e7:88:74:42:
8f:7e:0a:5c:25:a4:f2:f9:89:93:e4:6f:cf:d4:98:
f0:96:2b:ea:15:f1:2d:e3:b8:eb:5d:9b:e5:c9:79:
96:cb:e6:9a:6a:53:d5:1c:74:00:e3:7a:84:49:24:
d0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4E:1C:0D:AB:AC:F7:82:8E:3F:69:E1:E2:7C:DE:5C:2E:AD:EC:9D
X509v3 Authority Key Identifier:
keyid:07:2E:29:CA:D6:AD:D2:2A:21:B5:62:15:11:87:84:1C:8F:53:F2:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By4pytat0iohtWIVEYeEHI9T8uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/abe161-6e7d-4c3f-8b08-71b450fbafbc/1/By4pytat0iohtWIVEYeEHI9T8uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3b:e4:f0:cf:76:97:da:42:81:3b:ca:ab:dc:a5:77:9d:f1:
ef:51:b6:7a:69:38:7c:70:a0:19:39:30:41:3f:bd:69:01:0c:
c3:6f:95:5b:7a:52:91:b5:62:c2:b8:11:dc:de:dd:d0:88:b3:
f5:3a:93:68:f7:4a:67:ab:18:30:50:44:c4:50:d4:54:58:5b:
cf:3f:28:9a:54:77:69:00:4d:91:76:a6:bb:c9:36:0a:d1:84:
49:22:f2:73:f4:0b:9c:4f:04:a4:8c:b8:4a:74:aa:2d:f0:79:
a4:54:17:7f:7c:db:11:40:69:4f:56:b0:91:fe:77:2c:7d:27:
32:e5:2a:2b:85:88:88:77:f2:90:96:8d:dc:03:03:ae:60:ba:
81:7a:25:6c:27:15:7c:99:19:50:7e:8e:c6:11:7a:00:70:b8:
c4:59:cc:5c:96:94:3e:50:22:4c:f4:16:fc:47:20:39:19:63:
0a:09:24:0b:05:74:9c:23:f8:2e:78:7e:13:f1:9f:88:83:6c:
c3:b1:0f:68:9a:d7:34:78:1f:d3:cd:0e:71:03:22:87:d5:91:
f0:c3:3b:e7:70:98:da:b9:d4:12:30:f8:9c:33:ed:fa:14:b3:
37:80:13:32:9d:fe:90:ed:f9:46:de:a8:af:c3:3f:47:db:c6:
d2:8e:65:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:17 2026 by rpki-client