Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.mft
File: byhVbwoxXBallRWO0VmiXqpkOEg.mft (raw, json)
Hash identifier: dDEaz9kWV1Dzpu6huGf3UrDzto7SBChNmVdhwBcT8g4=
Subject key identifier: DE:A0:BF:63:CC:26:95:EE:9F:49:DA:47:56:79:70:B6:14:A4:CE:4B
Authority key identifier: 6F:28:55:6F:0A:31:5C:16:A5:95:15:8E:D1:59:A2:5E:AA:64:38:48
Certificate issuer: /CN=6f28556f0a315c16a595158ed159a25eaa643848
Certificate serial: 019D25F16CD967D28C3578A4865E83CECC12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byhVbwoxXBallRWO0VmiXqpkOEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.mft
Manifest number: EF
Signing time: Wed 25 Mar 2026 17:01:12 +0000
Manifest this update: Wed 25 Mar 2026 17:01:12 +0000
Manifest next update: Thu 26 Mar 2026 17:01:12 +0000
Files and hashes: 1: byhVbwoxXBallRWO0VmiXqpkOEg.crl (hash: hqajIMs7m586WnhvAfFTqHQv82VZBC25WxKSI09NLt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/byhVbwoxXBallRWO0VmiXqpkOEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:6c:d9:67:d2:8c:35:78:a4:86:5e:83:ce:cc:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f28556f0a315c16a595158ed159a25eaa643848
Validity
Not Before: Mar 25 17:01:12 2026 GMT
Not After : Mar 26 17:01:12 2026 GMT
Subject: CN=dea0bf63cc2695ee9f49da47567970b614a4ce4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:0a:c0:bf:65:39:cd:f8:4c:2e:34:10:42:
2d:6b:44:78:81:a1:49:27:47:f8:84:7a:50:05:18:
42:44:ea:6e:0f:05:10:86:60:c0:05:14:df:f3:48:
6b:26:d6:fa:04:3c:b3:b8:a6:d1:bc:53:ad:5f:a9:
c1:80:f1:2c:f4:86:3c:43:ad:41:26:81:2b:2b:34:
f7:95:f0:47:31:ee:a9:fb:13:cc:9d:99:61:ae:cb:
88:fb:e4:c2:75:f3:a0:cc:0c:b2:be:44:d2:ed:19:
04:fc:e3:af:07:7c:fe:08:eb:80:4c:a7:ac:87:d7:
94:f5:a6:54:03:27:26:78:5c:20:b9:ca:a3:27:61:
9b:1a:bc:37:a1:be:5b:bd:49:b8:ae:c5:34:c3:9a:
2f:3e:1c:14:8c:0e:e3:09:04:a3:40:80:b7:bf:9a:
c0:41:06:93:dd:47:03:f7:d1:61:06:f3:c5:3e:54:
2d:42:46:5c:33:8e:4e:77:e9:00:13:e5:61:3a:78:
ee:68:53:83:ad:c8:46:a3:54:a8:46:0b:46:b1:56:
59:6e:d5:f1:9f:15:63:8f:43:0f:29:3e:92:05:16:
eb:60:a0:fb:cf:09:b9:68:8a:74:18:a6:3e:b8:9e:
d7:83:f1:b7:7d:cf:c5:ab:82:17:a5:08:b3:6e:7f:
a0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A0:BF:63:CC:26:95:EE:9F:49:DA:47:56:79:70:B6:14:A4:CE:4B
X509v3 Authority Key Identifier:
keyid:6F:28:55:6F:0A:31:5C:16:A5:95:15:8E:D1:59:A2:5E:AA:64:38:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byhVbwoxXBallRWO0VmiXqpkOEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/462d76-a5d4-41e5-8754-637afe4603a8/1/byhVbwoxXBallRWO0VmiXqpkOEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:12:67:50:fb:ad:86:22:3c:3d:96:36:56:40:7b:b0:08:93:
90:44:20:48:bb:7e:bd:fc:3e:46:58:1e:9a:4b:2f:7e:5c:a7:
77:4d:d8:20:34:56:a0:a9:05:a5:75:f9:d8:0a:68:4e:9b:b1:
ee:67:90:ba:c0:ef:42:fb:68:fc:1a:99:81:76:b5:55:de:e4:
c4:d5:e2:aa:07:87:5d:14:89:4d:27:39:62:9b:f0:0e:87:04:
bc:7d:84:a3:a4:73:1e:31:8d:4b:9f:41:9f:82:d2:02:af:a2:
f6:97:69:63:db:9c:74:cb:59:73:af:eb:8d:6d:de:40:18:02:
7b:a3:27:e1:4e:b8:b8:14:f8:fd:ea:76:33:63:9b:f9:eb:23:
86:41:c9:cd:48:b1:b4:67:58:a6:c3:e6:19:1d:0d:3b:54:41:
b3:19:a4:f0:9d:ba:2c:8f:7a:0c:20:4d:4d:6c:33:45:50:09:
f4:d5:98:a0:5e:f2:86:2b:6a:af:e0:ec:06:aa:04:9b:38:95:
d6:0f:b2:30:09:83:3a:3d:96:a2:c2:66:db:19:97:7b:fe:13:
03:92:63:26:45:07:1e:9d:18:76:1f:e6:e1:3f:dd:70:6b:c2:
b8:a0:68:2b:a2:12:73:b2:08:82:c6:32:e1:e6:f3:fb:f6:ea:
17:be:41:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:28:38 2026 by rpki-client