Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: BHbGT/gLgOCSGaNkSSAUy8aVIs+Fnu28T6UaNnyzP/0=
Subject key identifier: 60:19:45:E8:52:33:D2:9D:35:81:17:5C:26:6E:7A:69:93:FF:1F:FC
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 019F84C398F8B672AB7E5915421170ED4BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 19C3
Signing time: Tue 21 Jul 2026 13:00:38 +0000
Manifest this update: Tue 21 Jul 2026 13:00:38 +0000
Manifest next update: Wed 22 Jul 2026 13:00:38 +0000
Files and hashes: 1: 24Hwto-BpXx4ZNDaWCPO8Ea-hlI.roa (hash: iK9kCH46Oumb8kgSKUedbFMHCOpgazvLt/ANMQHFNJk=)
2: E2NnSe5NuOHhL4ajAD4aa5625AY.roa (hash: CIz3bLXnaMH+1qCOJajgF0xRNJovS7BqhLlnYiNKk0E=)
3: HW1ashBasiojQ_LVw9DqjgRziMs.roa (hash: R6zhs8qmlAdGi+Y1a0OCpm5B+xrqM0N62A7QRk/r6lA=)
4: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: 3DwMFJ0sJE3EPwI5dWohIqw5xi95lM4dVMj/IqAPmVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:98:f8:b6:72:ab:7e:59:15:42:11:70:ed:4b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Jul 21 13:00:38 2026 GMT
Not After : Jul 22 13:00:38 2026 GMT
Subject: CN=601945e85233d29d3581175c266e7a6993ff1ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:62:2b:31:be:d5:e7:ff:10:6d:66:9a:b8:63:
bc:af:3b:a7:b6:dd:51:0e:59:a0:89:d0:96:70:ce:
43:28:9e:84:85:18:41:74:e4:a4:f2:54:36:27:33:
85:ee:37:9b:ee:1d:1f:1d:1e:1b:a0:1e:39:8b:61:
2b:ed:6b:8b:1f:0b:3c:33:90:22:45:c6:25:37:e2:
51:2c:11:f9:87:4a:eb:f1:a6:ee:b9:93:0f:33:1c:
6a:fc:20:73:1f:35:57:c9:37:83:3f:b3:0d:92:f2:
a5:ab:56:94:8a:f2:b2:93:09:2e:5c:13:60:d4:f9:
66:a6:84:bf:c6:a0:05:d3:59:4e:86:57:31:ef:6e:
f8:3e:38:6a:c2:94:2b:40:98:2e:79:57:cd:59:67:
89:bd:ef:d1:e1:17:06:d9:a5:f5:eb:d5:8a:10:08:
78:7c:67:d1:02:b2:f5:03:7c:d8:f9:88:76:24:54:
b7:16:bc:8c:e5:90:5c:7a:e4:fa:a0:6c:89:16:79:
2b:17:2a:89:3e:25:17:d5:4c:af:ef:11:ab:df:3d:
bc:be:a1:06:64:c9:2b:39:8b:20:79:e7:29:de:32:
34:32:80:ed:39:71:14:28:46:51:6a:ea:4b:f0:3b:
44:81:8a:e5:31:bf:12:cf:c4:d0:6e:51:f3:bd:0c:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:19:45:E8:52:33:D2:9D:35:81:17:5C:26:6E:7A:69:93:FF:1F:FC
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:df:2e:0f:d1:01:da:8b:ca:88:7a:0a:6c:b1:c0:6d:68:6b:
f3:96:80:a0:9a:31:c0:47:5a:ff:1c:1f:30:fd:c3:3d:47:27:
b1:9d:62:8c:d8:e0:9b:95:4e:87:ec:4a:a5:d4:aa:6d:40:40:
fd:21:61:b2:a9:97:dc:ca:85:0a:4a:4c:b6:f8:8c:9c:89:ae:
c3:68:e6:e7:39:ba:05:b3:3e:17:10:a5:b8:64:e7:4e:6b:08:
48:f7:08:17:34:35:11:65:61:a0:fe:c4:bb:a3:f3:64:a8:a7:
1a:87:18:b1:f7:05:8a:6a:b5:82:86:c4:c4:3c:55:1f:1d:a4:
16:e1:01:11:22:df:50:fd:97:3d:a0:6c:fc:33:0e:a8:e7:a7:
c4:da:37:c0:83:aa:0b:65:31:74:02:57:d0:6a:e1:46:bd:14:
ca:d4:a6:44:7b:3e:c5:dc:22:e0:fd:28:fa:cf:36:a7:bc:fa:
32:fc:6f:f8:f7:3d:7f:60:4d:68:f6:34:ea:83:47:2f:33:c5:
5d:69:53:65:e1:46:11:47:19:e4:c0:7f:68:05:38:b7:e0:73:
eb:47:eb:30:73:36:17:18:03:aa:ef:14:6a:9a:0d:29:cd:e9:
c6:2e:0a:12:32:9b:cc:aa:02:a8:cf:99:d5:0f:29:92:5e:1f:
94:f1:45:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:17:42 2026 by rpki-client